Operating System - HP-UX
1748268 Members
3549 Online
108760 Solutions
New Discussion юеВ

Shadow Support on Series 9000 T600 HP-UX 10.20

 
Ronaphoom Suviriyakulch
Occasional Contributor

Shadow Support on Series 9000 T600 HP-UX 10.20

Is 'shadow-password' supported on HP-UX 10.20 running on series 9000 T600 ?

It has been configured as cluster of 2 machine and using MC/Service Guard.
3 REPLIES 3
Paul Hite_2
Frequent Advisor

Re: Shadow Support on Series 9000 T600 HP-UX 10.20

You can convert to a "Trusted System" which will, among
other things, remove the encrypted passwords from the /etc/passwd file. But
this does not create a "/etc/shadow" file. For information on the protected
password files, type "man prpwd".
Ronaphoom Suviriyakulch
Occasional Contributor

Re: Shadow Support on Series 9000 T600 HP-UX 10.20

Thank you very much Paul Hite. Your answer is very useful to me.

However, I still have more questions...

My system is a 365x24 production system with fully loaded oracle server with 1
Terabytes RAID-5 (70% used). But only few UNIX users, i.e. 50, which I have a
plan to expand to 300 users. That's why security comes in a play.

Question : How long should it take to convert my system to protected system?
My point is, Is it too hard or just time consuming?

Thanks in advance for any help.
Paul Hite_2
Frequent Advisor

Re: Shadow Support on Series 9000 T600 HP-UX 10.20

I only converted a couple of system to C2 security and that was back in the
hp-ux 9.0 days. I did not find it to be hard or time-consuming.

I did encounter a bug, cron jobs stopped working and I got some wierd error
message about audit id's. I just re-submitted the crontabs and everything was
fine.

If you're going to do this, it will be easier with 50 users than with 300. So
I would do it now.

Have a general backup of the system. Also have a copy of /etc/passwd and all
of your crontabs in case you need them to recover.