Mailing List Archive: pxe password protect option

pxe password protect option

May 14, 2007, 3:25 PM

Post #1 of 14 (8118 views)

Hi, I have tried several different line options, but I cannot seem to
get the pxe master password option to work?

I have basically tried all combinations of:

DEFAULT local

PROMPT 0

ALLOWOPTIONS 1

TIMEOUT 500

MENU TITLE sometitle

MENU MASTER PASSWD somepassword

But just can't seem to get the menu to prompt for a password.

version I have is pxe 3.31

Thanks for any help at all.

Jer

_______________________________________________
SYSLINUX mailing list
Submissions to SYSLINUX@zytor.com
Unsubscribe or set options at:
http://www.zytor.com/mailman/listinfo/syslinux
Please do not send private replies to mailing list traffic.

pxe password protect option [ In reply to ]

jerry.nelson at xilinx

May 14, 2007, 3:29 PM

Post #2 of 14 (8016 views)

Permalink

Re: pxe password protect option [ In reply to ]

hpa at zytor

May 14, 2007, 8:12 PM

Post #3 of 14 (8031 views)

Permalink

Jerry Nelson wrote:
> Hi, I have tried several different line options, but I cannot seem to
> get the pxe master password option to work?
>
> I have basically tried all combinations of:
>
> DEFAULT local
> PROMPT 0
> ALLOWOPTIONS 1
> TIMEOUT 500
> MENU TITLE sometitle
> MENU MASTER PASSWD somepassword
>
> But just can't seem to get the menu to prompt for a password.
>
> version I have is pxe 3.31
>

Can you post your config file, and explain in detail what you expect?

-hpa

_______________________________________________
SYSLINUX mailing list
Submissions to SYSLINUX@zytor.com
Unsubscribe or set options at:
http://www.zytor.com/mailman/listinfo/syslinux
Please do not send private replies to mailing list traffic.

Re: pxe password protect option [ In reply to ]

jerry.nelson at xilinx

May 15, 2007, 8:08 AM

Post #4 of 14 (8015 views)

Permalink

This is my config file for hpa. All I want to do is password protect
pxe,
>From all the threads and README's I read this "menu master passwd"
command should prompt me for a password before allowing me to boot
"test" label for example. I tried changes all options like prompt and
allowoptions to 0's and 1's already --thx
-----------------------------

DEFAULT local
MENU TITLE PXE BOOT MENU
MENU MASTER PASSWD test123

NOESCAPE 0
PROMPT 0
TIMEOUT 100
ALLOWOPTIONS 1

DISPLAY msgs/TopMenu.msg

F1 msgs/RHEL.msg
F2 msgs/SuSE.msg
F3 msgs/RHComm.msg
F4 msgs/WinSys.msg
F7 msgs/Maint.msg
F8 msgs/Xserver.msg
F9 msgs/Maint.msg

label local
localboot 0

label 0
localboot 0

label 300
kernel /i686/ws300/vmlinuz
append initrd=/i686/ws300/initrd.img ramdisk_size=9216
ks=nfs:149.199.37.74:/vol/vol02/syscfg/xsj/ks.300.32

label 302
kernel /i686/ws302/vmlinuz
append initrd=/i686/ws302/initrd.img ramdisk_size=9216
ks=nfs:149.199.37.74:/vol/vol02/syscfg/xsj/ks.302.32

... bunch more labels....

label test
MENU PASSWD test123
kernel i686/ws402/vmlinuz
append initrd=/i686/ws402/initrd.img lang= devfs=nomount
ramdisk_size=9216 ks=nfs:149.199.37.118:/vol/vol1/tses/ks/kstst.cfg
RHREL=402

------------------------------------------------------------------------
----

-----Original Message-----
From: syslinux-bounces@zytor.com [mailto:syslinux-bounces@zytor.com] On
Behalf Of H. Peter Anvin

Subject: Re: [syslinux] pxe password protect option

Jerry Nelson wrote:
> Hi, I have tried several different line options, but I cannot seem
to
> get the pxe master password option to work?
>
> I have basically tried all combinations of:
>
> DEFAULT local
> PROMPT 0
> ALLOWOPTIONS 1
> TIMEOUT 500
> MENU TITLE sometitle
> MENU MASTER PASSWD somepassword
>
> But just can't seem to get the menu to prompt for a password.
>
> version I have is pxe 3.31
>

Can you post your config file, and explain in detail what you expect?

-hpa

_______________________________________________
SYSLINUX mailing list
Submissions to SYSLINUX@zytor.com
Unsubscribe or set options at:
http://www.zytor.com/mailman/listinfo/syslinux
Please do not send private replies to mailing list traffic.

pxe password protect option [ In reply to ]

jerry.nelson at xilinx

May 16, 2007, 10:08 AM

Post #5 of 14 (8006 views)

Permalink

For some reason this didn't get posted?
>>
This is my config file for hpa. All I want to do is password protect
pxe,
>From all the threads and README's I read this "menu master passwd"
command should prompt me for a password before allowing me to boot
"test" label for example. I tried changes all options like prompt and
allowoptions to 0's and 1's already --thx
-----------------------------

DEFAULT local
MENU TITLE PXE BOOT MENU
MENU MASTER PASSWD test123

NOESCAPE 0
PROMPT 0
TIMEOUT 100
ALLOWOPTIONS 1

DISPLAY msgs/TopMenu.msg

F1 msgs/RHEL.msg
F2 msgs/SuSE.msg
F3 msgs/RHComm.msg
F4 msgs/WinSys.msg
F7 msgs/Maint.msg
F8 msgs/Xserver.msg
F9 msgs/Maint.msg

label local
localboot 0

label 0
localboot 0

label 300
kernel /i686/ws300/vmlinuz
append initrd=/i686/ws300/initrd.img ramdisk_size=9216
ks=nfs:149.199.37.74:/vol/vol02/syscfg/xsj/ks.300.32

label 302
kernel /i686/ws302/vmlinuz
append initrd=/i686/ws302/initrd.img ramdisk_size=9216
ks=nfs:149.199.37.74:/vol/vol02/syscfg/xsj/ks.302.32

... bunch more labels....

label test
MENU PASSWD test123
kernel i686/ws402/vmlinuz
append initrd=/i686/ws402/initrd.img lang= devfs=nomount
ramdisk_size=9216 ks=nfs:149.199.37.118:/vol/vol1/tses/ks/kstst.cfg
RHREL=402

------------------------------------------------------------------------
----

-----Original Message-----
From: syslinux-bounces@zytor.com [mailto:syslinux-bounces@zytor.com] On
Behalf Of H. Peter Anvin

Subject: Re: [syslinux] pxe password protect option

Jerry Nelson wrote:
> Hi, I have tried several different line options, but I cannot seem
to
> get the pxe master password option to work?
>
> I have basically tried all combinations of:
>
> DEFAULT local
> PROMPT 0
> ALLOWOPTIONS 1
> TIMEOUT 500
> MENU TITLE sometitle
> MENU MASTER PASSWD somepassword
>
> But just can't seem to get the menu to prompt for a password.
>
> version I have is pxe 3.31
>

Can you post your config file, and explain in detail what you expect?

-hpa

_______________________________________________
SYSLINUX mailing list
Submissions to SYSLINUX@zytor.com
Unsubscribe or set options at:
http://www.zytor.com/mailman/listinfo/syslinux
Please do not send private replies to mailing list traffic.

Re: pxe password protect option [ In reply to ]

hpa at zytor

May 16, 2007, 11:00 PM

Post #6 of 14 (8010 views)

Permalink

Jerry Nelson wrote:
> This is my config file for hpa. All I want to do is password protect
> pxe,
>>From all the threads and README's I read this "menu master passwd"
> command should prompt me for a password before allowing me to boot
> "test" label for example. I tried changes all options like prompt and
> allowoptions to 0's and 1's already --thx
> -----------------------------
>
> DEFAULT local
> MENU TITLE PXE BOOT MENU
> MENU MASTER PASSWD test123
>
> NOESCAPE 0
> PROMPT 0
> TIMEOUT 100
> ALLOWOPTIONS 1

WorksForMe[TM].

Keep in mind MENU MASTER PASSWD doesn't prevent you from booting labels
that don't have MENU PASSWD, and dosn't prevent the default item to be
selected on timeout.

-hpa

_______________________________________________
SYSLINUX mailing list
Submissions to SYSLINUX@zytor.com
Unsubscribe or set options at:
http://www.zytor.com/mailman/listinfo/syslinux
Please do not send private replies to mailing list traffic.

Re: pxe password protect option [ In reply to ]

jerry.nelson at xilinx

May 17, 2007, 9:25 AM

Post #7 of 14 (8007 views)

Permalink

I tried this again with pxelinux.0 version 3.31 & 3.36 and I
Do have "MENU PASSWD" after the LABEL's I'm testing.

Every time, prompt or no prompt, timeout or no timeout, this boots
straight into the kernel and never prompts me for a password?

IS there anything else I can do or test? - the -vv options for DHCP
Doesn't really help me debug anything.

Thanks HPA
--Jerry

-----Original Message-----
From: syslinux-bounces@zytor.com [mailto:syslinux-bounces@zytor.com] On
Behalf Of H. Peter Anvin
Sent: Wednesday, May 16, 2007 11:00 PM
To: For discussion of SYSLINUX and tftp-hpa
Cc: coldium@asiec.ru
Subject: Re: [syslinux] pxe password protect option

Jerry Nelson wrote:
> This is my config file for hpa. All I want to do is password protect
> pxe,
>>From all the threads and README's I read this "menu master passwd"
> command should prompt me for a password before allowing me to boot
> "test" label for example. I tried changes all options like prompt and
> allowoptions to 0's and 1's already --thx
> -----------------------------
>
> DEFAULT local
> MENU TITLE PXE BOOT MENU
> MENU MASTER PASSWD test123
>
> NOESCAPE 0
> PROMPT 0
> TIMEOUT 100
> ALLOWOPTIONS 1

WorksForMe[TM].

Keep in mind MENU MASTER PASSWD doesn't prevent you from booting labels
that don't have MENU PASSWD, and dosn't prevent the default item to be
selected on timeout.

-hpa

_______________________________________________
SYSLINUX mailing list
Submissions to SYSLINUX@zytor.com
Unsubscribe or set options at:
http://www.zytor.com/mailman/listinfo/syslinux
Please do not send private replies to mailing list traffic.

_______________________________________________
SYSLINUX mailing list
Submissions to SYSLINUX@zytor.com
Unsubscribe or set options at:
http://www.zytor.com/mailman/listinfo/syslinux
Please do not send private replies to mailing list traffic.

Re: pxe password protect option [ In reply to ]

hpa at zytor

May 17, 2007, 10:09 AM

Post #8 of 14 (8009 views)

Permalink

Jerry Nelson wrote:
> I tried this again with pxelinux.0 version 3.31 & 3.36 and I
> Do have "MENU PASSWD" after the LABEL's I'm testing.
>
> Every time, prompt or no prompt, timeout or no timeout, this boots
> straight into the kernel and never prompts me for a password?
>
> IS there anything else I can do or test? - the -vv options for DHCP
> Doesn't really help me debug anything.

That is really bizarre.

Are you sure you have updated the menu.c32/vesamenu.c32 module to match
pxelinux.0? (I'm asking because sometimes we have people reporting bugs
which turn out to be version mismatches.)

The other thing to do is to add debugging messages to the source code
(com32/modules/menumain.c) and try to figure out why it doesn't display
the password input box.

I'm at a loss, because I can't reproduce your failure. Just to be
paranoid, does 3.50-pre10 also fail for you?

-hpa

_______________________________________________
SYSLINUX mailing list
Submissions to SYSLINUX@zytor.com
Unsubscribe or set options at:
http://www.zytor.com/mailman/listinfo/syslinux
Please do not send private replies to mailing list traffic.

Re: pxe password protect option [ In reply to ]

jerry.nelson at xilinx

May 17, 2007, 11:13 AM

Post #9 of 14 (7968 views)

Permalink

Ok, I did double check in my /tftpboot
That all these are of the same version: menu.c32 & vesamenu.c32 &
pxelinux.0

I haven't tried version 3.5 yet, but will try that next.

Jerry

-----Original Message-----
From: H. Peter Anvin [mailto:hpa@zytor.com]
Sent: Thursday, May 17, 2007 10:10 AM
To: Jerry Nelson
Cc: For discussion of SYSLINUX and tftp-hpa; coldium@asiec.ru
Subject: Re: [syslinux] pxe password protect option

Jerry Nelson wrote:
> I tried this again with pxelinux.0 version 3.31 & 3.36 and I
> Do have "MENU PASSWD" after the LABEL's I'm testing.
>
> Every time, prompt or no prompt, timeout or no timeout, this boots
> straight into the kernel and never prompts me for a password?
>
> IS there anything else I can do or test? - the -vv options for DHCP
> Doesn't really help me debug anything.

That is really bizarre.

Are you sure you have updated the menu.c32/vesamenu.c32 module to match
pxelinux.0? (I'm asking because sometimes we have people reporting bugs
which turn out to be version mismatches.)

The other thing to do is to add debugging messages to the source code
(com32/modules/menumain.c) and try to figure out why it doesn't display
the password input box.

I'm at a loss, because I can't reproduce your failure. Just to be
paranoid, does 3.50-pre10 also fail for you?

-hpa

_______________________________________________
SYSLINUX mailing list
Submissions to SYSLINUX@zytor.com
Unsubscribe or set options at:
http://www.zytor.com/mailman/listinfo/syslinux
Please do not send private replies to mailing list traffic.

Re: pxe password protect option [ In reply to ]

jerry.nelson at xilinx

May 17, 2007, 1:26 PM

Post #10 of 14 (7995 views)

Permalink

H. Peter, I tried 3.50-pre10 as well, but same thing?
It's like this option is being totally ignored - I must have something
Wrong or missing maybe? It should be a pretty simple thing of these
3 files in /tftpboot and a config file /tftpboot/pxelinux.cfg - not much
else involved correct?

Jerry

-----Original Message-----
From: H. Peter Anvin [mailto:hpa@zytor.com]
Sent: Thursday, May 17, 2007 10:10 AM
To: Jerry Nelson
Cc: For discussion of SYSLINUX and tftp-hpa; coldium@asiec.ru
Subject: Re: [syslinux] pxe password protect option

Jerry Nelson wrote:
> I tried this again with pxelinux.0 version 3.31 & 3.36 and I
> Do have "MENU PASSWD" after the LABEL's I'm testing.
>
> Every time, prompt or no prompt, timeout or no timeout, this boots
> straight into the kernel and never prompts me for a password?
>
> IS there anything else I can do or test? - the -vv options for DHCP
> Doesn't really help me debug anything.

That is really bizarre.

Are you sure you have updated the menu.c32/vesamenu.c32 module to match
pxelinux.0? (I'm asking because sometimes we have people reporting bugs
which turn out to be version mismatches.)

The other thing to do is to add debugging messages to the source code
(com32/modules/menumain.c) and try to figure out why it doesn't display
the password input box.

I'm at a loss, because I can't reproduce your failure. Just to be
paranoid, does 3.50-pre10 also fail for you?

-hpa

_______________________________________________
SYSLINUX mailing list
Submissions to SYSLINUX@zytor.com
Unsubscribe or set options at:
http://www.zytor.com/mailman/listinfo/syslinux
Please do not send private replies to mailing list traffic.

Re: pxe password protect option [ In reply to ]

hpa at zytor

May 17, 2007, 2:00 PM

Post #11 of 14 (7998 views)

Permalink

Jerry Nelson wrote:
> H. Peter, I tried 3.50-pre10 as well, but same thing?
> It's like this option is being totally ignored - I must have something
> Wrong or missing maybe? It should be a pretty simple thing of these
> 3 files in /tftpboot and a config file /tftpboot/pxelinux.cfg - not much
> else involved correct?

/tftpboot/pxelinux.cfg/default, but yes...

Does the password box appear if you press [Tab] or [Esc]?

-hpa

_______________________________________________
SYSLINUX mailing list
Submissions to SYSLINUX@zytor.com
Unsubscribe or set options at:
http://www.zytor.com/mailman/listinfo/syslinux
Please do not send private replies to mailing list traffic.

Re: pxe password protect option [ In reply to ]

jerry.nelson at xilinx

May 17, 2007, 2:13 PM

Post #12 of 14 (7998 views)

Permalink

Ok, I think I figured it out, the "DEFAULT local"
Line I had in my config only works if you specify "DEFAULT menu.c32"
I assumed that was the label default, there is an option to
Take care of the label default anyway: "menu default"
Not sure why it worked for you, but thanks very much HPA!

Jer

-----Original Message-----
From: H. Peter Anvin [mailto:hpa@zytor.com]
Sent: Thursday, May 17, 2007 2:00 PM
To: Jerry Nelson
Cc: For discussion of SYSLINUX and tftp-hpa; coldium@asiec.ru
Subject: Re: [syslinux] pxe password protect option

Jerry Nelson wrote:
> H. Peter, I tried 3.50-pre10 as well, but same thing?
> It's like this option is being totally ignored - I must have something
> Wrong or missing maybe? It should be a pretty simple thing of these
> 3 files in /tftpboot and a config file /tftpboot/pxelinux.cfg - not
much
> else involved correct?

/tftpboot/pxelinux.cfg/default, but yes...

Does the password box appear if you press [Tab] or [Esc]?

-hpa

_______________________________________________
SYSLINUX mailing list
Submissions to SYSLINUX@zytor.com
Unsubscribe or set options at:
http://www.zytor.com/mailman/listinfo/syslinux
Please do not send private replies to mailing list traffic.

Re: pxe password protect option [ In reply to ]

hpa at zytor

May 17, 2007, 2:23 PM

Post #13 of 14 (8006 views)

Permalink

Jerry Nelson wrote:
> Ok, I think I figured it out, the "DEFAULT local"
> Line I had in my config only works if you specify "DEFAULT menu.c32"
> I assumed that was the label default, there is an option to
> Take care of the label default anyway: "menu default"
> Not sure why it worked for you, but thanks very much HPA!

It worked for me because I didn't see that bit.

You never even get into the menu system without that.

-hpa

_______________________________________________
SYSLINUX mailing list
Submissions to SYSLINUX@zytor.com
Unsubscribe or set options at:
http://www.zytor.com/mailman/listinfo/syslinux
Please do not send private replies to mailing list traffic.