topic Re: Trusted system: what does it mean exactly? in Operating System - HP-UX

Trusted system: what does it mean exactly?

Enrico Venturi — Tue, 11 Nov 2003 11:10:33 GMT

Hello colleagues,
I need a starting point to explore and to understand the "trusted HP-UX" world.
Where can I find some documents in order to begin my analysis?

Thanks to everybody

Enrico

Re: Trusted system: what does it mean exactly?

Steven E. Protter — Tue, 11 Nov 2003 11:12:35 GMT

Trusted systems have more security options. You can force users to have randomly generated passwords for example. You can fine tune the expiration process.

The most important feature is shadowing the passwords.

Non-trusted systems keep passwords in /etc/passwd file. Trusted systems keep them in an ultra secure series of files, divided alphabetically in the /tcb folder.

It makes the system much harder to hack.

SEP

Re: Trusted system: what does it mean exactly?

Pete Randall — Tue, 11 Nov 2003 11:15:05 GMT

Enrico,

Here's a brief description:

http://www.docs.hp.com/cgi-bin/fsearch/framedisplay?top=/hpux/onlinedocs/B2355-90121/B2355-90121_top.html&con=/hpux/onlinedocs/B2355-90121/00/00/4-con.html&toc=/hpux/onlinedocs/B2355-90121/00/00/4-toc.html&searchterms=System%7cTrusted&queryid=20031111-091417

Pete

Re: Trusted system: what does it mean exactly?

Robert-Jan Goossens — Tue, 11 Nov 2003 11:15:59 GMT

Hi Enrico,

Take a look at this doc.

http://www.faqs.org/faqs/hp/hpux-faq/section-68.html

Regards,
Robert-Jan.

Re: Trusted system: what does it mean exactly?

Graham Cameron_1 — Tue, 11 Nov 2003 11:17:02 GMT

All docs start here:
http://docs.hp.com/hpux/os/11.0/index.html

The one you want is here:
http://docs.hp.com/hpux/onlinedocs/B2355-90121/B2355-90121.html

-- Graham

Re: Trusted system: what does it mean exactly?

Mihai Lazar — Wed, 12 Nov 2003 09:26:16 GMT

Hi

We have implemented trusted system for quite some time now. Please read the attached document for more details on how to setup.

Best regards,

Mihai

Re: Trusted system: what does it mean exactly?

doug hosking — Wed, 12 Nov 2003 11:23:08 GMT

We could help you more if you took a step
back and explained the reason for your interest. There are many features in trusted mode. Some of them have near-equivalents in standard mode.

If your main goal is simply shadow passwords, you might be interested in the free shadow password patch bundle at
http://software.hp.com/portal/swdepot/displayProductInfo.do?productNumber=ShadowPassword

There are some limitations in this, so read the documentation carefully.