Can we set password to system default accounts (HP-UX )

[Veerendra]

Hi,

Can we set password to system default accounts ( adm, bin, lp, daemon, nuucp, uucp, nobody, noaccess, hpdb, sys,hpdb,www,webadmin )on HP-UX servers?

We want to set some default passwords as part of Audit.We also want to set shell=/usr/bin/false for these accounts.

Please let us know if it creates any issues to system operation.

[Steven E. Protter]

Shalom,

These are not login accounts. No reason at all to set them:
adm, bin, lp, daemon, nuucp, uucp, nobody, noaccess, hpdb, sys,hpdb,

Set these two with the passwd command
www,webadmin

SEP

[Pete Randall]

You want to give passwords to these accounts, thus enabling login capability? And then you want to take away login capability by setting the shell to /usr/bin/false? Seems like an exercise in pointlessness to me.

Perhaps you should suggest that your auditors spend a little time with the man page for passwd (4) and maybe general Unix concepts.


Pete

[Veerendra]

This requirement came from Security audit guys.They don't want any user without password.

[Patrick Wallek]

These accounts do have passwords, but the passwords are invalid, thus making the accounts so they cannot log in.

There is absolutely no reason to put a password on these accounts.

I would not change the shell either. This could possibly have an impact on daemons that use these ids.

[Avinash20]

Please refer to

http://docs.hp.com/en/B2355-90950/ch08s03.html

Go to
"Eliminating Pseudo-Accounts and Protecting Key Subsystems"

Please assign points

[Tingli]

This sounds more like a policy issue instead of technical one.