topic Are there lock files for passwd/useradd/usermod/userdel ? in Operating System - HP-UX

Are there lock files for passwd/useradd/usermod/userdel ?

jmb — Mon, 26 Jan 2004 16:07:25 GMT

We are going to handle some of the these commands with scripts, but we don't want file conflicts, on the off chance someone else is also editing the same login.

I know about /etc/ptmp, but it appears the system does not use it with passwd. Are there any other lock files the system uses when modifying passwd or shadow?

Re: Are there lock files for passwd/useradd/usermod/userdel ?

A. Clay Stephenson — Mon, 26 Jan 2004 16:14:16 GMT

The NIS passwd daemon (yppasswdd) uses /var/adm/ptmp; vipw uses /etc/ptmp and the man page of yppasswd also indicates that vipw uses /var/adm/ptmp as well. The bad news is that all of these are simply conventions. For example, nothing at all would prevent a user with suitable permissions from editing the passwd file with nothing more powerful than vi.

Re: Are there lock files for passwd/useradd/usermod/userdel ?

Sridhar Bhaskarla — Mon, 26 Jan 2004 16:21:58 GMT

Hi,

From the tusc output, I found that it created two files .pwd.lock and ptmp under /etc and use lockf to lock them until it is done.

open("/etc/.pwd.lock", O_RDWR, 0177777) .................... = 3
lockf(3, 0x2, 0) ........................................... = 0
open("/etc/ptmp", O_WRONLY|O_CREAT|O_EXCL, 0) .............. = 5
setresuid(-1, 0, -1) ....................................... = 0
fchmod(5, 0444) ............................................ = 0
lockf(5, 0x2, 0) ........................................... = 0

But if you are using only passwd/useradd/usermod commands, then the system will take care of creating the locks.

-Sri

Re: Are there lock files for passwd/useradd/usermod/userdel ?

Bill Hassell — Mon, 26 Jan 2004 16:26:13 GMT

Actually, it appears that all 4 programs do indeed reference /etc/ptmp, so as long as *EVERY* root user is FORBIDDEN to use vi (or ed or sed or emacs or other editors) on the passwd file (or /tcb files), then you'll be OK. A better solution would be to write your scripts with checks to see if another copy is already running. Hint:

MMYNAME=${0##*/}
if [ UNIX95= ps -C $MYNAME > /dev/null ]
then
print "\nAnother copy is running!\n"
exit 1
fi

Re: Are there lock files for passwd/useradd/usermod/userdel ?

Steven E. Protter — Mon, 26 Jan 2004 16:34:57 GMT

vipw is a special version of vi that locks access to the edited file.

Its designed to work on files such as /etc/passwd and such.

It works quite nicely however on any file you don't want edited by another user while you are working on it.

SEP

Re: Are there lock files for passwd/useradd/usermod/userdel ?

Bill Hassell — Mon, 26 Jan 2004 17:03:25 GMT

And to second Stephen's vipw recommendation, vipw also uses /etc/ptmp. However, I would discourage root users from using vipw except for minor edits such as the GECOS (information) field. Users can change their own shell without root's help. In fact, it appears that all these tools use /etc/ptmp:

passwd useradd usermod userdel chfn chsh vipw

Re: Are there lock files for passwd/useradd/usermod/userdel ?

jmb — Mon, 26 Jan 2004 17:07:28 GMT

I have not had time to test this, but are you saying that if /etc/ptmp exists, none of those utilities will work?

Re: Are there lock files for passwd/useradd/usermod/userdel ?

A. Clay Stephenson — Mon, 26 Jan 2004 17:16:49 GMT

Yes, all of those commands including passwd respect/honor the /etc/ptmp convention. As long as ONLY those utilities , with the possible inclusion of vipw, are used to modify the passwd files/databases then the operations properly block. However, it must be stressed that any rogue cowboy/process with root permissions can completely ignore the existence of a lockfile. It is therefore imperative that all users with super-user priviliges restrict themselves to whatever conventions you adopt.