topic Re: Password Syncronization in Operating System - HP-UX

Password Syncronization

Nicky_5 — Tue, 21 Jun 2005 09:16:20 GMT

Hi All,

The question i have is basically on AIX but since i did not get any replies on the aix forums i am posting it here...i guess it can be applied to HP as well..

I have a production aix machine (lest call it A). We have now purchased a machine simillar to A (machine B) we plan to use this as a DR machine.

In order to do that B should be a clone of A. This is do-able as far as the non root filesystems are concerned.

My questions is :

How do i synchronise the userids and passowrds on both the machines? I want that User1 should be able to login to both machines using the same password. I dont think that getting just the /etc/password files over onto machine B is enough.

Please advice.

Re: Password Syncronization

Steven E. Protter — Tue, 21 Jun 2005 09:18:35 GMT

No, /etc/passwd alone won't do the job on HP-UX, though /etc/passwd /etc/group /etc/shadow will do the job on Linux, so long as you exclude the system accounts from this move.

You might do better by setting up A as an ldap server and having B synch an cache the ldap database from A.

SEP

Re: Password Syncronization

Nicky_5 — Tue, 21 Jun 2005 09:24:18 GMT

Hi,

Thankyou for your reply,

Since the oslevel on this machine is out of support i am unable to get any softwares for it, welse i was initially planning on putting the 2 machines in a cluster.

There are planse to upgrade the OS but in the mean while we need to have this manual process where in all the non system files will be "rdist'ed" over, the databases would be synchronised by the DBA. So that leaves me with the question of synchronising the user ids and password.

I have never worked with LDAp before and would really take me a lot of time to configure A as ldap server Plus A being a production machine i dont want to play around with it without being really sure...

Please advice if sunchronising the /etc/passwd, /etc/group would be enough on an HP UX machine?

Re: Password Syncronization

DCE — Tue, 21 Jun 2005 09:41:33 GMT

if the users currently have the same uid on both systems, and the groups have the same gid on both systems, it should work.

If the the AIX boxes have a nsswitch.conf file, look in it for the complete list of files in /etc that should be kept in sync between the systems. That will give you an idea of all the files that should at least be examined for consistency between systems

Dave

Re: Password Syncronization

Nicky_5 — Tue, 21 Jun 2005 09:45:42 GMT

Hi,

The Macine B is new and does not have anything on it yet. i was planning to copy or rdist the passwd and group files over. If i do that the uid and gids would be the same. But do u know which file should be synchronised on the 2 machnes inorder to have same passwords on both machine?

if i include the passwd and group file in the nsswitch.conf file would it automatically synchronise those files?

Re: Password Syncronization

DCE — Tue, 21 Jun 2005 10:07:34 GMT

The nsswitch is used by NIS, NIS+, LDAP and DNS to tell the system where to look for the files in the list. You would have to run NIS, NIS+ or LDAP to truly sychronize the systems.

The copying of the password and groups files will work in your case just fine. The only problem you will have is that you will need to create the users on each system in order for them to have a home directory on each system.

Do you also want the home directories to be identical on each system as well?

Re: Password Syncronization

Nicky_5 — Tue, 21 Jun 2005 11:01:02 GMT

yes, i want both the systems to be the exact clone,
i think i can move the homes over using rdist too. wouldnt that solve the problem of creating each user?

actually machine B will not be used unelss A goes down.
Once A crashed (for whatever reasone) we will make the host name A point to B's ip so that when ppl connect using hostname A they wil get the prompt for machine B which would we exactly the same as Machine A.

let me know if you see any flaws with this plan.. being less experienced i am sure i must have overlooked somethings.

Re: Password Syncronization

DCE — Tue, 21 Jun 2005 11:05:57 GMT

Yes, it would. you also need to ensure at a minimum that the following files in /etc contain the same entries on both systems

hosts
services
networks
protocols

Re: Password Syncronization

Nicky_5 — Tue, 21 Jun 2005 13:18:17 GMT

Hi,
thankyou for your replies, This was really helpful..