topic Shadow passwd file in Operating System - HP-UX

Shadow passwd file

MikeL_4 — Tue, 10 Apr 2007 11:38:24 GMT

We are running HPUX 11i V1 (11.11) on our servers currently and have a request from one of our clients that requires us to implement a shadow passwd file for them on there server.

Is it possible to implement a shadow passwd file on 11.11 without converting to a trusted server environment ?

Re: Shadow passwd file

Sameer_Nirmal — Tue, 10 Apr 2007 11:42:45 GMT

Install the HPUX shadow password product available at
http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=ShadowPassword

Re: Shadow passwd file

Patrick Wallek — Tue, 10 Apr 2007 11:43:11 GMT

Yes, you can implement /etc/shadow on HP-UX 11.11.

The Shadow Password bundle is available here:

http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=ShadowPassword

Re: Shadow passwd file

Pete Randall — Tue, 10 Apr 2007 11:45:28 GMT

Mike,

Go to the ITRC patch search page:

http://www1.itrc.hp.com/service/patch/search.do?admit=-682735245+1176223341388+28353475&BC=main%7C&pageOsid=hpux

and search on "shadow password" with 11.11 selected. You will come up with a list of some 23 patches that are used to implement the shadow password feature.

Pete

Re: Shadow passwd file

Pete Randall — Tue, 10 Apr 2007 11:46:48 GMT

Oops, actually the bundle is the better approach!

Pete

Re: Shadow passwd file

Steven E. Protter — Tue, 10 Apr 2007 11:48:55 GMT

Shalom,

After installing the Shadow password depot software you should have functionality and increased security similar to Linux.

SEP

Re: Shadow passwd file

MikeL_4 — Tue, 10 Apr 2007 11:51:48 GMT

Thanks, after installing depot where is it documented to implement shadow password on 11.11 ?

Re: Shadow passwd file

Patrick Wallek — Tue, 10 Apr 2007 11:56:30 GMT

Man pages are always a good start:

documentation

The manpages installed with this product provide more information on shadow passwords. Important manpages include: pwconv(1m), pwunconv(1m), pwck(1m), passwd(1), getspent(3c), putspent(3c), passwd(4), shadow(4), security(4).

To convert to shadow passwords, use the 'pwconv' command.

Re: Shadow passwd file

MikeL_4 — Thu, 12 Apr 2007 08:25:47 GMT

One final question, I've seen a couple of links that recommend rebooting the server after running the pwconv and pwunconv commands.

The ShadowPassword_B.11.11.03.depot install does not require a reboot and I don't see anything in the man pages about doing a reboot. Just wanted to make sure I either do or do not have to do a reboot in any of these steps ??

Re: Shadow passwd file

Surizan Othman — Thu, 24 Jan 2008 02:07:37 GMT

http://www.docs.hp.com/en/5991-0909/5991-0909.pdf

The best reference to look into for shadow enable.