[mshulman1980]

The organization I work for has about 20 of us who require regular access to the VIO servers across a few dozen of 595 frames.
We're looking to lock down to the VIO servers to make it a little easier to figure out who did what. Does anyone know of a reason why we shouldn't turn rlogin off on padmin and create local user accounts on the VIO partitions, so that everyone would be forced to su - to the padmin account? (The root pw would still remain unaccessable, so everyone would have to su - padamin and then oem_setup_env )

[cdelgadop]

Hi

I think you better install openSSH and select one VIOS as centralized manager, then export the keys of all userid admins to the other VIOS so you can open sessions without password prompt, you can even use the dsh program in order to exec commands and shells from this central site.

Hope this helps

[mshulman1980]

Thanks for replying....
OPpenSSH is an excellent idea. We use a product to manage our local IDs across all of the AIX systems, so I don't think it will be nessesary to exchange keys.
Basically I'm just looking to have some ability to track who is doing what on the VIO servers. Remote command execution from outside of a very restricted arena makes me nervous in any environment.