Command Line Interface

1.Modify the /etc/services file as follows. Change lines starting with ’radius’ and ’radacct’ to the socket numbers you wish. For example:

radius 1645/tcp radius 1645/ucp radacct 1646/tcp radacct 1646/ucp

2. After editing /etc/services copy it to /usr2

cp /etc/services /usr2

3. Edit /usr2/rc.user and add the following line just above "exit 0":

cp -a /usr2/services /etc/services

4. Reboot

reboot

Note: If you factory default the unit, the ’/usr2/rc.user’ script file is moved to ’/usr2/ rc.user.old#’ and the default rc.user file will be restored.

Example Script: Limiting root access to the console on Digi CM products (for SSH only)

This prevents root access from any means except physically logging in on the Digi CM console.

1.Modify ’/etc/inetd.conf’ and append -f /usr2/sshd_configto the sshd line. cp /etc/inetd.conf /usr2/inetd.conf

2.Edit ’/etc/ssh/sshd_config’. Change "PermitRootLogin" to no. cp /etc/ssh/sshd_config /usr2

3.Add the following commands in the ’/usr2/rc.user’ script. Add these

commands just above "exit 0":

cp -a /usr2/inetd.conf /etc/inetd.conf

while killall inetd 2>/dev/null;

do sleep 5;

done

/usr/sbin/inetd

4. Reboot

reboot

Note: If you factory default the unit, the ’/usr2/rc.user’ script file is moved to ’/usr2/ rc.user.old#’ and the default rc.user file will be restored.

Example Script: Sending a break from an existing session with the Digi CM

From a Telnet session - If the Telnet was initiated from a UNIX command line Telnet client. Issuing the Telnet escape sequence ’^]’ (control- right_square_bracket) will take you to the ’telnet>’ prompt.

telnet>send brk

Note: Other Telnet clients often have a "send break" option.

From an ssh session - Type the [tilde-break] which is the default ssh break characters.

~break

Chapter 15

121

Page 121
Image 121
Digi Digi CM manual After editing /etc/services copy it to /usr2