Moving out user/password information to another server

[Nisar Ahmad]

Hi There

We used to have a central trusted server (10.20) keeping all
the user login information for any other server.

Now we have to move the central user information out of that
server to a new 11.0.

I need to know how can I do that safly please ?

Thanks in advance

Nisar

[Shaikh Imran]

hi,
Why don't you configure NIS or NIS+ for
HP-UX 11.0.

Regs,

[Mobeen_1 · Accepted solution]

Nisar,
In addition to /etc/passwd, the following are some of the files that need to be looked at while transferring login information from one server to another

--------------------------------------------------------------------------
File || Description
--------------------------------------------------------------------------
/etc/d_passwd || Contains additional password information for
|| modem users.
/etc/dialups || Contains additional password information for
|| modem users.
/etc/gettydefs || Contains default getty values.
/etc/group || Defines group information.
/etc/hosts.equiv || Lists node that have equivalent password data bases.
/etc/inittab || Defines processes and default run-levels.
/etc/logingroup || Defines group information.
/etc/securetty || Used to protect user accounts.
--------------------------------------------------------------------------

There is a white paper which talk about the whole login process in detail and that should help you to determine what files need to be moved from one host to another. Take a look at the url below and let us know if you have any questions

http://www1.itrc.hp.com/service/cki/docDisplay.do?docLocale=en_US&docId=200000062685574

regards
Mobeen

[Sanjay_6]

Hi,

Take a backup of /etc/passwd, /etc/group, /tcb and /.secure and copy it to the new server and you have moved all your user id and their passwds etc to the new server. Don't forget to take a backup of the originals on the new server. Also copy home directories and other user infos.

Hope this helps.

Regds

[Nisar Ahmad]

Hi Sanjay

Thanks for the help.

How do I incorpoate the entries already there on the new system ?

Can I just convert to non-trusted before copying files and then copy fewer files too ?

Nisar

[Michael Tully]

If you try to incorporate the two, you'll end with a mess. Either use the complete backup, or untrust on server A (using tsconvert -r) then re-trust on server B (using tsconvert) thus having less files. There is one drawback, untrusting, and then retrusting, you will expire all passwords immediately.

[Sanjay_6]

Hi Nisar,

If you want to preserve id's that already exist on the system, you may run into duplicate UID. Are you sure you want to mix that. If you want to do that, take a backup from the old system. Convert the new system to trusted one. Bring the files from the old system. Edit the /etc/passwd and /etc/group file and remove duplicate entries and then append the existing passwd and group files. Copy the /tcb directory. Run "authck" once done and i think you should be okay. Never mixed something like this before, so this is a suggestion. Be prepared to backout if necessary. Keep a couple of login screens opened as handy and properly log whatever you are doing.

Hope this helps.

Regds

[Nisar Ahmad]

Hi Sanjay

What about the home directories on the old server ?

Nisar