HP-UX Enhanced Security Feature

[Greg Southam]

I am just after some info on something that I have come accross on HP-UX. This is the Enhanced security feature. I would just like a general description, or even better a URL of some whitepapers that can give me the info I might need.
Is this the same thing as having the security feature enabled on Solaris where you have a shadow password file??

[James R. Ferguson]

Hi Greg:

Go to docs.hp.com and search with the keyword "trusted" for a wealth of documents. You can start here, for one:

http://docs.hp.com/cgi-bin/fsearch/framedisplay?top=/hpux/onlinedocs/B2355-90701/B2355-90701_top.html&con=/hpux/onlinedocs/B2355-90701/00/00/65-con.html&toc=/hpux/onlinedocs/B2355-90701/00/00/65-toc.html&searchterms=Trusted&queryid=20010626-072559

...JRF...

[Herve BRANGIER]

Hello,

For passwd and users control you can convert
your system to a Trusted System :
sam ->auditing and security -> audited users (Yes to convert)
or tsconvert (see man page)

In TS your passwd are on a database and you
can limit access and manage users with more
details.

Think you can find more information in hp web
site, searching "Trusted system"

HTH

Herv?

[Patrick Wallek]

In the Managing Systems and Workgroups: A Guide for HP-UX System Administrators ( http://docs.hp.com/hpux/onlinedocs/B2355-90701/B2355-90701.html ) they talk about some features available to enhance security on your system.

Here's an excerpt from the manual(to get to this go to the above link, then scroll down to 'Administering a system: Managing System Security' click on the + sign and then scroll down to 'Optional Security Packages'):

Optional Security Packages

The following sections describe a number of optional packages available to enhance security on your standard or trusted HP-UX system. The sections are:

Using Pluggable Authentication Modules (PAM)
Using Network Information Service Plus (NIS+)
Secure Internet Services (SIS)
Intrusion Detection System (IDS/9000)
Common Data Security Architecture (CDSA)

[Greg Southam_1]

Thanks for the help guys.