System Trusted

[castro_2]

There is a way to known, if the system trusted is runing on the server?
Wich are the options the tsconvert?
Thanks

[Jorge Pons]

Hi

For example if you see im the second column of /etc/passwwd a "*", then is a trusted system.
The original passwd file go another place.

Regards

Jorge

[Stefan Farrelly · Accepted solution]

To see if your server is trusted;

/usr/lbin/getprpw

If its not trusted getprpw will say so, if it is trusted it will return a usage error.

tsconvert has options;

-c Convert passwd file only to trusted
-p Convert cron and at jobs to trusted
-r Convert from trusted back to non trusted

No options and it converts passwd+cron+at to trusted.

[Patrick Wallek]

There are 2 main ways to tell if your system is trusted:

1) Check and see if the /tcb directory structure exists. Look for something like /tcb/files/auth/r/root

2) Look in /etc/passwd and see if ALL users have a * in the passwd field.

Options to tsconvert are -c, -p and -r.

-c = convert system to trusted

-r = unconvert trusted system (back to normal /etc/passwd)

-p = Not sure - preview maybe

[twang]

- there is the /tcb dir in trusted system
- issue command
# /usr/lbin/getprpw
display command help if it is trusted system

[Stuart Abramson_2]

There are no man pages for these commands.

You need the following document:

"Administering Your HP-UX Trusted System"

The document is located at the following web site:

http://docs.hp.com/hpux/onlinedocs/B2355-90121/B2355-90121.html

As stated above, your /etc/passwd file will not have coded passwords in field 2. You'll have a "*".

Passwords, and other info, are contained in /tcb/files/auth/...