_______________________________________________________________________________
DEC Terminal Server Basics
Written by Mad Hacker {the original} on 09/10/88
A Telecom Computer Security Bulletin File
Volume One, Number 1, File 11 of 12
_______________________________________________________________________________
This is the A B C's of using a DEC terminal server. A DEC terminal server can
be quite a handy thing if you know a few of it's basic commands. Ok enough
said, time to log in....
LOGGING INTO THE DECSERVER:
To login to the DECserver you may be required to enter a login password. But
to tell the truth, most DECservers are not password protected. It seems that
most people don't think of a DECserver as a possible weak link in their
security. I guess they feel that the server is not a computer and so it is not
a thing that needs to be protected. This is a very serious mistake! Many
computer systems have been compromised by the lax security of the external
devices hooked to them, in this case, the DECserver.
If you need to log in, this is how to do it.
1. Press twice; a number sign (#) appears along with an audible beep.
2. Enter the login password. For example, to log in with the password HACKER
enter twice
# HACKER type the password (which is not echoed)
3. If you make a mistake, the prompt reappears (and the "beep") to let you
try again. You have several chances to enter the correct password.
4. If you use a dial-in modem, you have 60 seconds to respond to the #
prompt with the correct password. If you don't, the server disconnects
your modem.
If you do not need to enter a login password, {that is how most are setup},
just press twice and you are in.
When you log in, an introductory line of text appears...
DECserver 200 Terminal Server V1.0 - LAT V5.1
If your port does not have a permanent username defined, enter your name (1 to
16 keyboard characters) after the following text appears...
Please type HELP if you need assistance
Enter username> MAD_HACKER
The Local> prompt appears after you type your username.
If your port does have a permanent username, here's what you see...
Please type HELP if you need assistance
Local>
USING ONLINE HELP:
Online help is documentation about DECserver commands that is stored in server
memory. You can see this documentation interactively on your terminal while
you are using the DECserver. The HELP command gives you access to online help.
You can use it in one of two ways:
You can type HELP at the Local> prompt...
Local> HELP
This generates a succession of HELP "frames", "menus", and prompts. Frames
are made up of the information that can fit on one or more terminal screens.
Menus are lists of topics you can choose from.
Alternatively, you can specify topics and subtopics when you enter the HELP
command. For example...
Local> HELP SET PORT
This command produces online documentation that describes the SET PORT command.
SOME DEFINITIONS:
The primary function of the DECserver is to allow you to connect to "services"
offered on your network. A service can be a computer system that you can use
just as though your terminal were attached directly to the system, or it can
be a function offered by such a system. In addition, services can be set-up
to allow access to printers, out-dial modems, personal computers and terminal
switches. To connect to a service, you only need to know the service name.
_______________________________________________________________________________
A NOTE ABOUT OUT-DIALS CONNECTED TO A DECserver:
When an outdial modem is put on the DECserver and some local hacks find
it, well you get the picture.....the company that own's it will often get
a 100-500 page bill from the phone company. After that happens, the company
that is the proud owner of a $5000.00 phone bill will often decide to
password protect the DECserver. On the other hand, the out-dial may be run
off a flat rate SPRINT or WATS line. If that is the case the out-dial will
live a long and non-password protected life... :-)
_______________________________________________________________________________
DEFINITIONS CONTINUED:
A "service node" is a computer system or server that offers services.
A "session" is a connection to a service. You can have one or more simul-
taneous sessions with one service, or more than one service. The connection
you are using at any one time is called your "current session". Your other
sessions are inactive, but can be resumed by using server commands or session
switches.
"Service mode" is your environment when you interact with a service. For
example, if the service is a computer system, your environment is the same as a
terminal directly wired to the system. You can all use the system's commands
and resources.
"Local mode" is your environment when you interact with the DECserver
using commands entered at the Local> prompt.
CONNECTING TO A SERVICE:
Use the local mode SHOW SERVICES command to display a list of services you can
use.
Local> SHOW SERVICES
To connect to a service (establish a session with the service) enter the
DECserver CONNECT command with the name of the service you want. For example,
for a service called MEGA-SYSTEM, enter the following command:
Local> CONNECT MEGA-SYSTEM
This command places you in service mode in an active session with the service
MEGA-SYSTEM. In this case, MEGA-SYSTEM is a CRAY with 200 GIG on-line.
RETURNING TO LOCAL MODE FROM A SERVICE SESSION:
To return to local mode without ending your session, press or press
your local switch character. Both these characters are, in effect, DECserver
commands that instruct the server to go back to local mode.
The character must be set up to permit this (by default it is), and
the local switch character must be defined (by default it is not).
Use the HELP command for more details on setting up the character and
local switch character.
*** NOTE ***
Some modems interprets the character as a command to end
your dial-in connection. If you are using one of these modems,
do not use to return to local mode.
Your session, now inactive, is still your current session because it is the
session your were using most recently.
RESUMING YOUR SERVICE SESSION FROM LOCAL MODE:
To resume your current session (and service mode) while your are in local
mode, enter the DECserver RESUME command.
Local> RESUME
You go back to where you left off when before returning to local mode.
DISCONNECTING FROM A SERVICE:
To end your current session while in service mode, use the command that
terminates whatever process you are using. For example, you can terminate a
session on a VAX/VMS system by typing the VMS LOGOUT command. Refer to the
documentation for the service node that offers the service.
To end your current session while in local mode, enter the DECserver DISCONNECT
command.
Local> DISCONNECT
You cannot resume a service session after you end the connection with
DISCONNECT.
CONNECTING TO A SECOND SERVICE:
The DECserver allows you to have several sessions at one time, to the same or
to different services. To connect to a second (or subsequent) service, simply
enter another CONNECT command from local mode, specifying the name of the
service. For example, to connect to the service OUT-DIAL, enter the following
command:
Local> CONNECT OUT-DIAL
To resume one of your non-current sessions, use the FORWARDS command to switch
to your next session, or the BACKWARDS command to switch to your previous
session. Alternatively, you can use the RESUME command and specify the session
number. You can find this number from the SHOW SESSIONS display:
Local> RESUME SESSION 2
To disconnect a particular session, use the DISCONNECT command and specify the
session number. For example:
Local> DISCONNECT SESSION 1
LOGGING OUT OF THE DECSERVER:
To logout from the DECserver, enter the DECserver LOGOUT command (in local
mode).
Local> LOGOUT
LOGOUT disconnects all sessions. A DECserver message appears verifying the
logout.
Well that is about it for now. There are a number of other nice commands but
you should be able to find your way around now. Happy Hack'n....
_______________________________________________________________________________
$