System Administration
cancel
Showing results for 
Search instead for 
Did you mean: 

Can we set password to system default accounts (HP-UX )

 
Veerendra
Occasional Advisor

Can we set password to system default accounts (HP-UX )

Hi,

Can we set password to system default accounts ( adm, bin, lp, daemon, nuucp, uucp, nobody, noaccess, hpdb, sys,hpdb,www,webadmin )on HP-UX servers?

We want to set some default passwords as part of Audit.We also want to set shell=/usr/bin/false for these accounts.

Please let us know if it creates any issues to system operation.
6 REPLIES
Steven E. Protter
Exalted Contributor

Re: Can we set password to system default accounts (HP-UX )

Shalom,

These are not login accounts. No reason at all to set them:
adm, bin, lp, daemon, nuucp, uucp, nobody, noaccess, hpdb, sys,hpdb,

Set these two with the passwd command
www,webadmin

SEP
Steven E Protter
Owner of ISN Corporation
http://isnamerica.com
http://hpuxconsulting.com
Sponsor: http://hpux.ws
Twitter: http://twitter.com/hpuxlinux
Founder http://newdatacloud.com
Pete Randall
Outstanding Contributor

Re: Can we set password to system default accounts (HP-UX )

You want to give passwords to these accounts, thus enabling login capability? And then you want to take away login capability by setting the shell to /usr/bin/false? Seems like an exercise in pointlessness to me.

Perhaps you should suggest that your auditors spend a little time with the man page for passwd (4) and maybe general Unix concepts.


Pete

Pete
Veerendra
Occasional Advisor

Re: Can we set password to system default accounts (HP-UX )

This requirement came from Security audit guys.They don't want any user without password.
Patrick Wallek
Honored Contributor

Re: Can we set password to system default accounts (HP-UX )

These accounts do have passwords, but the passwords are invalid, thus making the accounts so they cannot log in.

There is absolutely no reason to put a password on these accounts.

I would not change the shell either. This could possibly have an impact on daemons that use these ids.
Avinash20
Honored Contributor

Re: Can we set password to system default accounts (HP-UX )

Please refer to

http://docs.hp.com/en/B2355-90950/ch08s03.html

Go to
"Eliminating Pseudo-Accounts and Protecting Key Subsystems"

Please assign points
"Light travels faster than sound. That's why some people appear bright until you hear them speak."
Tingli
Esteemed Contributor

Re: Can we set password to system default accounts (HP-UX )

This sounds more like a policy issue instead of technical one.