Trusted system: what does it mean exactly?

[Enrico Venturi]

Hello colleagues,
I need a starting point to explore and to understand the "trusted HP-UX" world.
Where can I find some documents in order to begin my analysis?

Thanks to everybody

Enrico

[Steven E. Protter]

Trusted systems have more security options. You can force users to have randomly generated passwords for example. You can fine tune the expiration process.

The most important feature is shadowing the passwords.

Non-trusted systems keep passwords in /etc/passwd file. Trusted systems keep them in an ultra secure series of files, divided alphabetically in the /tcb folder.

It makes the system much harder to hack.

SEP

[Pete Randall]

Enrico,

Here's a brief description:

http://www.docs.hp.com/cgi-bin/fsearch/framedisplay?top=/hpux/onlinedocs/B2355-90121/B2355-90121_top.html&con=/hpux/onlinedocs/B2355-90121/00/00/4-con.html&toc=/hpux/onlinedocs/B2355-90121/00/00/4-toc.html&searchterms=System%7cTrusted&queryid=20031111-091417


Pete

[Robert-Jan Goossens]

Hi Enrico,

Take a look at this doc.

http://www.faqs.org/faqs/hp/hpux-faq/section-68.html

Regards,
Robert-Jan.

[Graham Cameron_1]

All docs start here:
http://docs.hp.com/hpux/os/11.0/index.html

The one you want is here:
http://docs.hp.com/hpux/onlinedocs/B2355-90121/B2355-90121.html

-- Graham

[Mihai Lazar]

Hi

We have implemented trusted system for quite some time now. Please read the attached document for more details on how to setup.

Best regards,

Mihai

[doug hosking]

We could help you more if you took a step
back and explained the reason for your interest. There are many features in trusted mode. Some of them have near-equivalents in standard mode.

If your main goal is simply shadow passwords, you might be interested in the free shadow password patch bundle at
http://software.hp.com/portal/swdepot/displayProductInfo.do?productNumber=ShadowPassword

There are some limitations in this, so read the documentation carefully.