How to convert a Trusted system into a Non-Trusted System ??

[Kuldeep Solanki]

Hi

I have a HP-UX 10.20, which was a non-trusted system initially. I made in trusted, how do I revert back to a non-trusted system.

Regards
Kuldeeep Solanki

[Michael Tully]

Try:

/usr/lbin/tsconvert -r

or use sam

[Steven E. Protter]

I always use sam

tsconvert -r will also do it.

I'm not sure if that works on 10.20.

Try it and see, I can't see it hurting anything.

I liked keeping systems trusted. Any reason why you wish to convert?

SEP

[Kuldeep Solanki]

Thanks guys !!

I dont see this binary on my system.
can somebody send this binary/script to me on solanki@softhome.net

Regards
Kuldeep Solanki

[Karthik S S]

/usr/lbin/tsconvert

-Karthik S S

[Sanjiv Sharma_1]

# /usr/lbin/tsconvert -r
or
# /etc/tsconvert -r

[Kuldeep Solanki]

I got it.
I see the file to be there but I cant run it.
Not even when I am logged in with "root".

Regards
Kuldeep SOlanki

[Darren Prior]

Hi,

The supported way to get back to a non-trusted system is to use SAM.

I hope that your system was well patched before you trusted it, at 10.20 (which is now an obsolete OS) there could be problems if an unpatched system was trusted.

regards,

Darren.

[Kuldeep Solanki]

Hi

How do I do it in SAM ???

There is no option like this from where I can change a trusted system into a non-trusted system.

Regards
Kuldeep Solanki

[David Burgess · Accepted solution]

Auditing and Security -> Audited Events -> Actions -> Unconvert the System.

Just a thought. I uncoverted a system that wasn't patched up to date and the root entry in the passwd file got corrupted. Fortunately I has a second root login and could repair it. Maybe do the same and take a backup of the passwd file just in case!

Regards,

Dave.

[Darren Prior]

Hi,

An FYI for David and also Kuldeeep - PHCO_17218 tsconvert patch has a fix for "unconverting a long password corrupts the passwd entry." This fix was present in an older version of this patch - but some people have neither on their system. ;-( There are other essential trusted patches - have a quick search through the forums as I posted a list recently.

regards,

Darren.

[Kuldeep Solanki]

Hi Guys

Thanks a lot to you all.
I have converted my system back to a non-trusted one.

I really appreciate everybody's help.

Regards
Kuldeep Solanki