HPUX Shadow Passwords and BMC Patrol

[Keri MacNeil]

I have installed the Shadowing PW utility for HPUX 11.11 on several servers here. It seems to work well, except for BMC Patrol. When I
turn on shadowing (pwconv), patrol is unable to connect to the agent. Rebooting doesn't clear out the problem. As soon as I unconvert the shadowinig (pwunconv), patrol is immediately able to connect to the agent.

[Darren Prior]

Hi,

It certainly sounds like BMC Patrol isn't aware off the different system calls required to authenticate in a trusted environment. I'd suggest you contact the s/w author and check if they support their product on a trusted system.

regards,

Darren.

[Colin Topliss]

Many applications are not C2 compliant. The call to get the password entry changes from getpwent to getprpwent, and many vendors don't cater for this in their code.

It sounds as if you have maybe applied the patch that gives you just shadowed passwords rather than full-blown C2? You should also be aware that this on its own doesn't work with LDAP and NIS (or certainly never did when it first came out)!

Col.

[Keri MacNeil]

Contacted BMC, and it's a known issue. There's sending me a patch that replaces an executable.

[Keri MacNeil]

BMC was very helpful, and have already identified the bug:

422086 - PATROL Agent may be unable to authenticate user accounts on HPUX managed
systems that have been configured to use the optional shadow password feature.

This was fixed with patch # 3.5.32.20