TCB & Oracle

[Jon Hill_3]

We are considering converting one of our HP-UX 11.11 servers to Trusted Computing Base mode. The server we want to convert has two instances of Oracle 9.2 on it. Any thoughts on whether this conversion will adversely affect Oracle?

[Steven E. Protter · Accepted solution]

It will have no effect on Oracle.

I've done it.

Trusted system will make the passwords for the oracle applicaiton users on the OS more secure.

Oracle has its own login validation in the database and that won't change.

SEP

[Jeff Schussele]

Hi Jon,

Should have no effect, although there is a gotcha with PWs when converting to TCB.

IF any passwords are longer than 8 chars the conversion to TCB will truncate them to 8 chars. They'll still work, but the system will only recognize the first 8 chars & if you input the extra - even though they're correct - the PW will not match. The first 8 will match & work, but not the rest.

I'd also recommend that you have 2 root sessions open during conversion in case the test login for root fails so you'll still have a root session available to change the root PW if necessary.

HTH,
Jeff

[twang]

Converting HP-UX 11.11 servers to Trusted Computing Base mode doesn't affect Oracle runing on it, if you need apply any OS patch, you must HP-UX patches advised for Oracle.

[RAC_1]

There wont be any issues with users. Their passwords will expire. To avoid it use
/usr/lbin/modprpw -V