Is my system trusted

[MRamHen]

Hi everyone,

I am running HP-UX 11i v1 and I thought my systems were 'trusted' but I am not able to find under /etc/ ;however I do have a /tcb/files/authr directory and I use trusted like commands to unlock accounts etc.. modprpw -k xxx te only.  ...I remember there was a command to confirm if my system is trusted or not, can someone help me please.

thanks!

MRH

[Matti_Kurkela]

If the file /tcb/files/auth/system/default exists, then your system is in trusted mode; if it does not exist, then it is not in trusted mode. (This is the mechanism used by the system call iscomsec(): see "man 2 iscomsec")

Any modprpw command should return with an error code 2 if the system is not trusted.

This would be one way to test if the system is in trusted mode or not (with thanks to Bill Hassell):

if [ -x /usr/lbin/modprpw ]
then
    /usr/lbin/modprpw >/dev/null 2>&1
    if [ $? -eq 2 ]
    then
        echo "This system is NOT in trusted mode."
    else
        echo "This system IS in trusted mode."
    fi
else
    echo "No modprpw command available - is this HP-UX at all?"
fi 

[Jeff_Traigle · Accepted solution]

Well, if you're using the trusted mode commands and /tcb exists, you're definitely in trusted mode. As an added assurance, you can run /usr/lbin/getprdef -r. If you are not in trusted mode, you will get "System is not trusted." Presumably, any of the other trusted mode commands you normally run would do the same thing.

[MRamHen]

Thank you for your replies, I have confirmed that it is trusted.