Trusted mode - requirements

[Guy Humphreys]

Hi All,

real easy one this time.

I need to change an 11i box to trusted mode and obviously according to the install instructions I need to patch the box up to current levels first. Normally I would do this as a matter of course, but I can't do it this time, as I need more space in /var and /usr and can't get physically to the box to go to single user mode.

Can I convert to trusted without the patches?
and then patch later when I have the opportunity?

cheers
Guy

[Pete Randall]

Guy,

Without reviewing the patches, I can't really say, but I would think that you could do this safely. Converting to trusted is relatively straightforward and I doubt there are too many patches which should have an effect on it. By the way, it is generally recommended that you convert using SAM. SAM automatically handles the password expiration issues that normally arise (among other things).


Pete

[Joseph Loo]

hi,

sure, converting to trusted may be done without some patches (pams related, etc) except those that are recommended to be patch before u may convert to trusted.

use sam and proceed to auditing and security and select any of the options:

. audited events
. audited system calls
. audited users
. system security policies

to convert which will replace each password in /etc/passwd with *, amongst other things it will do.

regards.

[Mark Nieuwboer]

As far as i know it's no problem or you have to be very behaind with your parches.

grtz. Mark

[Guy Humphreys]

how does June 2002 patch bundle sound? too old?

(don't ask. It's an inherited server from another company. *mutters* *grumbles* *shakes head at lack of standards*)

cheers
Guy

[Joseph Loo]

hi,

usually, i adopt if it ain't broken why fix it. but if u r not sure if it has been broken:

http://www1.itrc.hp.com/service/patch/releaseIndexPage.do?BC=patch.breadcrumb.main|

also, when software has pre-requisite, patch it. security patches is a must, so run security patch checker to find out what is lacking.

download for security patch checker:

http://www.software.hp.com/portal/swdepot/displayProductInfo.do?productNumber=B6834AA


regards.

[Guy Humphreys]

Well, I went ahead and did it and it worked without a hitch, now I can patch at my leisure.

Thanks for all your help
Guy