i6000 Arrival

The i6000 arrived yesterday. It's unpacked, off the skid, and in the garage. After putting a few bolts back in (holds the two chassis together) and bolting a few other things back on it's powering up and robotics are on. It shows as online.

However the drives aren't showing up. The UI indicates a few issues probably related to the CAN bus. That all seems connected though. So I'm not sure what's up right now.

Scalar i500, i2000, and i6000 Security - Service Account

If you're using a Quantum, Dell, or ADIC Scalar product you should check to see if the password of the GUI's 'service' account is static. If it is then there is a pretty trivial way to get into the system using the vendor's maintenance account. The one system I have access to, an i2000, has a login of service:10101100. 

Scalar i500, i2000, and i6000 Security - Service Port

If you're using a Quantum, Dell, or ADIC Scalar product you need to make sure the 'service port' isn't remotely accessible. If it is then there is a pretty trivial way to get into the system as 'root'. The port is explicitly listed in the manual as not for "normal" use. 

tl;dr If you aren't plugging in stuff you shouldn't (per manual) then the risk isn't that bad. 

Logging In As root - Scalar i2000 (and maybe i6000)

  1. Connect to the service port
    1. It's that little black covered on that says not to use
  2. Set your ip to 10.10.1.100
    1. The last octet can be anything but .1
  3. Use 'telnet' to connect to 10.10.1.1
  4. Login with "root" and "dallas"

 

I found this by using john the ripper on /etc/shadow in 10.10.1.1:/tftpboot/cmboot/initrd-dmcb (NFS). The initrd is gzip'ed. Once unzipped you can mount it with a loop device.

 

/etc/passwd

 

Subscribe to i6000