1847899 Members
2888 Online
104021 Solutions
New Discussion

Re: sam_exec account

 
OldSchool
Honored Contributor

sam_exec account

I inherited 3 servers that have an account on them that looks like this:
sam_exec:xxx:0:1::/home/sam_exec:/usr/bin/sh

This is a non-trusted system and I’m cleaning out user accounts from the past 3 years. Any help would be appreciated.

Thanks
3 REPLIES 3
Ken Penland_1
Trusted Contributor

Re: sam_exec account

Here is what I found on sam_exec...I would say nuke it:

HP-UX release 9.0 contains some significant enhancements related to the
remote management of network security. In particular, SAM now contains
a Remote System Administration area that allows system management to
remotely administer networked systems.

Although this feature has only recently been released, preliminary
investigation has revealed the following:

When remote system administration is requested, SAM logs in to the
remote system, and creates a new account on the remote system (you
must provide the root password to the remote system to do this).

The new account is created with user name sam_exec, UID=0 and GID=1,
and is created with a copy of the root password currently used on the
remote system. This new account is used by SAM whenever logging in to
the remote system.
'
OldSchool
Honored Contributor

Re: sam_exec account

I see that now. I created the remote sam account on the systems when I set up remote sam. Thanks
OldSchool
Honored Contributor

Re: sam_exec account

closed