hpux 11.23 untrusted vs trusted

[john guardian]

I've got an 11.23 untrusted system.

I want to convert to trusted. I tried this in SAM but received a "failed" status due to the presence of the /etc/shadow file.

What's the best way to resolve this so that I can convert to a trusted system?

Thanks.

[Jeeshan · Accepted solution]

use command pwuconv command which will remove shadow file. then convert the system in trusted mode

[Paul Sperry]

HP recommends that you run pwck before running pwunconv.

[YAQUB_1]

Hi John,

U can check the following link:-

http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=StdModSecExt

Thanks--Yaqub
HP Support!!!

[James R. Ferguson]

Hi John:

Trusted systems are deprecated as of 11.31. Instead of converting yours at 11.23 to that, you might want to consider the new Standard Mode Security Entensions available:

http://h20392.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=StdModSecExt

Regards!

...JRF...

[john guardian]

Don't think this customer wants to go quite that far (yet)... converting to the 11.31 Std Mode... at least not yet.

But in the same vein, The docs I've read concerning the /etc/default/security file also refer to /etc/security.dsc

Is that file part of the 11.31 security or does it apply to 11.23 as well?

[James R. Ferguson]

Hi (again) John:

> The docs I've read concerning the /etc/default/security file also refer to /etc/security.dsc . Is that file part of the 11.31 security or does it apply to 11.23 as well?

Yes, 11.23 has this documented in its manpages.

Additional insight into security features are summarized in Technical Knowledge Base document # emr_na-c00905800-2 (HP-UX Security Products).

Regards!

...JRF...