UPDATE: Shadowed passwords leads to login problem

From: Jonathan Williams (jonathw@shubertorg.com)
Date: Wed Nov 20 2002 - 17:47:00 EST


Ok...I have reverted back to the BASE security option for now. tonight I will
put it back to ENHANCED, and will then be able to reboot. Several people
pointed out to me that a reboot is very necessary because there are daemons
running that need to be restarted so everything is in sync. Hopefully that will
fix this issue...but then again it might not.

I received a ton of replies stating that some 3rd party applications are just
not written to support ENHANCED security, and there isn't much you can do
(except pay the software company a lot of money to re-write their code...which
people have done).

So that's where I'm at right now. Wish me luck.

Jonathan Williams
Unix Systems Administrator
The Shubert Organization, Inc.
----- Original Message -----
From: "Jonathan Williams" <jonathw@shubertorg.com>
To: <tru64-unix-managers@ornl.gov>
Sent: Wednesday, November 20, 2002 4:17 PM
Subject: Shadowed passwords leads to login problem

> I've got an ES40 running tru64 5.1, patch 5. Up until today we just had the
> BASE security installed. Then I went ahead and did a "sysman secconfig", and
> chose ENHANCED. Going throught the little wizard the only thing I chose was
to
> enable SHADOWED passwords...the rest of the steps I just skipped. After
hitting
> "finish" it says that the new security option will be in full effect after
next
> boot. I can't boot this system during the day, so figured I would do it
> tonight. I'm not sure what it needs a reboot for, because I looked at the
> passwd file, and saw that there were little * where the passwords had been. I
> also changed a password, and saw the enhanced security menu (choose your own
> password, blah blah blah). Everything seemed fine. I could login as any user
> normally--ftp was fine, telnet was fine--everything seemed OK. Until...
>
> One of our programmers tried to access one of the Informix databases on this
> system through a graphical tool called ServerStudio. Normally it just goes
> straight in and connects to the database. Now it seems to ask for a username
> and password. The problem is that when you put in the Informix user with the
> proper password, it says something like "invalid username or password". I
went
> over and tried this myself, but it just won't let you connect to the
> database...(yes, I typed very slowly). I can telnet into this system as
> Informix, and it lets me in just fine. It seems to be a problem with this
> ServerStudio program and how it connects. Has anyone had a similar
experience?
> I'm really at a loss. TIA
>
> Jonathan Williams
> Unix Systems Administrator
> The Shubert Organization, Inc.
>
>



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:49:00 EDT