how to convert as trusted mode.

[senthil_kumar_1]

Hi,

I am using hp-ux 11.00 and 11.11.

I think my hp-ux server is not in trusted mode. since there no file like /etc/shadow.

Now i want to convert to trusted mode. so i used following command to convert. but it is showing some error.

Ex:

# pwconv
The system is not yet in trusted mode.
Use pwck to list any problems with the password file.
After fixing all problems use SAM to convert to trusted mode.


so how to use SAM to convert my system to trusted mode.

how to solve this.

[Sajjad Sahir]

Dear Senthil

The following link will help u

http://docs.hp.com/en/B2355-90950/ch08s08.html

thanks and regards

Sajjad sahir

[Nido · Accepted solution]

Hello Senthil,

To enable auditing, run SAM and use the â Auditing and Securityâ window.

Before converting system into trusted mode take a backup of /etc/passwd.

Recommended method is to use SAM rather than using tsconvert command.

>>>>I think my hp-ux server is not in trusted mode. since there no file like /etc/shadow.

Another clue would be to see /tcb.

Cheers!!

[avizen9]

Hi,
you can use SAM to convert your existing system into trusted,

before that as mentioned in url pls check
swlist -l fileset | grep Security


once system is trusetd you should see /tcb

below is pdf which can explain you how to use in detail about trusted system.

http://docs.hp.com/en/5992-3387/apa.html

[James R. Ferguson]

Hi Senthil:

Trusted and shadow implementions are different. HP's Trusted mode is deprecated at 11.31 (11iv3) meaning that that it is the last release that will support this functionality. I would suggest, therefore, that you transition to the shadow implementation. On 11.11 you can do this with:

http://h20392.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=ShadowPassword

Regards!

...JRF...

[Suraj K Sankari]

Hi,
>>Use pwck to list any problems with the password file

This error means there is some problem in your /etc/passwd file.
run pwck it will give the output where is the error might be some extra field added or may be some extra character add into your /etc/passwd file first fix it then you can run pwconv or using sam also you can convert your system into trusted mode.

Suraj

[Basheer_2]

Check the trusted status
/usr/lbin/getprdef -r

to convert

/etc/tsconvert
or use sam

[Taifur]

HI Senthil,

You can check below link as follows,
http://docs.hp.com/en/J4269-90041/ch04s02.html

Rgds//
Taifur

[Ganesan R]

Hi Senthilkumar,

Make yourself clear that /etc/shadow, pwconv or pwunconv are not at all related to trusted system.

These are all related to HP's security product "shadow password" which is available here for download.
http://h20392.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=ShadowPassword

You need to download and install the product. Then only you can run pwconv and pwunconv commands. /etc/shadow file will be created once you run /etc/shadow.

Trusted system is another layer of security level product. You can run "tsconvert" to convert the system to trusted. But SAM is the recommanded way to convert the system into trusted.

[Ganesan R]

Hi Again,

There is typo error.

>>>/etc/shadow file will be created once you run /etc/shadow.<<<

read as, /etc/shadow file will be created once you run pwconv command.

Sincere apologize....