topic Re: trusted system in Operating System - HP-UX

trusted system

tung lee — Tue, 20 Nov 2001 01:24:47 GMT

Hi guys,

I have converted my system from HP-UX 10.20 to HP-UX 11.0. I tried to convert the system into a trusted system, but it took 2 hours (under SAM) and did not complete. I had to stop the process (by hitting OK).

Prior to that, I have run pwck and grpck and they reported issues like NUMERIC login names.

Question is,
1. Are there any documents that specifies trusted system's requirements? Are NUMERIC login names a no-no?
2. The /etc/passwd file is 940KB - I have 60MB under / - could this be the problem?

Any help will be greatly appreciated...
Thanks in advance...

Re: trusted system

Rob Galloway_1 — Tue, 20 Nov 2001 01:50:09 GMT

Hi,
Try this doc its old but should still contain relevant info

http://docs.hp.com/hpux/onlinedocs/B2355-90121/B2355-90121.html

Rob

Re: trusted system

Michael Tully — Tue, 20 Nov 2001 01:52:16 GMT

Hi,

I've not heard or read that there could be
problems when converting to trusted with
numeric ID's, but in saying that I had a
look at the 'tsconvert' program that does
the conversion, 'strings /usr/lbin/tsconvert'
and there does not seem to be anywhere in
it that tries to create directories for
numeric Id's. You could test this by
commenting out the numeric id's and running
the command again from the command line
# /usr/lbin/tsconvert
to see what it does. You can of course put
it back by running
# /usr/lbin/tsconvert -r

On your second point, how much available space
do you have for / ? 60Mb is of course a
little small, that is why most people prefer
to do a cold install of HPUX11 instead of an
upgrade for which I've seen many problems.
On other thing, You could increase /
by cutting an ignite tape and booting from it.

HTH
-Michael

Re: trusted system

Duncan Edmonstone — Tue, 20 Nov 2001 09:33:10 GMT

The only time I've seen the conversion run for ages is when the host was a NIS client (I know its a no-no - I didn't back then!) - In this situation the tsconvert process charges off through the NIS password file (usually much larger than a local file) and turns them all into normal users. If this is the case, all I can say is, I hope you have a backup of your old passwd file!

Re: trusted system

tung lee — Wed, 21 Nov 2001 03:22:06 GMT

Thanks for the reply, guys, but alas, the problem remains.

I have looked at that document, it has a few requirements on trusted system mode, but didn't really say anything about NUMERIC login names.

I can comment out the NUMERIC login names, but there are 1870 users! Since this is a production host, getting an outage for 2-3 hours is a problem.

Fortunately, this system is not running NIS.

Perhaps another good question is, is it normal to take longer than 2 hours to convert into trusted system mode with a password file of size 940KB?

Re: trusted system

tung lee — Thu, 22 Nov 2001 01:43:56 GMT

Just to summarize, HP confirmed that NUMERIC logins not supported for trusted system. This is due to the /tcb/files/auth dictionary that is compose of characters from A-Za-z.

Document to refer to: USECKBRC00007628