Converting into Trusted System

[siddharthC]

Hi,

If i convert my HPUX system into Trusted system can i continue to backup my o/s and data through Ignite Backup or i have to use any other utility.

Regards,
Siddharth

[Pete Randall]

Absolutely.


Pete

[Robert-Jan Goossens]

converting to a trusted system has no impact on the use of ignite software.

Best reagrds,
Robert-Jan

[Pete Randall]

I should add, though, that Ignite is designed to be a disaster recovery tool to restore your operating system and that your data should be backed up and restored using normal backup procedures.


Pete

[siddharthC]

Hi,

Pls. suggest me some docs. that can assist me in converting to Trusted system.

Regards,
Siddharth

[Murat SULUHAN]

Hi Siddharth

http://docs.hp.com/en/B2355-90121/index.html

Best Regards

[Pete Randall]

The easiest and perhaps best way to convert to trusted is to use SAM. With the SAM approach you don't have to worry about all the passwords expiring and not being able to log in - SAM takes care of all that.


Pete

[Raj D.]

Siddharth,

You can refer this doc :


Administering HP-UX trusted system:
http://docs.hp.com/en/B2355-90121/index.html



Cheers,
Raj.

[Robert-Jan Goossens · Accepted solution]

and a good refference thread.

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=638058

[Jaime Bolanos Rojas.]

SiddharthC,

The good thing about using HP-UX is that usually their tools have the ability to work together ( a big advantage over open source ).

To convert, go to SAM, then go to auditing and security, then go to audited events, it should ask you if you want to convert to trusted. If not got to the actions menu and convert to trusted.

One important thing to keep on mind, all your passwords needs to be 8 characters long, no more ( hopefully ) not less ( this one is a rule ). To avoid some complication with the users, make sure that all of them comply to this requirement before converting, specially root.

Regards,

Jaime.

[Bill Hassell]

Just to amplify Jaime's answer a bit, the untrusted system allows you to use any length password but never tells you that it ignores all the characters beyond 8. When you convert to Trusted, longer passwords are allowed but if users try to login with their old (untrusted) password that is longer than 8 characters, it will fail. So go ahead and use the SAM method (under Auditing and Security) and the conversion will take place in just a few seconds (unless you have hundreds of users).

Any user that has a problem with a long password will probably retry it too many times so the account will be locked. Use SAM (Accounts for Users and Groups) to select the user and unlock the account. Now the user can login with just the first 8 characters. You can suggest to the users that they change their password to a longer one if they want. The Trusted system allows much longer passwords as well as many additional controls. See the man page for "security".