topic Re: How to implement shadow product in hpunix in Operating System - HP-UX

How to implement shadow product in hpunix

sanwin — Thu, 27 Nov 2008 10:53:16 GMT

Hi,
How to implement shadow product in hpunix.
What version should we install for HPUX 11.23

Also i heard that the applications using the /etc/passwd file will get issues as they access the password directly from the passwd file.

So how to check whether there are any applications that are accessing the password field of /etc/passwd.

Please help me.

regards,
sanwin.

Re: How to implement shadow product in hpunix

unixguy_1 — Thu, 27 Nov 2008 11:04:14 GMT

Hi Sanwin,

i thing there is no applications intermediate to use the password files.

Because this is database of Users.
Pls kindly give the exact problem.

Regards,
Unixguy.

Re: How to implement shadow product in hpunix

likid0 — Thu, 27 Nov 2008 11:20:42 GMT

in HP-UX you can use shadow passwd with a patch, but what you should do, if you wan't to have the passwd in another place( in this case /tcb), plus many more securty features(READ THEM BEFORE CONVERTING), is convert your system into trusted mode.

here goes a link on a example converting a system to trusted mode:

http://www.hpuxtips.es/?q=node/126

More info:

http://docs.hp.com/en/B2355-90121/index.html

Re: How to implement shadow product in hpunix

Ganesan R — Thu, 27 Nov 2008 12:04:33 GMT

Hi Sanwin,

Here you can download shadow password product for HP-UX 11.11.

http://software.hp.com/portal/swdepot/displayProductInfo.do?productNumber=ShadowPassword

But not sure if this product is available in the form of patch for 11.23

Re: How to implement shadow product in hpunix

~sesh — Thu, 27 Nov 2008 22:58:34 GMT

Not sure about 11.23, but feature available in 11.31.

The command pwconv will do the trick.

Re: How to implement shadow product in hpunix

sanwin — Tue, 02 Dec 2008 07:11:32 GMT

Hi All,
I tried pwconv in HP-UX 11.23 to make the shadow file.

It worked. I created a new user and it is getting shadowed properly.

I donno in what other ways we can check it.

Also, I want to know if we have some other way to implement shadow in HP-UX B.11.23 like installation of shadow depot etc.

Please let me know your views.

I have to implement in highly critical production SAP environments. so i need to test it fully. Please help me with all the ways you know.

thanks!!

regards,
sanwin

Re: How to implement shadow product in hpunix

Ganesan R — Tue, 02 Dec 2008 07:29:19 GMT

Hi Sanwin,

shadow password is inbuilt with 11.23. You no need to download the depot file.

It is simple steps to convert it. "pwconv" is to convert to shadow file and "pwunconv" to revert back to normal password file.

If you want to implement high level security features then you can go for trusted systems. It has many features.