topic Re: Error converting to Trusted System in Operating System - HP-UX

Error converting to Trusted System

Victor_5 — Fri, 10 May 2002 19:01:47 GMT

/usr/lbin/tsconvert
Creating secure password database...
Disrectories created.
Making default files.
System default file created...
Terminal default file created...
Device assignment file created...
Moving passwords...
Can't write protected database;
password file unchanged.

If I use SAM, I can not see the message "Successfully converted to a trusted system", even through I turned on the auditing system, it looks like everything is ok, the system still prompts I need convert to trusted system first when I go to those menus again. Any hint?

Re: Error converting to Trusted System

Helen French — Fri, 10 May 2002 19:07:01 GMT

Hi Victor:

There will be some problem with either /etc/passwd file or a login. Check it with:

# pwck

Check and see for any errors, if found correct and run tsconvert again.

HTH,
Shiju

Re: Error converting to Trusted System

Victor_5 — Fri, 10 May 2002 19:11:35 GMT

I got it, there are some "#" in the front of some lines in /etc/passwd, which is invalid for /etc/passwd, but I still have a question, how come if I really need to use "#" in /etc/passwd?

Re: Error converting to Trusted System

Sanjay_6 — Fri, 10 May 2002 19:15:11 GMT

Hi Victor,

You cannot use a "#" in the passwd file in the 1st column. This is because it will rejected as an invalid entry,

/Quote/

The problem can be caused by an invalid login name. A valid login name must begin with an alpha character and may only contain alphanumeric and underscore characters. For example, a user name such as '5applic' would prevent the system from being converted to trusted.

The reason for this is the directory structure of the trusted computing base. Protected password database files are maintained in the /tcb/files/auth hierarchy. This directory contains other directories each named with a single letter from the alphabet. User authentication profiles are stored in these directories based on the first letter of the user account name. If the login name begins with a digit, there is not a place for it in the protected password database structure:

# cd /tcb/files/auth
# l

A, B, C, D, E, F, G, H, I, J, K, L, M, N, O, P, Q, R, S, T, U, V, W, X, Y, Z, a, b, c, d, e, f, g, h, i, j, k, l, m, n, o, p, q, r, s, system, t, u, v, w, x, y, z

/EndQuote/

Hope this helps.

Regds

Re: Error converting to Trusted System

Helen French — Fri, 10 May 2002 19:16:44 GMT

Hi Victor:

It is not possible to do that. This document will give you the explanation (TKB #USECKBRC00007628):

http://us-support2.external.hp.com/cki/bin/doc.pl/sid=18f7c25d051a628ca1/screen=ckiDisplayDocument?docId=200000055784880

HTH,
Shiju