Shadow Password for 11.i

[Cheryl Griffin]

New Product released
http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=ShadowPassword

HP-UX Shadow Passwords
Increasing computational power available to password crackers has made the non-hidden passwords in the UNIX /etc/passwd file vulnerable to decryption. Shadow Passwords enhance system security by hiding user encrypted passwords in a shadow password file. Encrypted passwords previously stored in the publicly readable /etc/passwd file can be optionally moved to the /etc/shadow file, which is accessible only by a privileged user.

[Jeff Schussele]

Hi Cheryl,

So this will just give us a protected /etc/shadow & not a full blown /tcb... structure?

Jeff

[Cheryl Griffin]

Correct. The /tcb structure is for Trusted systems.

[Shannon Petry]

I hope you take this in the way I mean it,

IT'S ABOUT TIME!!!!

;)

Now if only we could get user friendly add ons to CDE to compete with Sun and SGI HP may grow more market share ;)

Regards,
Shannon

[Geoff Wild]

Shannon - why run CDE - just download and install Gnome. :)

Glad to see the shadow passwords - just need to check that it will work with our security system...

Rgds...Geoff

[Shannon Petry]

The reason not to run Gnome is that it is much slower than CDE.

It also has bugs, like screen saver locks not working, unexpected crashes, failure to stack windows properly, etc.. etc.. etc....

I need stability in a production environment.

If Gnome was working as it does in Linux, HP would be shipping it. As it is now, it's a Beta.

Regards,
Shannon

[Jeff Schussele]

Hi Cheryl,

Just a couple more questions if you don't mind....

1) Any special steps or "gotchas" if after installing this one does convert to Trusted?

2) What happens to /etc/shadow when converting to Trusted?

Thx,
Jeff

[Helen French]

Cheryl,

In this case, What should be the best procedure, if I wanted to change the passwd file manually (editing)?