Trusted mode - backup/restore of the password

[Enrico Venturi]

Hello colleagues,
I want to use MC/SG with the Trusted Mode configuration.
I understood that in terms of system management the main feature (perceived by the system administrator) is related to the password management; after that there are several features available, system monitoring, .... but they are just available, no effort is required.
In my cluster I'd like to have the same operators on the main and on the spare node;
currently we performs some "backup" of the main node, and when a Transfer Of Control occurs the backup is restored on the spare node.
My question is:
can we adopt thie solution again in TM?
can we backup the passwords (even if it's a more complex) in teh main node and restore them on the spare node?
Is there, in the passwords, some dependency on the hostname / IP address of the main node?

thaks a lot
Enrico

[Steven E. Protter]

You should be able to restore the individual files in:

/tcb/files/auth

There are folders for each letter in the alphabet.

You can restore the files in there and it should work. You can also just null out the password and force a change on next login.

I'm attaching a script that does that on trusted systems.

If you restore the file in /tcb/files/auth/r

You will be restoring the file for all users starting with the letter r.

That means root and randy will BOTH be restored.

SEP

[Enrico Venturi]

Thanks for your reply,
and what about if I want to keep the same password?
can log on in the node spare by using the password that I set on the node main?

[Darren Prior · Accepted solution]

Hi Enrico,

There isn't really a dependency on a given host for the passwords, however it does contain the last successful and unsuccessful login details for each account on the machine. If you copy the /tcb files to another machine these values become less useful.

I wonder if something like NIS+ or LDAP might be a suitable way forward for you?

regards,

Darren.

[Jeff Schussele]

Hi Enrico,

To keep the user definitions "in sync" between the two I would transfer the following:

/etc/passwd
/etc/group
/tcb/files/auth/*
/home/* #optional but recommended
/etc/default/security #If used

You can cron this to do it periodically.

Rgds,
Jeff