Reporting on SAM

[Eric Herr]

I am new to HPUX world and I am trying to write scripts to collect files for later security analysis. Particularly, I am having trouble finding password aging for specific user accounts and default password length. Most information I have found tells me to view a user account in SAM or edit the SAM security policy. What files should I grab that contain this information? In solaris they are the /etc/shadow and /etc/default/passwd files.

Thanks in advance.

[RAC_1 · Accepted solution]

If your system is in trusted mode, you can get all information you require through following commands.

getprpw
getprdef
modprpw
modprdef

Check man pages for all.

If system is not in trusted mode, you get all these required information with logins command. man logins for details.

Anil

[Kevin Wright]

look under /tcb. If your system is trusted, all your user accounts password info is here.
modprpw, getprpw should help.

[Sanjay Yugal Kishore Ha]

Also, you can use SAM's View SAM Log tool visible under Options menuitem or tail on /var/sam/log/samlog files, while working in SAM, to trace which commands are being used and which files are being modified.

Sanjay