Users being dropped from groups...

[jmckinzie]

It looks as if the users is dropped from its secondary group after keon pushes out the /etc/passwd.

It appears as if user A is associated with group users, then keon pushes out the new passwd file and then user A is no longer part of group users.

To fix this, we have been running a script that runs every 5 minutes to go re-associate every user with the users group.

Any ideas on what might cause this to be happening? We are tryng to get away from the script running in cron every 5 min.

-TIA

[jmckinzie]

Can someone help me with this?
I would appreciate it.

[Steven E. Protter]

Shalom,

To help, I'd need to know what keon is.

I know what NIS is and this sounds similar, but I really have no idea what keon is.

There is a hard limit, 20 of how many groups a user can be it. This can not be modified.

More details would be very helpful here.

SEP

[jmckinzie]

Keon is another type of security tool that manages the /etc/passwd files remotely.

Every 3-4 hours it overwrites the /etc/passwd with whatever is in the keon DB.

Basically, the same thing as NIS+ except the local /etc/passwd files are still used and are updated via the database on the central server for easier user management.

[A. Clay Stephenson]

Keon is a 3rd party security tool and that is where you should be directing your queries. It ain't HP-UX that's broke.

[Jov · Accepted solution]

Hi Jody,

It looks like a bug with RSA Keon and /etc/passwd sync mechanism.

Check with the vendor.


Jov