Ohhh....If you insist Rita!!!!
This is the exact abstract I submitted.
Using unknown passwords in UNIX administration
Abstract:
This session will discuss ways to use passwords that no one knows, hence unknown passwords, to aid in the security of your HP-UX or Linux system, while still allowing administrators the access they need to manage the applications and system. This can be of benefit if you are audited for compliance with things like HIPAA and Sarbanes-Oxley.
This session will cover ways to automatically create a unique, and unknown to any administrator or user, password and apply it to any user id on your system, even root.
Sudo is used to grant access to the ids with unknown passwords. Sudo (superuser do) is an open source tool designed to allow a user to run commands as another user, such as root, without knowing that users password. Participants will learn how to set up sudo to allow, and log, access to the ids with unknown passwords.
Examples of the following will be discussed during the session: the script used to generate unknown passwords; the scripts used to automatically change passwords; the cron jobs used to schedule the password changes; the sudo configuration file, sudoers.
The presenter will discuss how this solution has been implemented in his HP-UX and Linux server environment.
This session is intended for HP-UX and Linux system administrators.
