smh trusted system option on hpux 11.31

[Manuel Abellan]

I maybe missing something obvious here but I have looked in different hpux servers on smh(system management homepage) how to convert a server to trusted server by looking for the system security policies ooption mentioned on the appendix A(page 180) of:

http://www.docs.hp.com/en/5992-2395/5992-2395.pdf

if I use SAM i can see the trusted server conversion appearing. I just want to know if I am missing a module or the option is not available through smh, one of my customers is having the issue but I have tried on at least 5 different environments with the same result --> no smh way to convert to trusted system.

smh version does not seem to have an impact tried with 2.2.5 and 2.2.7.

Has someone the option on their smh to convert to trusted server ?


Manuel

[Robert Fritz]

I just went into a freshly installed system, and the option was under "Auditing and Security" -> "System Security Policies" in the TUI.

That said, I suppose you can use /usr/lbin/tsconvert on the CLI, though SAM/SMH do things a little differently, so you won't get _exactly_ the same result.

You might also consider just using shadow mode instead... pwconvert... as "Trusted Mode" is being deprecated now that the standard mode security extensions are installed by default on 11.31 (which contain all the interesting "Trusted Mode" capabilities.

Hope that helped,
-Robert

[Manuel Abellan]

Hi Robert:

Thanks for the info, I know it can be done through SAM or even command line but I want to know if the option is vaialable through the http smh, that is a full GUI.

Manuel

[Manuel Abellan]

Hi:

I got a response from HP ont this which does not explain clearly why the option is not present on smh through http but at least gives the workaround through smh. Through audit users and that will call samx. Of course it will be easier to just use either CLI or smh TUI but because HP is pushing smh to replace sam I wanted to see if it was easy to do it.

Here are more details:
Check the document attached and also the link below (under product features) which mentions the Web-based System Management and X-Windows plug-ins
http://docs.hp.com/en/438861-008/438861-008.pdf
There is no System Security policy in GUI mode that you find in TUI mode of SAM/ SMH

Secondly, I you were able to convert the system to Trusted system using CLi, TUI mode of SAM & SMH. But unable to convert from web-based SMH please try the below option
from the web-based SMH select Audit Users, on selecting it provides the option for converting the system to Trusted mode.

Note: If your using the x-windows from your laptop, please make sure the Display is set laptop IP, before you run the command in Audit-users.