Merging user accounts from servers with TCB enabled

[viper_1]

Hi guys,

I have 2 existing 10.x servers with tcb. I have to move the users to a 11.0 server without needing the users to change their passwords. I understand that I'll have to merge the existing /etc/passwd and /etc/group files and copy that into the new server. What about the tcb files, how to I work with them?

Thx for your help!

- Derek

[S.K. Chan]

I think it is safer foryou to "untrust" the 10.x server first, then migrate those files over to the 11.x and then convert the 11.x to trusted system. But since you've asked, here is the recipe .. I have not tried this before but it's a recipe I got a while ago from my co-worker.

Run these on the 10.x server (after you have
move the home directory over to your 11.x server) :-
# cd /
# tar cvf /tmp/tcb.tar tcb
# cd /etc
# tar cvf /tmp/pword.tar passwd
# tar cvf /tmp/grp.tar group
==> Now ftp the /tmp/tcb.tar; /tmp/pword.tar and /tmp/grp.tar over to the 11.x server, put those files in say /tmp.

Run these on the 11.x server :-
# cd /etc
# cp passwd passwd.bak
# cp group group.bak
# mv /tcb /tcb.bak
# cd /etc
# tar xvf /tmp/pword.tar
# tar xvf /tmp/group.tar
# cd /
# tar xvf /tmp/tcb.tar

When it's all done the users will still have to change their password the first time they log in.

[viper_1]

I want to add. I'm trying to merge the users of 2 existing servers into 1 new server. I guess I couldn't just tar the /tcb files from the 2 existing servers into the same /tcb directory in the new server, right?

Thx again!

- Derek

[S.K. Chan]

Oops, I didn't quite read your question well enough .. you said merge .. I was thinking migrate instead... well I still think "untrust" it first , copy files over then "trust" it would be your best bet.

[S.K. Chan]

A thread that talks about this a little, hope you'll find it helpful ..

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0x181d8ffa98a2d5118ff10090279cd0f9,00.html

[John Carr_2]

Hi

when you merge the files trusted or not make sure you dont have duplicate user ids or group ids.

John.