11iv3 security, trusted, SMSE, shadow, etc. - getting started, documentation

[John Kittel]

I am migrating application from 11iv1 (11.11) trusted to 11iv3 (11.31).

This will be my first use of 11iv3.

Can anyone direct me to authoritative overview type information regarding 11iv3  trusted mode, shadow mode, SMSE, (and other options if any)?

It has been rather difficult reading forum threads and man pages to try to understand the options and what you get (or don't get) with each. The information is scattered all over the place and some contradict the others. I searched for but haven't found a single HP document that summarizes, just bits scattered around in release notes and whatnot. Perhaps my searching skills are at fault.

At first I thought I wanted trusted because I'm used to it from 11iv1, but it seems that trusted 11iv1 is not the same as trusted 11iv3. (for example 11iv1 trusted has system wide password aging, but in trusted 11iv3 it seems there is none(?) - /etc/default/security  PASSWORD_MAXDAYS looked like it could be useful, but doesn't work on trusted system.)

[Per Christensen_1]

Hi John

have a look at secweb -t command

Some of the entries will be written to /tcb/files/auth/system/default

Cheers, Per