trusted system

[kamal_15]

hi all
i have a problem with trusted system
users login becom Expired
but we solve the problem

my question is

how can i know when the system converted to trusted?

please help

kamal

[Slawomir Gora]

Hi,

I think you can check creation date of /tcb directory.

[kamal_15]

thank you for your response

but is that a good indication for date of converting system to trusted?

if any one open this directory . the date of modification will change.

is thier another way?

[Robert-Jan Goossens]

if your is trusted your passwords will be encryted in a trusted database inside the /tcb/files/auth/ directory. If yo have files inside that dir with the names of your users your system is trsted.

An other command you can use is
# /usr/lbin/getprdef
true

will give true if it is trusted.

Hope this helps,
Robert-Jan

[Bill Hassell]

The /tcb directory only has one directory so as long as the root user does not store some bogus file in /tcb, the creation date is indeed the conversion date. All files and directories have three times recorded. The access time for a directory changes whenever the directory is read (searched). The modification time is the creation date until the contents of the directory changes. The change time is when the owner or permissions of the file are changed.

Since no new directories or files are ever created in the /tcb directory, the value returned by:

ll -d /tcb

will document the conversion date.

[yut]

you can check creation date /.secure directory. this created when u convert to trusted first.


-yut-

[Bharat Katkar]

Hi Kamal,
Your /etc/password file will have "*" in the password field of all users if the system is trusted.

Regards,
Bharat

[Muthukumar_5]

Few ways,

1) [ -d /tcb ] && echo "$(hostname) is trusted"
2) audsys

# audsys
cannot open and lock /.secure/etc/audnames;
verify that the auditing system has been installed properly,
and the /.secure/etc directory exists, prior to running this command

It is saying it is converted to Trusted one

3) sam -> Auditing and Security -> Audited system calls -> It will prompt a window for converting to Trusted if it is not a trusted machine

4) root and other users passwd entry in /etc/passwd will be *

hth.

[Cem Tugrul]

Also many useful links asked before;

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=691956

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=823609

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=839509

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=114240

Good Luck,