trusted system and users dissapearing

[John McWilliams_1]

Hi

I have a system on HP-UX11.11 and running in trusted mode. Some users are unable to log in. I checked the /tcb/files ... and noticed the the user was missing form the directory but still in the /etc/passwd. I re-created the user using SAM but after the user FTP'ed a file the same occured again.

Does anyone know what could cause this.

Thanks John

[RAC_1]

What do you mean by users dissappear??
They should be there unless someone deleted it. Once you convert to trusted system, all passwords will expire. This is by design and there should not be other problems.

In order to avoid expiry of passwords, just do /usr/lbin/modprpw -V after you convert to trusted system. If you convert to trusted mode, with SAM, you do not need to run modprpw -v

For other problems, check
pwck
grpck

[John McWilliams_1]

when I go to the /tcb/files/auth/y directory the user starting wiht a y was not listed there. The user was still in the /etc/passwd file.
The system was converted to trusted about 4 months ago and there have been no problems to date.
I deleted the user in SAM and recreated but the problem occured again about 30 minutes later

Cheers John

[RAC_1]

Is the someone doign it itentionally??
After you add the user, check
pwck
grpck

Also periodically check, lastb and last
to check last logins.

[John McWilliams_1]

I would like to think no one did this intentionally. There are only a few with root access and they sit next to each other.

I have re-created the users that had problems and it seems stable now but all the users have gone home too.

Is there a way to generate the files in /tcb for 1 user as there is still 1 missing and it is a database user so I dont want to remove and add without stopping the database.

Cheers John

[RAC_1]

Are you very sure that no one is doing it itentioionally?? Check lastb and last commands.

You can just convert back to non-trusted mode and back again to trusted mode.

[John McWilliams_1]

I am thinking of soing that. Will it affect a database if I do as 2 of the users are the SIDadm and oraSID users ?

The SIDadm user is missing from the tcb structure but is in the password file. I do not want to stop the database

Thanks for your help
John

[RAC_1 · Accepted solution]

Again, if you do through command line, all passwords will expire. If you are going to do it through SAM, no issues at all.

[John McWilliams_1]

Hi RAC
I am home now. Thanks for your help. I have recreated the affected users and will watch it closely tomorrow. I have no idea why the files were missing but have asked the unix users to stay off the box and call me iof they ned something. If it all goes bad tomorrow I will revert to un-trusted mode using sam

Thanks again
John