Shadow Passwords

[Jeffrey S. Sims]

This is my first post here, so bare with me. I wanted to know if there is a way to convert to shadow passwords on HP-UX 10.20 without converting to a trusted system.

[Bruce Regittko_1]

Hi,

Welcome to the forums. Unfortunately, I don't think that it is possible to convert to just a shadow password system. You only get this functionality from converting to a trusted system.

--Bruce

[Patrick Wallek]

Bruce is correct. You also cannot convert to a trusted system if you are running NIS.

[Jeffrey S. Sims]

Thanks for the promptness, the answer is what I feared. I was just hoping since Linux uses shadow and yet isn't a trusted system that there was a way to do it with HP-UX but I guess not.

If you help me distribute points I will be on my way. Yes I will give points, I noticed that some people don't bother, but it helps you to know who helps and who doesn't. Even if it isn't the answer you wanted to hear.

[Joseph C. Denman]

Is there a reason you do not want to conver to a trusted system? There is not too much overhead associated with it.

...jcd...

[Bill Hassell]

Just a note about shadow passwords versus trusted (C2 security). SHadow passwords have been around for a very long time and just not very secure anymore. Linux is using the old standard, just like HP-UX about 6-7 years ago.

A trusted is a much more secure method for handling password. That's why it is incompatible with NIS. The reason you want to hide the password is to protect the encryted string from being guessed using some other computer. NIS takes the password entries and exposes them to everyone on the LAN--not very secure at all. Now NIS+ will encrypt the data on the net but the downside is that every client must be upgraded to NIS+.