Online Expert Day - HPE Data Storage - Live Now
April 24/25 - Online Expert Day - HPE Data Storage - Live Now
Read more
System Administration
cancel
Showing results for 
Search instead for 
Did you mean: 

how to convert as trusted mode.

SOLVED
Go to solution
senthil_kumar_1
Super Advisor

how to convert as trusted mode.

Hi,

I am using hp-ux 11.00 and 11.11.

I think my hp-ux server is not in trusted mode. since there no file like /etc/shadow.

Now i want to convert to trusted mode. so i used following command to convert. but it is showing some error.

Ex:

# pwconv
The system is not yet in trusted mode.
Use pwck to list any problems with the password file.
After fixing all problems use SAM to convert to trusted mode.


so how to use SAM to convert my system to trusted mode.

how to solve this.
15 REPLIES
Sajjad Sahir
Honored Contributor

Re: how to convert as trusted mode.

Dear Senthil

The following link will help u

http://docs.hp.com/en/B2355-90950/ch08s08.html

thanks and regards

Sajjad sahir
Nido
Trusted Contributor
Solution

Re: how to convert as trusted mode.

Hello Senthil,

To enable auditing, run SAM and use the â Auditing and Securityâ window.

Before converting system into trusted mode take a backup of /etc/passwd.

Recommended method is to use SAM rather than using tsconvert command.

>>>>I think my hp-ux server is not in trusted mode. since there no file like /etc/shadow.

Another clue would be to see /tcb.

Cheers!!
" Let Villagers Be Happy!! "
avizen9
Esteemed Contributor

Re: how to convert as trusted mode.

Hi,
you can use SAM to convert your existing system into trusted,

before that as mentioned in url pls check
swlist -l fileset | grep Security


once system is trusetd you should see /tcb

below is pdf which can explain you how to use in detail about trusted system.

http://docs.hp.com/en/5992-3387/apa.html
James R. Ferguson
Acclaimed Contributor

Re: how to convert as trusted mode.

Hi Senthil:

Trusted and shadow implementions are different. HP's Trusted mode is deprecated at 11.31 (11iv3) meaning that that it is the last release that will support this functionality. I would suggest, therefore, that you transition to the shadow implementation. On 11.11 you can do this with:

http://h20392.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=ShadowPassword

Regards!

...JRF...
Suraj K Sankari
Honored Contributor

Re: how to convert as trusted mode.

Hi,
>>Use pwck to list any problems with the password file

This error means there is some problem in your /etc/passwd file.
run pwck it will give the output where is the error might be some extra field added or may be some extra character add into your /etc/passwd file first fix it then you can run pwconv or using sam also you can convert your system into trusted mode.

Suraj
Basheer_2
Trusted Contributor

Re: how to convert as trusted mode.

Check the trusted status
/usr/lbin/getprdef -r

to convert

/etc/tsconvert
or use sam
Taifur
Respected Contributor

Re: how to convert as trusted mode.

HI Senthil,

You can check below link as follows,
http://docs.hp.com/en/J4269-90041/ch04s02.html

Rgds//
Taifur
Ganesan R
Honored Contributor

Re: how to convert as trusted mode.

Hi Senthilkumar,

Make yourself clear that /etc/shadow, pwconv or pwunconv are not at all related to trusted system.

These are all related to HP's security product "shadow password" which is available here for download.
http://h20392.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=ShadowPassword

You need to download and install the product. Then only you can run pwconv and pwunconv commands. /etc/shadow file will be created once you run /etc/shadow.

Trusted system is another layer of security level product. You can run "tsconvert" to convert the system to trusted. But SAM is the recommanded way to convert the system into trusted.
Best wishes,

Ganesh.
Ganesan R
Honored Contributor

Re: how to convert as trusted mode.

Hi Again,

There is typo error.

>>>/etc/shadow file will be created once you run /etc/shadow.<<<

read as, /etc/shadow file will be created once you run pwconv command.

Sincere apologize....
Best wishes,

Ganesh.
senthil_kumar_1
Super Advisor

Re: how to convert as trusted mode.

Hi Ganesan R

this command is not working for me.
Viktor Balogh
Honored Contributor

Re: how to convert as trusted mode.

for the pwconv command you need to install the ShadowPassword product first. but it not equals with Trusted mode...
****
Unix operates with beer.
UVK
Trusted Contributor

Re: how to convert as trusted mode.

Having /etc/shadow file is not the same as having a Trusted system, to implement password shadow you need to install security filesets. You can get some info about shadow from the below link.

http://docs.hp.com/en/B2355-90950/ch08s15.html

-------------------------------------------
Like it or worked !! Click kudos !!
UVK
Trusted Contributor

Re: how to convert as trusted mode.

Install Shadow Password product on your hpux box. you can get this from software.hp.com.
-------------------------------------------
Like it or worked !! Click kudos !!
SUDHAKAR_18
Trusted Contributor

Re: how to convert as trusted mode.

Hi ,

Attached docs helps you to convert the system to Trusted.
Suraj K Sankari
Honored Contributor

Re: how to convert as trusted mode.

Hi,
>>this command is not working for me.

Which command you are talking about.

Suraj