Trusted System: locking user accounts

[Andres Viir]

Hi.

We have several systems running HP's trusted system ( /tcb/files/auth/ ). On these machines, we want to lock the administrative & application accounts, and force the users to login in via "sesu - ", in order to increase traceability.

On our trusted systems, are we supposed to edit these files manually? Or is there some hidden option in SAM, which my aging eyes have failed to see? I'm assuming we want to have it say:

:u_pwd=*:\

in the respective accounts files.

[Peter Godron]

Hi Andres,
and welcome to your first question within nearly 8 years !!

Please see earlier thread on the same issue:
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=971268

Please read:
http://66.34.90.71/ITRCForumsEtiquette/after.html

Please also read:
http://forums1.itrc.hp.com/service/forums/helptips.do?#33 on how to reward any useful answers given to your questions.