/etc/shadow ?

[Gavin Clarke]

I've been asked to supply a shadow file for an audit. We're running a trusted system on 10.20 (decided to run on this until changing systems entirely).

My understanding is that all the passwords live in /tcb/files...
Is there a shadow file as well?

PS: Which is better?

Thanks hugely for all comments, suggestions and advice.

[U.SivaKumar_2 · Accepted solution]

Hi,

If it is a trusted system then /etc/shadow file is not used. Instead the files for users under /tcb/files/auth/ directory.

Give those files for analysis.

regards,

U.SivaKumar

[Zigor Buruaga]

Hi,

You are correct, trusted system lives in /tcb, and there is no shadow file.

Maybe this helps ...

http://www.ussg.iu.edu/usail/tasks/security/hp/hp.html

And about Shadow check this ...

http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=ShadowPassword

I think you can supply the trusted system for an audit ( /etc/passwd with no encrypted passwd ... )
Hope this helps.

Regards,
Zigor

[Tim Adamson_1]

Hi,

HP-UX doesn't use an /etc/shadow file. You are right in saying that the /tcb hierarchy contains the required information.


Hope this helps.

[Gavin Clarke]

Great stuff, Thankyou all so much for confirming my suspicions.

Tim, I read in a post that you can get a shadow password file on 11i, which is why I asked which is better. Thanks very much for your reply, it has helped me alot.

[Gavin Clarke]

Congratulations on your graduation too!

[Tim Adamson_1]

Hi,

In HP-UX 11iv1.6 they introduce a new Shadow Password feature so that post is correct.

Check the 11iv1.6 release notes at www.docs.hp.com.

I have no idea if it will be supported after that vrsion of HP-UX.

I hope that clarifies things. Probably makes it muddier :p


Cheers

[Gavin Clarke]

Just being picky really.

I suppose I could pursue the shadow vs. trusted question, however since we're not running that version yet, well I might just find a cup of tea and create some user accounts that have been awaiting my attention instead. Funny how the little important things get brushed aside when there's an audit going on.

Thanks again for your help.