topic Re: HP/UX 11.11 Restricted access for maintenance? in Operating System - HP-UX

HP/UX 11.11 Restricted access for maintenance?

rmueller58 — Tue, 19 Oct 2010 18:06:40 GMT

We are migrating database from Raid storage to SAN, we want to make sure only key users have access to the system..

Is there a good way in the /etc/profile to keep all but users root, user1, user2 and informix from getting access?

Re: HP/UX 11.11 Restricted access for maintenance?

Steven E. Protter — Tue, 19 Oct 2010 18:17:16 GMT

Shalom,

passwd -l

For every user that you want to keep off the system.

cat /etc/passwd | awk '{ print $1 }' > /tmp/list

edit the list

while read -r un
do
passwd -l $un
done < /tmp/list

SEP

Re: HP/UX 11.11 Restricted access for maintenance?

Chandrahasa s — Wed, 20 Oct 2010 02:54:03 GMT

Hi,

You can lock other user duiring activity using command

passwd -l username

verify is it done..

/usr/lbin/getprpw username

you should see lockout=0000010

Chandra

Re: HP/UX 11.11 Restricted access for maintenance?

rmueller58 — Wed, 20 Oct 2010 12:08:15 GMT

I am on a trusted system.

should i use the modprpw or passwd?

I want several accounts to remain active, but to lockout during maintenance all others, then after we get done to allow all users again.

Re: HP/UX 11.11 Restricted access for maintenance?

rmueller58 — Wed, 20 Oct 2010 12:15:10 GMT

passwd -l works now I have to get a script written to lock and then unlock.

I am going to create a list per SRP's rec, to

for UU in `cat lockoutuser`
do
passwd -l $UU
done

for unlocking

Roll these two commands in place of passwd:
/usr/lbin/modprpw -l -m alock=NO $UU
/usr/lbin/modprpw -k $UU

Sound right?

Re: HP/UX 11.11 Restricted access for maintenance?

James R. Ferguson — Wed, 20 Oct 2010 12:25:11 GMT

Hi:

Instead of:

for UU in `cat lockoutuser`
do
passwd -l $UU
done

...eliminate the extra process you spawn (the 'cat') and let the shell do this:

while read UU
do
passwd -l ${UU}
done < lockoutuser

...

Regards!

...JRF...

Re: HP/UX 11.11 Restricted access for maintenance?

rmueller58 — Wed, 20 Oct 2010 12:27:29 GMT

Thanks JRF.

Re: HP/UX 11.11 Restricted access for maintenance?

rmueller58 — Wed, 20 Oct 2010 14:06:30 GMT

JRF or Steven,

would this work to unlock post maintenance?

while read UU
do
/usr/lbin/modprpw -l -m alock=NO $UU
/usr/lbin/modprpw -k $UU
done < lockuser.txt

Re: HP/UX 11.11 Restricted access for maintenance?

Chandrahasa s — Wed, 20 Oct 2010 16:37:18 GMT

Hi,

you can just run

/usr/lbin/modprpw -k $userid

Chandra

Re: HP/UX 11.11 Restricted access for maintenance?

rmueller58 — Wed, 20 Oct 2010 16:44:24 GMT

Chandra, so based on my lock file I would just do this correct?

while read UU
do
/usr/lbin/modprpw -k $UU
done < lockuser.txt

Re: HP/UX 11.11 Restricted access for maintenance?

Chandrahasa s — Sat, 23 Oct 2010 04:02:23 GMT

yes

Chandra

Re: HP/UX 11.11 Restricted access for maintenance?

rmueller58 — Mon, 25 Oct 2010 17:03:53 GMT

All went well, thanks for the assistance!,

Re: HP/UX 11.11 Restricted access for maintenance?

rmueller58 — Mon, 25 Oct 2010 17:04:38 GMT

All went well with the migration, Thanks, JRF, Steven, and Chandra