[HPADM] Summary -Converting to Trusted

From: Joe Crawford (abjcrawford@yahoo.com)
Date: Thu Nov 02 2006 - 09:01:09 EST


Thanks to Bill Hassell, Jason Neil, Jordan
Wiseman,John Lanier,Mark Fearer and Anil.

Bill Hassell:

Just to make sure, run the pwck and grpck commands.
They will look for consistency errors in these two
files. It is OK to have specialized UIDs like lp
and www not to have a home login directory. Then
use SAM.

NOTE: You will see the unsupported method using
tsconvert. tsconvert only performs half of the
task and it isn't documented.

Warning: All passwords in your current system are
8 characters long or less. If anyone types more
than 8 characters for a password, they are SILENTLY
ignored. The problem is that under a Trusted system,
every character in the password is significant so
users that type more than 8 characters will think
there is something wrong. They will probably try it
so many times that that the account gets locked out
and you'll have to use /usr/lbin/modprpw or SAM to
unlock the userID. Not a big deal, but some users
may be affected.

Also, ancient (archaic) software may try ti use the
passwd file directly instead of using PAM for
authentication (very old database programs may do
this) and they will have no clue about a Trusted
system. The fix is to update the database program
from last century code.

Jordan Wiseman:

Joe,

Here's the doc from HP...the official procedure is
documented in the "Managing Systems and Workgroups"
guide.

http://docs.hp.com/en/B2355-90950/ch08s08.html

Almost all other pointed to use SAM to convert to
trusted.

THanks All.

Joe.

 
____________________________________________________________________________________
We have the perfect Group for you. Check out the handy changes to Yahoo! Groups
(http://groups.yahoo.com)

--
             ---> Please post QUESTIONS and SUMMARIES only!! <---
        To subscribe/unsubscribe to this list, contact majordomo@dutchworks.nl
       Name: hpux-admin@dutchworks.nl     Owner: owner-hpux-admin@dutchworks.nl
 
 Archives:  ftp.dutchworks.nl:/pub/digests/hpux-admin       (FTP, browse only)
            http://www.dutchworks.nl/htbin/hpsysadmin   (Web, browse & search)


This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 11:02:54 EDT