moving users and group

[Simon Qu]

I am in the process of installing an HP UX 11i Server and need some help on how to copy and restore all users and groups including users templates to other server.

Thanks in advance for your help

[A. Clay Stephenson]

If it is an untrusted system then simply copy /etc/passwd, /etc/group, and /home to the new box (assumming that all the users' home directories are in /home). If it is a trusted system then transfer the same files plus the /tcb directory tree.

NOTE: Before doing anything, make backup copies of all the original files on the new box AND be logged in as root in at least two sessions so that you can get yourself out of trouble almost as fast as you got yourself in.

[Peter Godron]

Simon,
first question :
Is this a trusted system ?

Please also read:
http://forums1.itrc.hp.com/service/forums/helptips.do?#33 on how to reward any useful answers given to your questions.

So far you have awarded points to only 30 of 133 answers !

[Peter Godron]

Simon,
for trusted system, please see this earlier thread:
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=982931

[Simon Qu]

where to check if it is a trusted or untrusted system?

[Peter Godron]

Hi,
look for the /tcb directory.

More in this thread:
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=1056586

[Simon Qu]

I got it. when I went to SAM -> System Security Policies it asked me to convert to trusted system so the system is still untrusted.

Thanks all of you guys for your help

[Manuela Italia]

remember also to check and copy /etc/nsswitch.conf file, because it involves nsswitch functionality
including passwd and group.
Check also uid/gid conflict between new and old system.

bye,
manu

[Simon Qu]

I have now all users and group but I am missing the user templates. is it possible to copy it from the old box ?

[A. Clay Stephenson]

You will need to define templates as that is not a standard UNIX term. If you mean profiles then those should be handled by moving the /home directory tree. You may also need to move the contents to /etc/skel but these files (if any) are used when new users are added to the system.

[Simon Qu]

what I meant by template is when I create a user from SAM I do select user template before ading user to the system

[A. Clay Stephenson]

Oh, those templates. Real admins don't use SAM to add users but you need to copy the /var/sam/ug and /var/sam/ug_subareas directory trees to the new box.

[Simon Qu]

thanks Clay. I am not a real admin but just learning

[Reshma Malusare]

Hi simon,
As u checked it is untrusted system, so simply copy /etc/password,/etc/group/,/home.
Take backup of this files before it.
Also, yes admin normally used commands rather SAM. As it helps in analysis & its best practice to use.
but as you said you are not admin, then SAM will be easier for you to handle all.

Thanks & Regards
Reshma

[Reshma Malusare]

Hi,

Please also read:
http://forums1.itrc.hp.com/service/forums/helptips.do?#33 on how to reward any useful answers given to your questions.