UX -- 11.23 Cold Install From trusted 11.00 -- User accounts

[rmueller58]

All,

How do we convert user accounts from a trusted UX/11 system to a new cold install of 11.23

Do we restore /tcb and /etc/passwd in the restore process or does someone have other recommendations??

Aside from user accounts how do we backup and restore print queues?



Rex Mueller -
Educational Service Unit #3
Omaha, Nebraska

[DCE · Accepted solution]

I believe the /tcb directory structure and /etc/passwd file will work - but you should also grab /etc/group.

Here a is a link to a possible solution to the print queue question
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=1127082

[rmueller58]

Thanks DCE

Someone mentioned "untrusting" our current system prior to backup, I didn't know what that would entail or what it would break.

[DCE]

Rex,

untrusting the system is a one line command (tsconvert ??) or a selection in SAM. It soes not break anything that I am aware of, and reverts the system back to an untrusted state (/tcb is removed and the /etc/passwd file modified to include the password) Uncomverting saves the step of copying ocer /tcn, but then you have to convert the new system to trusted afterwards, so it is pretty much a wash

[James R. Ferguson]

Hi Rex:

You should be interested to know that trusted mode is deprecated as of 11.31 and will be the last release to support it.

http://docs.hp.com/en/5991-6469/5991-6469.pdf

The HP-UX Standard Mode Security Extensions now allow the same security features in standard mode previously only offered in trusted mode.

The product is also available for 11.23:

http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=StdModSecExt

Regards!

...JRF...

[rmueller58]

James,

What is your recommendation restoration of the user accounts from a trusted 11.00 to 11.23?

Does backing up /etc/passwd and /etc/group and /tcb cover our bases?

[rmueller58]

DCE or James,
I guess the real question should be,
How does one "untrust/unconvert" a trusted system?

[DCE]

Rex,

The command to "uncovert" is tsconvert -r. (I believe it is in /etc)

You can alos do it via SAM

`Dave

[rmueller58]

DCE, found the executable, but no MAN page.

[DCE]

I do not have a man page either, but I found the following info - It MIGHT help you

http://docs.hp.com/en/B2355-90950/ch08s08.html

[rmueller58]

DCE and James, Thank you.