How can i come to know that HPUX is configured for trusted mode OR not

[Movin Shah]

Dear All,

What are the differences between system configured in trusted & Non-trusted mode.

Regards
Bhavin Shah

[Steve Steel]

Hi

Again

www.docs.hp.com

Select search this site from the blue area

Use trusted as key

All you want to know.


steve Steel

[Steve Steel]

Hi

http://searchhp.techtarget.com/tip/1,289483,sid6_gci750939,00.html


Good info


steve Steel

[Peter Kloetgen]

Hi Movin,

very easy to find out:

if you have encrypted passwords in /etc/passwd for your users and for root, the system is not a trusted system.

Allways stay on the bright side of life!

Peter

[Nick Wickens]

If you have the directory /tcb then its a sure bet that the system is going to be (or has been) trusted. If not then it probably ain't.

[Victor_5]

Regarding the difference, it is a big topic, take a look of this book

http://www.docs.hp.com/hpux/onlinedocs/B2355-90121/B2355-90121.html

A couple of ways to find out whether or not:
1. cat /etc/passwd
the second section, password section, should be "*" for all users

2. check whether you have /tcb
directory

3. go to sam
-->Auditing and Security
If you are in the non-trusted, the system will ask you to convert or not, otherwise, you are in the trusted

[George_Dodds]

If you want to find out if your system is trusted run the following command


usr/lbin/getprdef

you'll either get message system is not trusted
or return code of 2 and options for the command.

Cheers

George

[Steven Sim Kok Leong]

Hi,

If your system is already trusted, executing /etc/tsconvert will show the following, otherwise it will convert your system to trusted:

# /etc/tsconvert
System has already been converted.

Hope this helps. Regards.

Steven Sim Kok Leong

[Sanjay_6]

Hi Movin,

Try this,

http://docs.hp.com/cgi-bin/fsearch/framedisplay?top=/hpux/onlinedocs/B2355-90742/B2355-90742_top.html&con=/hpux/onlinedocs/B2355-90742/00/00/65-con.html&toc=/hpux/onlinedocs/B2355-90742/00/00/65-toc.html&searchterms=trusted&queryid=20020605-073912

Hope this helps.

Regds

[Valkiria Santos]

Hi,


You can execute pg comando on /etc/passwd, in passwd place you will see an * for all passwd.

In trusted mode you can configure your passwd in secure way, you can audit some comands, control number of login fails and many others things.. It??s better you read the manual about it.

Valkiria

[Joseph A Benaiah_1]

In addition to the above, you could compile this small program and run it:

/* chktcb.c */
#include
#include
#include
#include
#include

#include
#include
#include

main( )
{
if( iscomsec()==1 )
{
printf("Y\n");
}
}

Compile it by running:

cc chktcb.c -o chktcb

If you run it on a trusted system it produces a Y.

Cheers,

Joseph.