scripting tcb additions

[Keith Floyd]

Hi

I am trying to write a script to add users on a tcb system (we add about 12 a day)
has anyone done this ??

I am using useradd and then removing it (taking the UID and audit No) and recreating it with echo >>
I have chosen null passwd, 90 days inactivity. It all looks right to me but when I telnet in as user I still get asked for passwd.

I had taken options from a new user setup via SAM

Thanks

Keith

[Kofi ARTHIABAH]

the reason you cannot just add an entry to /etc/passwd and expect it to work is because trusted systems use shadow passwds and the actual passwords are not stored in /etc/passwd but in the directory structure /tcb/files/auth/

The command you can use to modify user password properties is: modprpw

see the thread:

http://my1.itrc.hp.com/cm/QuestionAnswer/1,1150,0x8ae76c96588ad4118fef0090279cd0f9,00.html

or do a search for modprpw in the forums.

Good luck

[John Eaton]

I agree with the last response.
Trying to hand modify users on a trusted system is not recommended, unless you're very familiar with the TCB database structure.
The useradd command, by default, does not assign a password. Instead it assigns places a * in the password field, thus preventing a login, until the passwd command is executed. Removing the * allows a no password login, but by default TCB does not allow null passwords, so it forces you to set a password.
The command modprpw can be used to safely modify the TCB database, but again, is not recommended if you are unfamiliar with TCB.
I've done extensive scripting with useradd, passwd and modprpw (and getprpw). If you are still interested email me: john.eaton@cdicorp.com

[Madhu Sudhan_1]

Just by adding an entry in the /etc/passwd will not allow the user to login into the system becuase it is a trusted system and having null password is not allowed as one of its default policy.

It also requires an entry in the trusted database "/tcb/auth/files".

The password field in /etc/passwd in a trusted system should be * and not a null.

As a whole a user must have an entry in the trusted base, as well as /etc/passwd etc.


......Madhu