How to convert 11.23 to a trusted system?

[dictum9]

Without using sam?

[Pete Randall · Accepted solution]

tsconvert

However, you're better off using SAM - it does some things for you that tsconvert won't.


Pete

[James R. Ferguson]

Hi:

SAM is the preferred way to convert to a trusted system. However:

# /usr/lbin/tsconvert

Also, trusted systems are deprecated. You might want to convert to a shadow password file and use the Standard Mode Security Extensions product:

http://docs.hp.com/en/5991-8711/ch01s01.html?btnNext=next%A0%BB

Regards!

...JRF...

[Steven E. Protter]

Shalom,

You are aware that trusted system has been obsoleted in 11.31. There is new free technology at http://software.hp.com to replace it. Don't know when the 11.23 will get it.

SEP

[Olivier Masse]

For 11iv2 you can install SMSE (standard mode security extensions, I think it's available on the software depot) which will provide many of the trusted features such as shadow passwords and strict password standards without actually going into trusted mode.

User control policy with SMSE isn't as granular as in trusted mode, but it's good enough for most cases and you have less chances of having problems wich as locking yourself out of your system.

I disliked Trusted Mode a lot when I was on 11iv1. I negociated with our security people and was able to use SMSE instead when I deployed 11iv2.

Olivier