topic Re: Reporting on SAM in Operating System - HP-UX

Reporting on SAM

Eric Herr — Fri, 16 Apr 2004 09:19:26 GMT

I am new to HPUX world and I am trying to write scripts to collect files for later security analysis. Particularly, I am having trouble finding password aging for specific user accounts and default password length. Most information I have found tells me to view a user account in SAM or edit the SAM security policy. What files should I grab that contain this information? In solaris they are the /etc/shadow and /etc/default/passwd files.

Thanks in advance.

Re: Reporting on SAM

RAC_1 — Fri, 16 Apr 2004 09:45:05 GMT

If your system is in trusted mode, you can get all information you require through following commands.

getprpw
getprdef
modprpw
modprdef

Check man pages for all.

If system is not in trusted mode, you get all these required information with logins command. man logins for details.

Anil

Re: Reporting on SAM

Kevin Wright — Fri, 16 Apr 2004 09:48:21 GMT

look under /tcb. If your system is trusted, all your user accounts password info is here.
modprpw, getprpw should help.

Re: Reporting on SAM

Sanjay Yugal Kishore Ha — Fri, 16 Apr 2004 09:51:24 GMT

Also, you can use SAM's View SAM Log tool visible under Options menuitem or tail on /var/sam/log/samlog files, while working in SAM, to trace which commands are being used and which files are being modified.

Sanjay