Shadow passwords

[Kwahae_1]

I am an HP-UX 11.23 user and tried to do pass word shadowing using the pwconv command. This is what I got:

# pwconv

*Warning*: There is a restriction on the use of shadow password
functionality in this release of HP-UX. Failure to consider this
limitation may lead to an inability to log in to the system after
the conversion is performed. A system converted to use shadow
passwords is not compatible with any repository other than files
and ldap. This means that the passwd entry in the nsswitch.conf
file must not contain nis, nis+, or dce.

Would you like to proceed with the conversion? (yes/no):

I don't understand the "repository other than files and ldap statement". I don't use nis, nis+ or i think dce.

Should I continue with the conversion or not?

Thanks

[Pete Randall · Accepted solution]

"This means that the passwd entry in the nsswitch.conf file must not contain nis, nis+, or dce."

What does your nswitch.conf file say?


Pete

[Mel Burslan]

nis, nis+ and dce authentication methods are antiquated and should not be used anyhow, but if for some bizzare reason you still need to use them, you will lose this functionality, that notice is warning you about. All in all, HP doesn't want you to run to them crying after you convert to shadow password use. C-Y-A on their end more than anything else in my opinion.

[Kwahae_1]

# cat /etc/nsswitch.conf
#
# /etc/nsswitch.files:
#
# @(#)B11.23_LR
#
# An example file that could be copied over to /etc/nsswitch.conf; it
# does not use any name services.
#
passwd: files
group: files
hosts: files dns
ipnodes: files dns
services: files
networks: files
protocols: files
rpc: files
publickey: files
netgroup: files
automount: files
aliases: files

[James R. Ferguson]

Hi:

I would look at your '/etc/nsswitch.conf' to see if 'nis' is configured. If this is an option, and you really aren't using it, remove it and re-issue the 'pwconv'.

Regards!

...JRF...

[Mel Burslan]

You look good for the shadow password conversion where your system stands right now.

[Kwahae_1]

Okay. Will try it and come back to you guys.
Thanks

[Kwahae_1]

All is well. I guess I will do the rest of my servers. Thanks all.

[Kwahae_1]

Thanks all.