convert to trusted

[joe_91]

we are trying to convert out standard hp-ux to trusted systems. Please guide with the insturctions for converting to trusted. I have to present a plan for this.

is this OK?

1. use sam to converto to trusted system

2. make good backup of /etc/passwd before converting

is there any fileset that needs to be installed?

Please Help

Thanks

Joe

[Sanjay Yugal Kishore Ha]

This thread contains the pointer.
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=1072857

[Paul Sperry]

Looks like your good to go Joe.
Your plan seems fine to me

[Jaime Bolanos Rojas.]

Joe,

If you are looking for some more detail this doc is the way to go:

http://docs.hp.com/en/B2355-90950/ch08s08.html

Regards,

Jaime.

[DCE]

I suggest having a second seesion logged into the server as root when you perform the conversion. This will allow you to address any glitches that may occur (such as a disable root account)

[Sp4admin]

Hi Joe,

That looks good to me. using SAM it is a very ease process.

sp,

[John Kittel]

One thing that happens is if before conversion to trusted the root password is greater than 8 characters, then after conversion to trusted, when logging in as root the system will only accept the password if you only enter the first 8 characters. If you try to log in using the full greater than 8 character password you will be denied. After conversion to trusted, and logging in using 8 characters, you can then set to a new password greater than 8 characters and it will work properly with the new password thereafter.

[A. Clay Stephenson]

You can run the tsconvert command directly but SAM runs it and does a bit more for you. By far the most important rule whether tsconvert is executed directly or by SAM is to be logged in as root in at least two sessions after first making a backup copy of the passwd file. That way you can get yourself out of trouble almost as fast as you got yourself in.

[Pratyush Paul_1]

Hi - Please try to use tsconvert, why you have to use sam, and with tsconvert you can make it trusted and you can untrust it too. Test it either way before you hand it over to your client.

Thanks

Pratyush

[RAC_1]

SAM does it in following way-/etc/tsconvert and followed by modprpw -V

If you do throug command line (/etc/tsconvert -c) make sure you also run /usr/lbin/modprpw -V immediately. This takes care of expired accounts. (all accounts expire when you convert to/from trusted mode)