topic Re: /etc/shadow ? in Operating System - HP-UX

/etc/shadow ?

Gavin Clarke — Wed, 06 Aug 2003 07:41:10 GMT

I've been asked to supply a shadow file for an audit. We're running a trusted system on 10.20 (decided to run on this until changing systems entirely).

My understanding is that all the passwords live in /tcb/files...
Is there a shadow file as well?

PS: Which is better?

Thanks hugely for all comments, suggestions and advice.

Re: /etc/shadow ?

U.SivaKumar_2 — Wed, 06 Aug 2003 08:00:31 GMT

Hi,

If it is a trusted system then /etc/shadow file is not used. Instead the files for users under /tcb/files/auth/ directory.

Give those files for analysis.

regards,

U.SivaKumar

Re: /etc/shadow ?

Zigor Buruaga — Wed, 06 Aug 2003 08:02:56 GMT

Hi,

You are correct, trusted system lives in /tcb, and there is no shadow file.

Maybe this helps ...

http://www.ussg.iu.edu/usail/tasks/security/hp/hp.html

And about Shadow check this ...

http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=ShadowPassword

I think you can supply the trusted system for an audit ( /etc/passwd with no encrypted passwd ... )
Hope this helps.

Regards,
Zigor

Re: /etc/shadow ?

Tim Adamson_1 — Wed, 06 Aug 2003 08:06:45 GMT

Hi,

HP-UX doesn't use an /etc/shadow file. You are right in saying that the /tcb hierarchy contains the required information.

Hope this helps.

Re: /etc/shadow ?

Gavin Clarke — Wed, 06 Aug 2003 08:13:03 GMT

Great stuff, Thankyou all so much for confirming my suspicions.

Tim, I read in a post that you can get a shadow password file on 11i, which is why I asked which is better. Thanks very much for your reply, it has helped me alot.

Re: /etc/shadow ?

Gavin Clarke — Wed, 06 Aug 2003 08:16:25 GMT

Congratulations on your graduation too!

Re: /etc/shadow ?

Tim Adamson_1 — Wed, 06 Aug 2003 08:30:54 GMT

Hi,

In HP-UX 11iv1.6 they introduce a new Shadow Password feature so that post is correct.

Check the 11iv1.6 release notes at www.docs.hp.com.

I have no idea if it will be supported after that vrsion of HP-UX.

I hope that clarifies things. Probably makes it muddier :p

Cheers

Re: /etc/shadow ?

Gavin Clarke — Wed, 06 Aug 2003 08:46:02 GMT

Just being picky really.

I suppose I could pursue the shadow vs. trusted question, however since we're not running that version yet, well I might just find a cup of tea and create some user accounts that have been awaiting my attention instead. Funny how the little important things get brushed aside when there's an audit going on.

Thanks again for your help.