topic Re: how to convert as trusted mode. in Operating System - HP-UX

how to convert as trusted mode.

senthil_kumar_1 — Sun, 24 May 2009 11:03:59 GMT

Hi,

I am using hp-ux 11.00 and 11.11.

I think my hp-ux server is not in trusted mode. since there no file like /etc/shadow.

Now i want to convert to trusted mode. so i used following command to convert. but it is showing some error.

Ex:

# pwconv
The system is not yet in trusted mode.
Use pwck to list any problems with the password file.
After fixing all problems use SAM to convert to trusted mode.

so how to use SAM to convert my system to trusted mode.

how to solve this.

Re: how to convert as trusted mode.

Sajjad Sahir — Sun, 24 May 2009 11:23:03 GMT

Dear Senthil

The following link will help u

http://docs.hp.com/en/B2355-90950/ch08s08.html

thanks and regards

Sajjad sahir

Re: how to convert as trusted mode.

Nido — Sun, 24 May 2009 11:29:27 GMT

Hello Senthil,

To enable auditing, run SAM and use the â Auditing and Securityâ window.

Before converting system into trusted mode take a backup of /etc/passwd.

Recommended method is to use SAM rather than using tsconvert command.

>>>>I think my hp-ux server is not in trusted mode. since there no file like /etc/shadow.

Another clue would be to see /tcb.

Cheers!!

Re: how to convert as trusted mode.

avizen9 — Sun, 24 May 2009 11:51:50 GMT

Hi,
you can use SAM to convert your existing system into trusted,

before that as mentioned in url pls check
swlist -l fileset | grep Security

once system is trusetd you should see /tcb

below is pdf which can explain you how to use in detail about trusted system.

http://docs.hp.com/en/5992-3387/apa.html

Re: how to convert as trusted mode.

James R. Ferguson — Sun, 24 May 2009 12:12:36 GMT

Hi Senthil:

Trusted and shadow implementions are different. HP's Trusted mode is deprecated at 11.31 (11iv3) meaning that that it is the last release that will support this functionality. I would suggest, therefore, that you transition to the shadow implementation. On 11.11 you can do this with:

http://h20392.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=ShadowPassword

Regards!

...JRF...

Re: how to convert as trusted mode.

Suraj K Sankari — Mon, 25 May 2009 03:28:52 GMT

Hi,
>>Use pwck to list any problems with the password file

This error means there is some problem in your /etc/passwd file.
run pwck it will give the output where is the error might be some extra field added or may be some extra character add into your /etc/passwd file first fix it then you can run pwconv or using sam also you can convert your system into trusted mode.

Suraj

Re: how to convert as trusted mode.

Basheer_2 — Mon, 25 May 2009 07:06:14 GMT

Check the trusted status
/usr/lbin/getprdef -r

to convert

/etc/tsconvert
or use sam

Re: how to convert as trusted mode.

Taifur — Mon, 25 May 2009 08:02:48 GMT

HI Senthil,

You can check below link as follows,
http://docs.hp.com/en/J4269-90041/ch04s02.html

Rgds//
Taifur

Re: how to convert as trusted mode.

Ganesan R — Mon, 25 May 2009 08:22:06 GMT

Hi Senthilkumar,

Make yourself clear that /etc/shadow, pwconv or pwunconv are not at all related to trusted system.

These are all related to HP's security product "shadow password" which is available here for download.
http://h20392.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=ShadowPassword

You need to download and install the product. Then only you can run pwconv and pwunconv commands. /etc/shadow file will be created once you run /etc/shadow.

Trusted system is another layer of security level product. You can run "tsconvert" to convert the system to trusted. But SAM is the recommanded way to convert the system into trusted.

Re: how to convert as trusted mode.

Ganesan R — Mon, 25 May 2009 08:23:40 GMT

Hi Again,

There is typo error.

>>>/etc/shadow file will be created once you run /etc/shadow.<<<

read as, /etc/shadow file will be created once you run pwconv command.

Sincere apologize....

Re: how to convert as trusted mode.

senthil_kumar_1 — Mon, 25 May 2009 16:04:27 GMT

Hi Ganesan R

this command is not working for me.

Re: how to convert as trusted mode.

Viktor Balogh — Mon, 25 May 2009 17:55:21 GMT

for the pwconv command you need to install the ShadowPassword product first. but it not equals with Trusted mode...

Re: how to convert as trusted mode.

UVK — Tue, 26 May 2009 17:39:36 GMT

Having /etc/shadow file is not the same as having a Trusted system, to implement password shadow you need to install security filesets. You can get some info about shadow from the below link.

http://docs.hp.com/en/B2355-90950/ch08s15.html

Re: how to convert as trusted mode.

UVK — Tue, 26 May 2009 17:41:16 GMT

Install Shadow Password product on your hpux box. you can get this from software.hp.com.

Re: how to convert as trusted mode.

SUDHAKAR_18 — Wed, 27 May 2009 06:05:19 GMT

Hi ,

Attached docs helps you to convert the system to Trusted.

Re: how to convert as trusted mode.

Suraj K Sankari — Wed, 27 May 2009 06:13:24 GMT

Hi,
>>this command is not working for me.

Which command you are talking about.

Suraj