Users

[Lucien Wolfs]

Hi,

Does anyone know how to add a user with more than 8 characters ?
On 10.20 it's simple, adduser .... and edit the passwd file. works, but on 11.0 it won't work. I do not have enhanced security issues installed.
Why more than 8 characters ?
It would be nice to have the same loginname as the PC network and there are a lot of people with > 8 characters in their name.

Ps. Firing them is not a solution


Thanks in advance,


Lucien Wolfs

[Stefan Farrelly]

On 11.0 you will have to convert to a trsuted system (tsconvert) to use login names > 8 characters.

[eran maor]

Hi

this issue is not solve in 11.00 .
i know that there was apatch for 10.20 that handle this issue but in 11.00 you cant use users more then 8 char beside the trusted system.

what you can try is to define a username of 8 char and if you have in the p.c a username with more then 8 char takes the 8 first 8 char and define this user because hp-ux is ignoring the chars after the 8 char.

[Stefan Farrelly]

Eran,

The man page for passwd on 11.0 says;

Password Construction Requirements
Passwords must be constructed to meet the following requirements:

A password must have at least six characters. Only the first
eight characters are significant in an untrusted system.


This implies, does it not, that in a trusted system under 11.0 that login names > 8 chars are not ignored.

[Lucien Wolfs]

Stefan,

I converted a system to trusted (tsconvert). This runs very fast and is no reversible (?).

Well, users with a 8+ name are not accepted.

Now I have to figure out a way to go back to the pre-tsconvert.....

[Rainer von Bongartz]

use

/usr/lbin/tsconvert -r

to go back to untrusted mode

Regards
Rainer

[Lucien Wolfs]

Thanks Rainer !!!!!!!

[Lucien Wolfs]

So is there no way ???

[eran maor]

Hi Stefan

i agree that i was not clear .
here is the doc that i read about the password more then 8 char .

but this is not the issue because the cu ask about users and not password .

i saw a JAG about this problem and there was a patch dealing with this issue phco_21833
but i want first to install it to see if he is solving this issue .

Observe the following guidelines when choosing a password:

A password must have at least six characters and can have up to 80.
Special characters can include control characters and symbols such as
asterisks and slashes. In standard mode, only the first eight
characters are used. In trusted mode, all 80 are significant.

After a conversion to a Trusted System, only the first eight characters
of a converted password will be acceptable. Users who had a longer
password on the standard system must log in for the first time on the
Trusted System with only the first eight characters. Then they may
choose a longer password, if they desire. If a system is converted back
to standard mode, the passwords are truncated to the first eight
characters."

[eran maor · Accepted solution]

Hi

you will need to install this patch : PHCO_24383 .

this deal with user that have loginname more then 8 char , it will not allow you to create a username in the unix more then 8 char .

please also read the :
Special Installation Instructions:
Terminate dtlogin(1) before installing this patch, and restart it again after the installation has completed.
Note that this will terminate all active CDE sessions. If this is not done, the installation could intermittently
fail if the /usr/lib/libpam.1 library is in use by the
dtlogin(1) program at the time this patch is installed.

For example:

# /usr/sbin/fuser /usr/lib/libpam.1
/usr/lib/libpam.1: 8541m

# ps -p8541
PID TTY TIME COMMAND
8541 pts/0 0:00 dtlogin
# /sbin/init.d/dtlogin.rc stop



# /sbin/init.d/dtlogin.rc start

tell me if you have more que ?

[Lucien Wolfs]

I guess the patch should fake HPUX. I am a little bit disappointed in HP for not recognizing this need. Mr. Monopoly implemented this ages ago, as HP should have done. Well lets wait if somebody wakes up and sees the need

[Wodisch]

Hello Lucien,

look here, a patch for HP-UX 11.00:

http://europe-support2.external.hp.com/wpsl/bin/doc.pl/screen=wpslDisplayPatch/sid=08a884f7088f7337ba?PATCH_PATH=/hp-ux_patches/s700_800/11.X/PHCO_22265&HW=s800&OS=11.00

and even the superceeding patch has it:

http://europe-support2.external.hp.com/wpsl/bin/doc.pl/screen=wpslDisplayPatch/sid=4e1f663907c1e652a9?PACH_NAM=PHCO_24838&HW=s800&OS=11.00

So, who is complaining? :-)

Well, I do: why is nobody using the "search" button?
It took me about 30 seconds to find this as the second
hit on "long username" searching in the "Patches"...

HTH,
Wodisch

[James R. Ferguson]

Hi:

For that matter, take a look at this recent thread in the Forum [ from a Search there ;-) ]:

http://forums.itrc.hp.com/cm/QuestionAnswer/1,1150,0xd95a46ff9277d511abcd0090277a778c,00.html

...JRF...

[Lucien Wolfs]

To be exact the patch is PHCO_24838 (not ...383).

Yes, this patch works for me.

Thanks everybody.