iucvtty - allow remote logins over z/VM IUCV

The iucvtty application provides full-screen terminal access to an instance of Linux™ on z/VM®.

Runs on target systems to start iucvtty instances. Typically, the iucvtty command is called through systemd instance units, inittab entries, or Upstart job files.

Format

Figure 1. iucvtty syntax

1  iucvtty
2.1?  -a <regex>
1  <terminal_id>
2.1!  -- /bin/login
2.1?  -- <login_program>
2.2.1?  <login_options>
where:
-a or --allow-from <regex>
is a regular expression that limits permissions for incoming connections to matching z/VM user IDs. The connection is refused if the z/VM user ID does not match. If this parameter is omitted, connections are permitted from any z/VM user ID.
<terminal_id>
identifies the z/VM IUCV connection. <terminal_id> is case-sensitive and consists of up to eight alphanumeric characters. The <terminal_id> must be specified as a parameter in access requests against an iucvtty instance. The <terminal_id> is like a port number in TCP/IP communications.
<login_program>
specifies the absolute path to the login program to be started when a connection is established. The default is /bin/login.
<login_options>
specifies further options that depend on the particular login program used.
-v or --version
displays the version number of iucvtty and exits.
-h or --help
displays a short help text and exits. For more detail, see the iucvtty man page.

Examples

  • To allow remote logins for terminal ID lxterm1:
    [root]# iucvtty lxterm1
  • To allow only users from LXGUEST1 to access lxterm1:
    [root]# iucvtty -a lxguest1 lxterm1
  • To allow only users from LINUX10 through LINUX19 to access lxterm1:
    [root]# iucvtty -a "linux1[0-9]" lxterm1
  • To use /sbin/sulogin instead of /bin/login for suterm:
    [root]# iucvtty suterm -- /sbin/sulogin