Shadow password file

[Stephen Hughes]

Hi all

I'm looking for software to create a shadow password file. I tried the trusted system setup, but for some reason, it stopped one of my scripts from working that has a remote shell executable in it. It kept asking for the password to connect to the remote machine.

[Stefan Farrelly]

Not sure why your script is using a remote shell executable, but if you need to do this then ensure your .rhosts and/or /etc/hosts.equiv are setup on your remote machine so you can execute it without requiring a password.

[Kofi ARTHIABAH]

Stephen:

Since you need a trusted system, you want to make sure that your data transfers (and commands to other machines) are done securely. You might want to look at installing ssh on the servers. The advantage is that with ssh, you can use the private-key exchange to ssh ( replacement for remsh) to another box. Your trusted system will allow that, and from a security stand point, it is a good thing.

The ssh documentation explains how to set up a secure remote execution of commands without passwords (ie. setting up keys.)

cheers.

[Patrick Wallek]

There is no way with HP-UX, as far as I know, to have a shadow password file without setting your system up as a trusted system. That then brings up the issue of NIS. If you are using NIS (not NIS+) then you can't have a trusted system.

[Helmut Kutzberger]

As far as i know isn?t any method to modificate the system to use /etc/shadow.
The result of converting to a trusted system is that you?ll get a trusted computing base
consisting out of files in /etc/tcb ( i think ...) of the usernames which holds the users security policys/information and crypted passwd etc.