question regarding trusted system

[Ricky_4]

Hi All,

What will be the effect if we convert HPUX 11.00 into trusted system? Currently, this L2000 have db2 dbase, websphere and ftp server enable. And we want to know if all the applicaton installed and services are still up and running after the trusted system conversion.

Thanks in advance.

[Michael Tully]

Changing your system to trusted is very straightfoward.

# /usr/lbin/tsconvert

BUT! beware of the implications, firstly it will expire *all* passwords. The second thing thing is, how your application will handle the change. It could cause some unsuspecting problems. If possible try it out on a test or development system first. You can rollback the trusted change if necessary.

# /usr/lbin/tsconvert -r

[Ramkumar Devanathan]

Hi,

Here are some links to earlier conversations around this topic - take your time to read these.

http://docs.hp.com/hpux/pdf/B3782-90728.pdf

http://docs.hp.com/hpux/pdf/B2355-90121.pdf

http://forums.itrc.hp.com/cm/QuestionAnswer/0,,0xce3deea29889d611abdb0090277a778c,00.html

http://bizforums.itrc.hp.com/cm/QuestionAnswer/0,,0x0fa94a988422d711abdc0090277a778c,00.html

http://bizforums.itrc.hp.com/cm/QuestionAnswer/1,,0x220d06350fe2d61190050090279cd0f9,00.html

HTH.

- ramd.

[Steven E. Protter]

I actually converted my systems in a novel way while doing a genral security project.

I installed Bastille.

It is a security hardening tool, free ported by HP from Linux.

Here is a link. You run it in X-Windows, it asks you if you want to run as a trusted system and you are done.


Required Perl install

http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=PERL

Bastille: Security Hardening Tool

http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=B6849AA


SEP

[Ravi_8]

Hi,

even after converting the sysetm to be a trusted, all the DB2 database, websphere anf ftp will work.

[Tim Sanko]

The tsconvert works, but if you are a gui man (Said in my best Arnorl Swartznegger) you can convert, and deconvert from sam.

Test in the middle with a few users and roll back and forth.

The applications you mention should work fine after conversion.

Tim

[RAC_1]

to avoid expiration of all passwords use

/usr/lbin/modprpw -V