Coexistence between Trusted System and ACL's !

[Ivan Azuara]

Hi !

I have the next scenario :

- One unix server (HPUX 11.11) where i have defined 1200 users (not use NIS), but is not a trusted system, also i use constantly the acl´s property for the assignment of permissions to file systems.

Exist some problem with the use of acl´s if i convert this server to trusted system ?.

Exist some administration problem if my servers has a lot of users and is a trusted system using acl's ?


Thank's in advance

[Steven E. Protter · Accepted solution]

No problems:

Trusted systems involve the storage scheme of the encrypted password files and does not change the internal user id.

There should be no problem with ACL rules working the same way before and after the transistion.

To be safe.

make_tape_recovery tape before you start

convert to trusted with scan or tsconvert

test your acl setup

The make_tape_recovery or tsconvert command can be used to back the changes off it testing does not go well.

SEP

[RAC_1]

I don't think that there will be any problems with trusted system and ACLs.

But still take the ignite_recovery, just in case required.

Also when you convert to trusted system, all user acconts will expire. To avoid, do
/usr/lbin/modprpw -V, OR rather
/etc/tsconvert -c;/usr/lbin/modprpw -V

Anil

[Ivan Azuara]

Thank´s for the information

[doug hosking]

I don't believe you should have any problems with that combination. Long ago there was some HP documentation that claimed the two were not compatible but that was an error in the documentation and was later corrected.