Netra[TM]/Sun Fire[TM] Servers: What to Do When You Have Lost the LOM Password

Asset ID:	1-71-1007399.1
Update Date:	2017-11-30
Keywords:

Solution Type Technical Instruction Sure

Solution 1007399.1 : Netra[TM]/Sun Fire[TM] Servers: What to Do When You Have Lost the LOM Password

Applies to:

Sun Netra 120 Server - Version All Versions and later
Sun Netra 20 Server - Version All Versions and later
Sun Netra T1 AC200 Server - Version All Versions and later
Sun Netra T1 DC200 Server - Version All Versions and later
Sun Netra X1 Server - Version All Versions and later
All Platforms

Goal

This document tells you what to do when you have lost the LOM(Lights Out Management) password on the following servers:

Netra[TM] X1, Sun Fire V100/V120, Netra[TM] 100/120, Netra [TM]20, Netra [TM]T1 AC/DC 200.

Solution

Steps to Follow
If you do not know your LOM password and are unable to log into the LOM prompt, you can use the telnet command and log in as root on the console.

If you do not know your LOM password and are unable to log into the LOM prompt, and you can not log in to the box due at least one of the following:

-You do not knowing the IP address or the host name.
-The system is not configured to allow root logons from non-system
console.

Follow the steps below if both of the following conditions are true:

-You still remember the root password and IP address of the machine.
-The machine is configured to allow root login from non-system consoles.

1. Apply power to the system.

2. To get the system to boot, use the power switch on the rear of the machine to start the automatic boot process.

3. Once the system has had a few minutes to boot to UNIX, telnet or rlogin to the system as the root user from another machine on the network.

4. When you are logged in, edit the /platform/sun4u/kernel/drv/lom.conf file and modify the line that reads "serial_security=1" to read "serial_security=0".

Note: If Lights Out Management has not been installed on Solaris, you will not be able to see 'lom.conf' file. The file is included in SUNWlomr package. Please check it via pkginfo(1M).
If it is not installed yet, need to install Light Out Management software.
It is available at supplement CD.

5. Write the modified file and then reboot the machine by issuing an "init 6" or a "reboot" command.

  As the system boots, it examines this file as part of the boot process and disables the security passwords setup in the LOM processor, allowing access to the LOM without passwords.

6. On the LOM/Console port, issue the "#." escape sequence to access the LOM and use the "usershow" command to list the users that have been configured.

7. Use the "userdel" command to delete the users and their passwords.

  The system is now configured without serial security, to issue the "console" command to get back to the system console.

8. Edit the /platform/sun4u/kernel/drv/lom.conf file and modify the line that reads "serial_security=0" to read "serial_security=1" to re-enable the security checks following the next system reboot.

You will need to locate another machine to resolve the password problem if one of the following conditions are true:

-You cannot remember the system root password.
-The system is not configured to allow root logons from non-system consoles.
-You do not know the IP address of the machine.

1. Locate another server platform that does NOT have the above security problems.

Note: You will need to make some modifications to the machine's setup and then remove the boot drive from this machine and temporarily place it in the problem machine.

2. Having located another X1, make the following modifications to the configuration:

  a. Edit the /etc/default/login file on the machine and insert the number sign (#) at the start of the line that reads "CONSOLE=/dev/console".

  b. Edit the /platform/sun4u/kernel/drv/lom.conf file and modify the line that reads "serial_security=1" to read "serial_security=0".

3. Power down the machine using "init 5".

4. Remove the top cover of the machine and remove the boot disk drive.

5. Remove the boot disk drive from the problem machine.

6. Replace the boot disk drive from the problem boot disk with the boot disk you prepared in the other machine.

7. Boot the machine and follow the process above starting from Step 6 (immediately above).

8. Once the LOM passwords have been removed at Step 7 (immediately above), you may shut the system down and replace the original disk drive.

Product
Netra X1 Server
Netra 20 Server
Netra 120 Server
Sun Fire V120 Server
Sun Fire V100 Server
Netra T1 DC200 Server
Netra T1 AC200 Server

Attachments

This solution has no attachment