Shadow passwd file

[MikeL_4]

We are running HPUX 11i V1 (11.11) on our servers currently and have a request from one of our clients that requires us to implement a shadow passwd file for them on there server.

Is it possible to implement a shadow passwd file on 11.11 without converting to a trusted server environment ?

[Sameer_Nirmal]

Install the HPUX shadow password product available at
http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=ShadowPassword

[Patrick Wallek]

Yes, you can implement /etc/shadow on HP-UX 11.11.

The Shadow Password bundle is available here:

http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=ShadowPassword

[Pete Randall · Accepted solution]

Mike,

Go to the ITRC patch search page:

http://www1.itrc.hp.com/service/patch/search.do?admit=-682735245+1176223341388+28353475&BC=main%7C&pageOsid=hpux


and search on "shadow password" with 11.11 selected. You will come up with a list of some 23 patches that are used to implement the shadow password feature.


Pete

[Pete Randall]

Oops, actually the bundle is the better approach!


Pete

[Steven E. Protter]

Shalom,

After installing the Shadow password depot software you should have functionality and increased security similar to Linux.

SEP

[MikeL_4]

Thanks, after installing depot where is it documented to implement shadow password on 11.11 ?

[Patrick Wallek]

Man pages are always a good start:

documentation

The manpages installed with this product provide more information on shadow passwords. Important manpages include: pwconv(1m), pwunconv(1m), pwck(1m), passwd(1), getspent(3c), putspent(3c), passwd(4), shadow(4), security(4).

To convert to shadow passwords, use the 'pwconv' command.

[MikeL_4]

One final question, I've seen a couple of links that recommend rebooting the server after running the pwconv and pwunconv commands.

The ShadowPassword_B.11.11.03.depot install does not require a reboot and I don't see anything in the man pages about doing a reboot. Just wanted to make sure I either do or do not have to do a reboot in any of these steps ??

[Surizan Othman]

http://www.docs.hp.com/en/5991-0909/5991-0909.pdf

The best reference to look into for shadow enable.