topic Shadow passwords in Operating System - HP-UX

Shadow passwords

Kwahae_1 — Fri, 15 May 2009 15:47:35 GMT

I am an HP-UX 11.23 user and tried to do pass word shadowing using the pwconv command. This is what I got:

# pwconv

*Warning*: There is a restriction on the use of shadow password
functionality in this release of HP-UX. Failure to consider this
limitation may lead to an inability to log in to the system after
the conversion is performed. A system converted to use shadow
passwords is not compatible with any repository other than files
and ldap. This means that the passwd entry in the nsswitch.conf
file must not contain nis, nis+, or dce.

Would you like to proceed with the conversion? (yes/no):

I don't understand the "repository other than files and ldap statement". I don't use nis, nis+ or i think dce.

Should I continue with the conversion or not?

Thanks

Re: Shadow passwords

Pete Randall — Fri, 15 May 2009 15:52:30 GMT

"This means that the passwd entry in the nsswitch.conf file must not contain nis, nis+, or dce."

What does your nswitch.conf file say?

Pete

Re: Shadow passwords

Mel Burslan — Fri, 15 May 2009 15:53:14 GMT

nis, nis+ and dce authentication methods are antiquated and should not be used anyhow, but if for some bizzare reason you still need to use them, you will lose this functionality, that notice is warning you about. All in all, HP doesn't want you to run to them crying after you convert to shadow password use. C-Y-A on their end more than anything else in my opinion.

Re: Shadow passwords

Kwahae_1 — Fri, 15 May 2009 15:54:28 GMT

# cat /etc/nsswitch.conf
#
# /etc/nsswitch.files:
#
# @(#)B11.23_LR
#
# An example file that could be copied over to /etc/nsswitch.conf; it
# does not use any name services.
#
passwd: files
group: files
hosts: files dns
ipnodes: files dns
services: files
networks: files
protocols: files
rpc: files
publickey: files
netgroup: files
automount: files
aliases: files

Re: Shadow passwords

James R. Ferguson — Fri, 15 May 2009 15:58:09 GMT

Hi:

I would look at your '/etc/nsswitch.conf' to see if 'nis' is configured. If this is an option, and you really aren't using it, remove it and re-issue the 'pwconv'.

Regards!

...JRF...

Re: Shadow passwords

Mel Burslan — Fri, 15 May 2009 15:58:46 GMT

You look good for the shadow password conversion where your system stands right now.

Re: Shadow passwords

Kwahae_1 — Fri, 15 May 2009 16:13:35 GMT

Okay. Will try it and come back to you guys.
Thanks

Re: Shadow passwords

Kwahae_1 — Fri, 15 May 2009 17:49:36 GMT

All is well. I guess I will do the rest of my servers. Thanks all.

Re: Shadow passwords

Kwahae_1 — Fri, 15 May 2009 17:50:16 GMT

Thanks all.