Lookig for Tru64 equivalent of a command in HPUX

[Mel Burslan]

In HP-UX, we have a command to replace the encoded password of a user with

/usr/sam/lbin/usermod.sam -p "Dx3zsaXO3q22." username

It is sort of an obscure command with no documentation, but it is there and it works,
which effectively sets the password without having to know what the clear text form of the password is.

I am wondering if such a command/script is available for Tru64 as well ? I am also interested in finding this for solaris but not as important as Tru64 at the moment.

The catch is, it needs to run on both trusted and untrusted systems.

Thanks in advance.

[Ralf Puchner]

the given command is unsupported for hpux and may change/removed without notice in future versions. Due to this fact there is no official tool from HP for Tru64.

Use passwd (official) or a grep/sed script (unsupported) to change the password.

[Michael Schulte zur Sur]

Hi,

and there is also the vipw command. :-)

greetings,

Michael

[Ann Majeske]

If you're interested in writing your own program, you should look into using the SIA routines. See the Security or Security Programming manual and the sia* man pages.

Ann

[PeterWolfe]

Mel,
There is also an undocumented way on Tru64
although it uses the clear text password:

usermod -p user
New password:
Retype new passwd:

so it's simple to script this and that's
what some of the account management tools
use

[Hein van den Heuvel]

Well, it hardly seems worth a dedicate tool. Uou could just use the editor of your choice on /etc/passwd (make backup!) and then do 'mkpasswd'

In the test i did to verify this, I use perl as the editor, but sed or vi or awk or edit can be used of course.

> grep hein /etc/passwd
hein:A2vaDBJeW8Xrg:203:15:Hein van den Heuvel:/hein:/bin/ksh

> passwd hein
Changing password for hein.

New password:
Retype new password:
root at kelrin> grep hein /etc/passwd
hein:PMqdrIlnFLWA2:203:15:Hein van den Heuvel:/hein:/bin/ksh


>perl -i -p -e 's/^hein:\w+:/hein:A2vaDBJeW8Xrg:/' /etc/passwd

>mkpasswd /etc/passwd
27 password entries (longest entry is 87 bytes long)
root at kelrin> rlogin -l hein 0 ....


hth,
Hein.

[PeterWolfe]

Hein,

The usermod -p way should work for both
for C2 and base security (not that it would
be incredibly harder to extend your
perl for C2).