Error converting to Trusted System

[Victor_5]

/usr/lbin/tsconvert
Creating secure password database...
Disrectories created.
Making default files.
System default file created...
Terminal default file created...
Device assignment file created...
Moving passwords...
Can't write protected database;
password file unchanged.

If I use SAM, I can not see the message "Successfully converted to a trusted system", even through I turned on the auditing system, it looks like everything is ok, the system still prompts I need convert to trusted system first when I go to those menus again. Any hint?

[Helen French · Accepted solution]

Hi Victor:

There will be some problem with either /etc/passwd file or a login. Check it with:

# pwck

Check and see for any errors, if found correct and run tsconvert again.

HTH,
Shiju

[Victor_5]

I got it, there are some "#" in the front of some lines in /etc/passwd, which is invalid for /etc/passwd, but I still have a question, how come if I really need to use "#" in /etc/passwd?

[Sanjay_6]

Hi Victor,

You cannot use a "#" in the passwd file in the 1st column. This is because it will rejected as an invalid entry,

/Quote/

The problem can be caused by an invalid login name. A valid login name must begin with an alpha character and may only contain alphanumeric and underscore characters. For example, a user name such as '5applic' would prevent the system from being converted to trusted.

The reason for this is the directory structure of the trusted computing base. Protected password database files are maintained in the /tcb/files/auth hierarchy. This directory contains other directories each named with a single letter from the alphabet. User authentication profiles are stored in these directories based on the first letter of the user account name. If the login name begins with a digit, there is not a place for it in the protected password database structure:

# cd /tcb/files/auth
# l

A, B, C, D, E, F, G, H, I, J, K, L, M, N, O, P, Q, R, S, T, U, V, W, X, Y, Z, a, b, c, d, e, f, g, h, i, j, k, l, m, n, o, p, q, r, s, system, t, u, v, w, x, y, z

/EndQuote/

Hope this helps.

Regds

[Helen French]

Hi Victor:

It is not possible to do that. This document will give you the explanation (TKB #USECKBRC00007628):

http://us-support2.external.hp.com/cki/bin/doc.pl/sid=18f7c25d051a628ca1/screen=ckiDisplayDocument?docId=200000055784880

HTH,
Shiju