_______________________________________________________________________________ DEC Terminal Server Basics Written by Mad Hacker {the original} on 09/10/88 A Telecom Computer Security Bulletin File Volume One, Number 1, File 11 of 12 _______________________________________________________________________________ This is the A B C's of using a DEC terminal server. A DEC terminal server can be quite a handy thing if you know a few of it's basic commands. Ok enough said, time to log in.... LOGGING INTO THE DECSERVER: To login to the DECserver you may be required to enter a login password. But to tell the truth, most DECservers are not password protected. It seems that most people don't think of a DECserver as a possible weak link in their security. I guess they feel that the server is not a computer and so it is not a thing that needs to be protected. This is a very serious mistake! Many computer systems have been compromised by the lax security of the external devices hooked to them, in this case, the DECserver. If you need to log in, this is how to do it. 1. Press twice; a number sign (#) appears along with an audible beep. 2. Enter the login password. For example, to log in with the password HACKER enter twice # HACKER type the password (which is not echoed) 3. If you make a mistake, the prompt reappears (and the "beep") to let you try again. You have several chances to enter the correct password. 4. If you use a dial-in modem, you have 60 seconds to respond to the # prompt with the correct password. If you don't, the server disconnects your modem. If you do not need to enter a login password, {that is how most are setup}, just press twice and you are in. When you log in, an introductory line of text appears... DECserver 200 Terminal Server V1.0 - LAT V5.1 If your port does not have a permanent username defined, enter your name (1 to 16 keyboard characters) after the following text appears... Please type HELP if you need assistance Enter username> MAD_HACKER The Local> prompt appears after you type your username. If your port does have a permanent username, here's what you see... Please type HELP if you need assistance Local> USING ONLINE HELP: Online help is documentation about DECserver commands that is stored in server memory. You can see this documentation interactively on your terminal while you are using the DECserver. The HELP command gives you access to online help. You can use it in one of two ways: You can type HELP at the Local> prompt... Local> HELP This generates a succession of HELP "frames", "menus", and prompts. Frames are made up of the information that can fit on one or more terminal screens. Menus are lists of topics you can choose from. Alternatively, you can specify topics and subtopics when you enter the HELP command. For example... Local> HELP SET PORT This command produces online documentation that describes the SET PORT command. SOME DEFINITIONS: The primary function of the DECserver is to allow you to connect to "services" offered on your network. A service can be a computer system that you can use just as though your terminal were attached directly to the system, or it can be a function offered by such a system. In addition, services can be set-up to allow access to printers, out-dial modems, personal computers and terminal switches. To connect to a service, you only need to know the service name. _______________________________________________________________________________ A NOTE ABOUT OUT-DIALS CONNECTED TO A DECserver: When an outdial modem is put on the DECserver and some local hacks find it, well you get the picture.....the company that own's it will often get a 100-500 page bill from the phone company. After that happens, the company that is the proud owner of a $5000.00 phone bill will often decide to password protect the DECserver. On the other hand, the out-dial may be run off a flat rate SPRINT or WATS line. If that is the case the out-dial will live a long and non-password protected life... :-) _______________________________________________________________________________ DEFINITIONS CONTINUED: A "service node" is a computer system or server that offers services. A "session" is a connection to a service. You can have one or more simul- taneous sessions with one service, or more than one service. The connection you are using at any one time is called your "current session". Your other sessions are inactive, but can be resumed by using server commands or session switches. "Service mode" is your environment when you interact with a service. For example, if the service is a computer system, your environment is the same as a terminal directly wired to the system. You can all use the system's commands and resources. "Local mode" is your environment when you interact with the DECserver using commands entered at the Local> prompt. CONNECTING TO A SERVICE: Use the local mode SHOW SERVICES command to display a list of services you can use. Local> SHOW SERVICES To connect to a service (establish a session with the service) enter the DECserver CONNECT command with the name of the service you want. For example, for a service called MEGA-SYSTEM, enter the following command: Local> CONNECT MEGA-SYSTEM This command places you in service mode in an active session with the service MEGA-SYSTEM. In this case, MEGA-SYSTEM is a CRAY with 200 GIG on-line. RETURNING TO LOCAL MODE FROM A SERVICE SESSION: To return to local mode without ending your session, press or press your local switch character. Both these characters are, in effect, DECserver commands that instruct the server to go back to local mode. The character must be set up to permit this (by default it is), and the local switch character must be defined (by default it is not). Use the HELP command for more details on setting up the character and local switch character. *** NOTE *** Some modems interprets the character as a command to end your dial-in connection. If you are using one of these modems, do not use to return to local mode. Your session, now inactive, is still your current session because it is the session your were using most recently. RESUMING YOUR SERVICE SESSION FROM LOCAL MODE: To resume your current session (and service mode) while your are in local mode, enter the DECserver RESUME command. Local> RESUME You go back to where you left off when before returning to local mode. DISCONNECTING FROM A SERVICE: To end your current session while in service mode, use the command that terminates whatever process you are using. For example, you can terminate a session on a VAX/VMS system by typing the VMS LOGOUT command. Refer to the documentation for the service node that offers the service. To end your current session while in local mode, enter the DECserver DISCONNECT command. Local> DISCONNECT You cannot resume a service session after you end the connection with DISCONNECT. CONNECTING TO A SECOND SERVICE: The DECserver allows you to have several sessions at one time, to the same or to different services. To connect to a second (or subsequent) service, simply enter another CONNECT command from local mode, specifying the name of the service. For example, to connect to the service OUT-DIAL, enter the following command: Local> CONNECT OUT-DIAL To resume one of your non-current sessions, use the FORWARDS command to switch to your next session, or the BACKWARDS command to switch to your previous session. Alternatively, you can use the RESUME command and specify the session number. You can find this number from the SHOW SESSIONS display: Local> RESUME SESSION 2 To disconnect a particular session, use the DISCONNECT command and specify the session number. For example: Local> DISCONNECT SESSION 1 LOGGING OUT OF THE DECSERVER: To logout from the DECserver, enter the DECserver LOGOUT command (in local mode). Local> LOGOUT LOGOUT disconnects all sessions. A DECserver message appears verifying the logout. Well that is about it for now. There are a number of other nice commands but you should be able to find your way around now. Happy Hack'n.... Downloaded From P-80 Systems 304-744-2253