user name's login problem on HPUX 111.00

[havard]

Hello all,
We have some workstations HPUX 10.20 and 11.00 in a same LAN. We use NIS pages for passwd and group files in this LAN.
Some users can work on hp-ux 10.20 and hp-ux 11.00 whith the same login name whithout problems.
But when the login name has more than 8 caracters, connection on hp-ux 10.20 is OK but on hp-ux 11.0, connection is refused.
Do you know this problem?
Does patch exist to solve this?

Thanks for your responses, regards
MDH

[Massimo Bianchi]

Hi,
in hpux 11.0, if it is untrusted, user login are allowed only 8 chars.

If they are 9 or more, only the first 8 chars are used for isentifying the user, so your users might not be able to login, because they don't supply the correct password... for the user with their first 8 chars !

I think that 10.20 has some minor bug that let you login the same...

HTH,
Massimo

[Darren Prior]

Hi,

If you really, really, really HAVE to have login names longer than 8 characters then PHCO_26089 is the libpam patch that allows it. Please read the patch text first - it explains how to enable long login names. It is not a good idea to do this - you will find that it breaks a number of commands.

regards,

Darren.

[Pete Randall · Accepted solution]

MDH,

Here's a good discussion on the subject, along with some links to TKB documents:

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0x70b8cf38d6bdd5118ff10090279cd0f9,00.html


The summary is, while it may be possible to force your system to accept login names longer that 8 characters, you would be better off to limit the length of the names.


Pete

[havard]

Thank you for your responses, they help us.
So we choose this solution: for the username has more than 8 caracters we declare an another username whith less than 8 caracters whith same UID and GID.
Connexion is with well and it work correctly.

regards
MDH