How to implement shadow product in hpunix

[sanwin]

Hi,
How to implement shadow product in hpunix.
What version should we install for HPUX 11.23

Also i heard that the applications using the /etc/passwd file will get issues as they access the password directly from the passwd file.

So how to check whether there are any applications that are accessing the password field of /etc/passwd.

Please help me.

regards,
sanwin.

[unixguy_1]

Hi Sanwin,

i thing there is no applications intermediate to use the password files.

Because this is database of Users.
Pls kindly give the exact problem.

Regards,
Unixguy.

[likid0]

in HP-UX you can use shadow passwd with a patch, but what you should do, if you wan't to have the passwd in another place( in this case /tcb), plus many more securty features(READ THEM BEFORE CONVERTING), is convert your system into trusted mode.

here goes a link on a example converting a system to trusted mode:

http://www.hpuxtips.es/?q=node/126

More info:

http://docs.hp.com/en/B2355-90121/index.html

[Ganesan R]

Hi Sanwin,

Here you can download shadow password product for HP-UX 11.11.

http://software.hp.com/portal/swdepot/displayProductInfo.do?productNumber=ShadowPassword

But not sure if this product is available in the form of patch for 11.23

[~sesh]

Not sure about 11.23, but feature available in 11.31.

The command pwconv will do the trick.

[sanwin]

Hi All,
I tried pwconv in HP-UX 11.23 to make the shadow file.

It worked. I created a new user and it is getting shadowed properly.

I donno in what other ways we can check it.


Also, I want to know if we have some other way to implement shadow in HP-UX B.11.23 like installation of shadow depot etc.

Please let me know your views.

I have to implement in highly critical production SAP environments. so i need to test it fully. Please help me with all the ways you know.

thanks!!

regards,
sanwin

[Ganesan R · Accepted solution]

Hi Sanwin,

shadow password is inbuilt with 11.23. You no need to download the depot file.

It is simple steps to convert it. "pwconv" is to convert to shadow file and "pwunconv" to revert back to normal password file.

If you want to implement high level security features then you can go for trusted systems. It has many features.