DCO & DCE - running command in Linux will impact any service?

[Neethi_Pothan]

Hi,

One of our client has requested for server login credentials to run command on it, as they are integrating DCE & DCO(installed in their server console) with SIM tool(client tool) for collecting Linux/Unix server logs. 

Q1. Is it allowed for client to login and perform to run commands for their purpose?

Q2. Would it affect the performance of the DCE & DCO?

[Jef · Accepted solution]

Hi Neethi,

For DCE, it is not allowed to access the server.

For DCO (or ITA), it is allowed to access the server, but any additional installations may be the responsibility of the customer. I think it may affect the server performance as well, specially if we are talking about transferring large files (between the systems/servers). Assuming "changes(installations" not affecting the DCO server and its functionality, then demanding jobs such as transferring the large files could be scheduled outside of the normal working hours. Please also note the server may also have its own scheduled jobs (such as daily backups), which should not be interrupted.

Kind regards,

Jef

[Neethi_Pothan]

@Jef 

Thanks a lot for quick response and support, Jef! 

[Jef]

You are most welcome, Neethi

Kind regards,

Jef

[Neethi_Pothan]

@Jef 

Jef, Just a quick clarification, and for understanding, May i know the reason why its not allowed to access server? and are there any other solution for customer for running the server for log collection?

[Jef · Accepted solution]

Hi Neethi,

It has always been like this that DCE only permits access via desktop client and web/dashboard. All the usual configuration and administrations are designed to be accessible via the desktop client. Logs can be collected from the web interface. This is how it has been designed to work.

Kind regards,

Jef

[Neethi_Pothan]

@Jef 

Thanks again for the clarification, Jef! 

[Jef]

You are welcome, Neethi

Kind regards,

Jef

[Neethi_Pothan]

HI, 

DCO server password was able to be reset successfully by following steps from Resetting-user-password-on-the-DCO-server article, but while client gets the below errors while logging in. 

During multiple try, it sometimes go to next page and gives below error.

If client access via telnet port 10000, its also showing open.

Could you please help on this?

[gsterling]

Hello Neethi

This is a CentOS installation? You mentioned you reset the user password for DCO, so you reset the root user's password for the DCO server?

I assume you are able to successfully logon to the DCO server via SSH using a tool like putty? Direct logon to the CentOS OS as root is not normally allowed unless you overrode that security setting.

Assuming this is a CentOS installation, there is usually a separate user account which is defined during installation and used as the administrator. This username should be in the /etc/passwd file near its end ... the name of the user is set by the customer during installation so there's no default username I could suggest you look for.

If you find that user, are you able to logon to webmin using that user account?

Regards

Greg Sterling

[Neethi_Pothan]

@gsterling Hi Greg,

This is CentOS installation. Im attaching the file of screenshots which client has shared during reset and after reset of root password. Please have a look at it.

Meantime, I will check with client to find the user details from  /etc/passwd , which you mentioned in the earlier post. 

Please do suggest if you find any solutions from the screenshot.

[gsterling]

Hello Neethi

Please note, in default DCO/ITA installations on CentOS direct logon to the console is not permitted. There is an entry in the sshd_config file which states "PermitRootLogin no" which means root cannot logon to the console.

So there should be another user account in your /etc/passwd file which you can use to ssh to your server and then "sudo" to root.

On many systems customers add an "apc" user, but it could be anything. I can tell you users "dcoplat", "dcojboss", and "postgres" are reserved for the installer in the passwd file so its not one of those.

The userid field for the user is likely 1000 or greater unless it was manually created.

Regards

Greg Sterling