Operating System - HP-UX
1833866 Members
2363 Online
110063 Solutions
New Discussion

Is the system running in trusted mode?

 
SOLVED
Go to solution
Yap Yen Nee
Contributor

Is the system running in trusted mode?

Hi,
I am using HP 11i overhere. How can I check if the system is running under trusted mode or not? What are the characteristics for a trusted system under HP 11i?

Thank you.
7 REPLIES 7
Michael Tully
Honored Contributor
Solution

Re: Is the system running in trusted mode?

There are a couple of easy ways.

1) check the contents of the /etc/passwd to see if the encrypted password field has been replaced by '*' for all accounts. If so, there will be a /tcb subdirectory and contents

2) Run the 'getprpw' command like this
# /usr/lbin/getprpw -l
System is not trusted.

Not sure what you mean by characteristics. Are you after what is available to you?
This document could be of some assistance.

http://docs.hp.com/cgi-bin/fsearch/framedisplay?top=/hpux/onlinedocs/B2355-90121/B2355-90121_top.html&con=/hpux/onlinedocs/B2355-90121/00/00/4-con.html&toc=/hpux/onlinedocs/B2355-90121/00/00/4-toc.html&searchterms=system%7ctrusted&queryid=20040929-001336

and

http://docs.hp.com/cgi-bin/fsearch/framedisplay?top=/hpux/onlinedocs/B2355-90672/B2355-90672_top.html&con=/hpux/onlinedocs/B2355-90672/00/01/123-con.html&toc=/hpux/onlinedocs/B2355-90672/00/01/123-toc.html&searchterms=system%7ctrusted&queryid=20040929-001336
Anyone for a Mutiny ?
Franky_1
Respected Contributor

Re: Is the system running in trusted mode?

Hi Yap,

easy, just type pwconv - it'll show you if the system is in trusted mode or not
On the other side, if there's a dir named /tcb then the system is a trusted one and vice versa

Regards

Franky
Don't worry be happy
Muthukumar_5
Honored Contributor

Re: Is the system running in trusted mode?

IF the file
/tcb/files/auth/system/default available then, it is trusted one else it is untrusted.

Simple /tcb/files/auth/* directory should be there. some times after converting into untrusted system by simply deleting

/tcb/files/auth/system/default file so that,

/tcb/files/auth/ directory will be there.
Easy to suggest when don't know about the problem!
Muthukumar_5
Honored Contributor

Re: Is the system running in trusted mode?

We can identify the trusted system / non using iscomsec() call.

iscomsec returns a zero (0) if the system is not a trusted system. If
the system has been converted to a trusted system, iscomsec returns a
one (1).

You can get documents from

http://docs.hp.com

Attachment contains trusted system document. IT is good to read this.

HTH.

Easy to suggest when don't know about the problem!
Petr Simik_1
Valued Contributor

Re: Is the system running in trusted mode?

You can have 3 options

1.Unix - in passwd is crypted passwd
2.shadow - in passwd is x instead of cr.pasword
3.trusted mode - in passwd is * instead of pasword

all options are unconvertable. Trusted mode is most recomended if you need to secure you system.
Bharat Katkar
Honored Contributor

Re: Is the system running in trusted mode?

Hi,
In addition to this you can go thr' doc which talks about trusted systems.
Hope that helps.
Regards,
You need to know a lot to actually know how little you know
Muthukumar_5
Honored Contributor

Re: Is the system running in trusted mode?

hai bharat,

I have attached your same document there in prev. reply :)

Have a nice day.

Regards
Muthu
Easy to suggest when don't know about the problem!