topic Re: trusted system in Operating System - HP-UX

trusted system

kamal_15 — Sun, 04 Sep 2005 10:28:59 GMT

hi all
i have a problem with trusted system
users login becom Expired
but we solve the problem

my question is

how can i know when the system converted to trusted?

please help

kamal

Re: trusted system

Slawomir Gora — Sun, 04 Sep 2005 12:03:34 GMT

Hi,

I think you can check creation date of /tcb directory.

Re: trusted system

kamal_15 — Sun, 04 Sep 2005 12:27:32 GMT

thank you for your response

but is that a good indication for date of converting system to trusted?

if any one open this directory . the date of modification will change.

is thier another way?

Re: trusted system

Robert-Jan Goossens — Sun, 04 Sep 2005 12:37:43 GMT

if your is trusted your passwords will be encryted in a trusted database inside the /tcb/files/auth/ directory. If yo have files inside that dir with the names of your users your system is trsted.

An other command you can use is
# /usr/lbin/getprdef
true

will give true if it is trusted.

Hope this helps,
Robert-Jan

Re: trusted system

Bill Hassell — Sun, 04 Sep 2005 12:44:25 GMT

The /tcb directory only has one directory so as long as the root user does not store some bogus file in /tcb, the creation date is indeed the conversion date. All files and directories have three times recorded. The access time for a directory changes whenever the directory is read (searched). The modification time is the creation date until the contents of the directory changes. The change time is when the owner or permissions of the file are changed.

Since no new directories or files are ever created in the /tcb directory, the value returned by:

ll -d /tcb

will document the conversion date.

Re: trusted system

yut — Mon, 05 Sep 2005 01:54:19 GMT

you can check creation date /.secure directory. this created when u convert to trusted first.

-yut-

Re: trusted system

Bharat Katkar — Mon, 05 Sep 2005 02:44:24 GMT

Hi Kamal,
Your /etc/password file will have "*" in the password field of all users if the system is trusted.

Regards,
Bharat

Re: trusted system

Muthukumar_5 — Mon, 05 Sep 2005 03:16:57 GMT

Few ways,

1) [ -d /tcb ] && echo "$(hostname) is trusted"
2) audsys

# audsys
cannot open and lock /.secure/etc/audnames;
verify that the auditing system has been installed properly,
and the /.secure/etc directory exists, prior to running this command

It is saying it is converted to Trusted one

3) sam -> Auditing and Security -> Audited system calls -> It will prompt a window for converting to Trusted if it is not a trusted machine

4) root and other users passwd entry in /etc/passwd will be *

hth.

Re: trusted system

Cem Tugrul — Mon, 05 Sep 2005 03:29:37 GMT

Also many useful links asked before;

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=691956

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=823609

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=839509

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=114240

Good Luck,