Sponsored Content
Special Forums Cybersecurity Please help identify these user account Post 302528859 by click on Wednesday 8th of June 2011 06:05:36 AM
Old 06-08-2011
bin - owner of all binary files - do not delete - system user
lp - printing owner - do not delete - system user
nuucp - UNIX--to-UNIX copy program user - do not delete - system user
smbnull - used by Samba - delete and remove Samba package if you are not using it
mysql - MySQL user - delete mysql package and the user if you do not use MySQL
tftp - user of the tftp - not sure if it is system user

In general don`t delete system users even if you do not use the applications. Deleting those accounts adds 0 security and may break updates, system etc.

Btw - 11.11 is old - almost obsolete. If you are building system now better start with newer version and if you are trying to secure old system better re-thing upgrading before deleting users Smilie

HP-UX 11i support matrix:
http://h20338.www2.hp.com/hpux11i/do...uxservermatrix


You may want to take a look at:

https://h20392.www2.hp.com/portal/sw...Number=B6849AA
http://h71028.www7.hp.com/enterprise...-overview.html
http://www.amazon.com/HP-UX-11i-Secu.../dp/0130330620



Last edited by click; 06-08-2011 at 07:16 AM..
This User Gave Thanks to click For This Post:
 

10 More Discussions You Might Find Interesting

1. Post Here to Contact Site Administrators and Moderators

user account

hi how to disable the useraccount in aix (should not remove). (1 Reply)
Discussion started by: chomca
1 Replies

2. Shell Programming and Scripting

How to identify User Machine name?

Hi Experts, We 4 to 5 people are using same UNIX(Solaris) login for our testing purpose. Also we are doing some modifications to existing scripts. Is it possible to know the each user machine (IP address or machine name) who are using the same login to modify the scripts. So that we can... (12 Replies)
Discussion started by: ganapati
12 Replies

3. HP-UX

how can distingiush user account

example root::0:3::/:/sbin/sh daemon:*:1:5::/:/sbin/sh bin:*:2:2::/usr/bin:/sbin/sh sys:*:3:3::/: adm:*:4:4::/var/adm:/sbin/sh uucp:*:5:3::/var/spool/uucppublic:/usr/lbin/uucp/uucico lp:*:9:7::/var/spool/lp:/sbin/sh nuucp:*:11:11::/var/spool/uucppublic:/usr/lbin/uucp/uucico... (1 Reply)
Discussion started by: alert0919
1 Replies

4. UNIX for Dummies Questions & Answers

Difference between : Locked User Account & Disabled User Accounts in Linux ?

Thanks AVKlinux (3 Replies)
Discussion started by: avklinux
3 Replies

5. Shell Programming and Scripting

Identify root like user.

Hi All, I wanted to know if there is any way , in which a user could be identified. I need to diffrenciate between a root user and a root like user. Thanks! nua7 (4 Replies)
Discussion started by: nua7
4 Replies

6. AIX

Identify User Attributes

SOS Guys... Is there any way to determine the user attributes, mainly if that userid is set as never expire? I do not have admin rights, and I'm working on AIX 5.3 I've tried : lsuser -f <username> but no luck on that (2 Replies)
Discussion started by: freakygs
2 Replies

7. Linux

User Account Policy

Hi, i have the following config in the system-auth files auth required /lib/security/$ISA/pam_env.so auth sufficient /lib/security/$ISA/pam_unix.so likeauth nullok auth required /lib/security/$ISA/pam_deny.so account required ... (2 Replies)
Discussion started by: yprudent
2 Replies

8. HP-UX

User account

I need to check actual date a user was disabled on my HP-UX server. Audit is claiming the user account was active during the last audit exercise. (7 Replies)
Discussion started by: cyriac_N
7 Replies

9. UNIX for Beginners Questions & Answers

How to identify user?

Hi Team I have created some time back a user called "iuser" but I am not able to login with it. I am getting below error. # su - iuser su: user iuser does not exist tried to unlock the user still get same error # pam_tally2 -u iuser -r pam_tally2: pam_get_uid; no such user iuser... (7 Replies)
Discussion started by: scriptor
7 Replies

10. UNIX for Beginners Questions & Answers

How to identify users that have su'ed to a different account?

Hello and thanks in advance for anyone that can offer me any help with this! I'm trying to figure out a quick & easy way to see a list of everyone's effective user id... I would have thought 'w' or 'who' would be able to display if someone had switched user accounts... but it's only showing the... (3 Replies)
Discussion started by: bodisha
3 Replies
userdel(8)						      System Manager's Manual							userdel(8)

NAME
userdel - Deletes a user login account from the system. SYNOPSIS
SVE: /usr/sbin/userdel [-r] login POSIX: /usr/sbin/userdel [-D] [-r] [-R] [-t type] [-P] [-x extended_option] login OPTIONS
This option is used under enhanced security to delete the user account from /etc/passwd file and the enhanced security protected passwd DB. Removes a user's home directory from the system. This directory must exist and must be owned by the user whose login account is being deleted. When enhanced security is enabled, retires the account without deleting entries from the databases or removing home directories. Removes a local plus (+) or local minus (-) NIS user from the user database. The value of the type parameter can be + or -. Removes PC accounts only, without deleting the user's existing UNIX account. The following extended_option attributes are available: Indicates whether the account is distributed. The value of the distributed=n attribute can be 0 or 1. If set to 0, the account is deleted from the local database. If set to 1, the account is deleted from the NIS master database on the running system. When this attribute is set, the local attribute is set to the opposite value. Indicates whether or not the account is local. The value of the local=n attribute can be 0 or 1. If set to 1, the account is deleted from the local database. If set to 0, the account information is deleted from the NIS master database. When this attribute is set, the distributed attribute is set to the opposite value. The value of the pc_synchronize=n attribute can be 0 or 1. If set to 1, both PC and UNIX accounts will be affected by delete operations. If set to 0, only UNIX accounts will be affected by delete operations and the PC account will be unaffected. Specifies an existing login account on the system. DESCRIPTION
The userdel command is part of a set of command-line interfaces (CLI) that are used to create and administer user accounts on the system. When The Advanced Server for UNIX (ASDU) is installed and running, the userdel command can also be used to administer PC accounts. Accounts can also be administered with the /usr/bin/X11/dxaccounts graphical user interface (GUI), although the extended options are only available from the CLI utilities such as useradd and usermod. Different options are available depending on how the local system is configured: In the default UNIX environment, user account management is compliant with the IEEE POSIX Draft P13873.3 standard. If enhanced (C2) security is configured, additional options and extended options can be used. The CLI is backwards-compatible, so all existing local scripts will function. However, you should consider testing your account management scripts before using them. The userdel command deletes a user's login account from the system and makes the login-related changes in the appropriate system files determined by the current level of security. Additionally, the files and directories contained under the user's home directory can be removed from the system. With the -x option, the system administrator can specify whether the user login account to be deleted is local or whether it resides in the NIS master database. If the -x option is not specified, the user login account is deleted from the appropriate database as specified by the system defaults. The default behavior on the system for the userdel command is distributed=0 and local=1. With these values, the system deletes the group from the local database by default. Setting the distributed= and local= attributes to the same value (for example, distributed=0 and local=0) produces an error. RESTRICTIONS
Note the following restriction that applies to this release: You must have superuser privilege to execute this command EXIT STATUS
The userdel command exits with one of the following values: Success. Failure. Warning. EXAMPLES
The following example removes the local plus (+) user, newuser1: % userdel -t + newuser1 The following example removes the NIS user, newuser4, from the NIS master database: % userdel -x distributed=1 newuser4 The following example deletes the user, xyz, and removes the user's home directory: % userdel -r xyz The following example deletes the UNIX account for studentB, removing the home directory and its corresponding PC account. % userdel -r -x pc_synchronize=1 studentB FILES
The userdel command operates on files for the specific level of system security. SEE ALSO
Commands: groupadd(8), groupdel(8), groupmod(8), useradd(8), usermod(8), passwd(1), Manuals: System Administration, Security, Advanced Server for UNIX Installation and Administration userdel(8)
All times are GMT -4. The time now is 11:10 PM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy