topic Re: Adding Users in Operating System - HP-UX

Adding Users

Nisar Ahmad — Tue, 04 Jul 2006 02:30:41 GMT

Hi There

I have built a HP-UX 11.23 server and want to add all the users sitting on the current production server. I have already restored passwd and group files and home directories on to the new server and it looks like all is ok but not sure it it is a abosolutely correct approach. If not what is the best way to add similar users on the new server ?

Thanks in advance. I will be very generous in poits

Nisar

Re: Adding Users

Peter Godron — Tue, 04 Jul 2006 02:38:36 GMT

Nissar,
don't forget to copy the /tcb directory if your systems are trusted.

Otherwise you may want to look at:
useradd
/usr/sam/lbin/usermod.sam
and
/usr/lbin/modprpw

Re: Adding Users

Chauhan Amit — Tue, 04 Jul 2006 03:17:17 GMT

Hi Nisar,

I believe this is a correct approach .

-Amit

Re: Adding Users

Darrel Louis — Tue, 04 Jul 2006 07:54:54 GMT

Nisar,

To perform a check, use the following commands:
# pwck
# grpck
On a trusted system run:
# authck
See man authck
# pwconv
For updating the tcb database

Darrel

Re: Adding Users

Andrey Tumanov — Tue, 04 Jul 2006 08:11:55 GMT

You can check this doc:

http://www6.itrc.hp.com/service/cki/search.do?category=c0&prevQueryString=&mode=id&searchString=KBRC00011667&search.x=40&search.y=12&searchCrit=allwords&docType=Security&docType=Patch&docType=EngineerNotes&docType=BugReports&docType=Hardware&docType=ReferenceMaterials&docType=ThirdParty&dateRange=all

Andrey

Re: Adding Users

Nisar Ahmad — Tue, 04 Jul 2006 23:16:32 GMT

Hi All

I am just worried if transfering information from HP-UX 11.00 trusted to 11.23 would have no issues in future.

Thanks

Nisar

Re: Adding Users

Nisar Ahmad — Tue, 04 Jul 2006 23:19:55 GMT

Hi All

I am just worried if transfering information from HP-UX 11.00 trusted to 11.23 would have no issues in future. My boss is asking me to add all the users from scratch which is not a easy job. If it is the best approach then any body got a script to add all the users in one go reading info's from the current passwd/group files ?

Thanks

Nisar

Re: Adding Users

RAC_1 — Tue, 04 Jul 2006 23:20:27 GMT

There should not be a problem. But make sure that you run pwck, grpck and authck to check if tcb database has any errors or not.

Re: Adding Users

A. Clay Stephenson — Tue, 04 Jul 2006 23:48:10 GMT

The data formats (Trusted and untrusted) are compatible. The data (even under /tcb) are just textfiles. However, make sure that you have backups of your original files including the /tcb tree, if trusted AND that you are logged in as root in at least two separate sessions. That way, you can get yourself out of trouble almost as fast as you got yourself in should the need arise.

Re: Adding Users

GBR — Wed, 05 Jul 2006 06:51:49 GMT

I've never needed to do this, but why not try pulling a report of the users currently setup on the production environment and create a master file script of all users that adds the each user using the command 'useradd'. If the groups, permissions are mirrored b/w the servers then use this master file any time you need to add the users to a new server or make any updates to their permissions. Keep this file updated each time you make any changes. If this seems like too much overhead then just continue to maintain your users as you are.

GBR

Re: Adding Users

doug hosking — Mon, 10 Jul 2006 06:03:16 GMT

Also beware that some of the trusted mode files live under /.secure and /usr/spool/cron (.cronaids and .ataids).

If you have auditing configured, there are additional things to consider.

The suggestion to run authck is a very good one.