Converting system to trusted


 
Thread Tools Search this Thread
Top Forums UNIX for Advanced & Expert Users Converting system to trusted
# 1  
Old 03-01-2018
Converting system to trusted

Hi,

I need to convert few HP-UX (V 11.31) machines from un-trusted to trusted.
I used the HP SMH to do this on one server. However when I click on "Yes" to proceed with the conversion, I get this error :

HTML Code:
The attempt to convert this system to a trusted system failed.
The command return value was "-1" and the standard error output was: 
The system cannot be converted while shadow passwords are in use.
I googled some solutions, and they suggested using “pwunconv” command to convert the passwords from shadow to non-shadow.
But this could lead to removing the whole PHI (Password Has Infrastructure) software, and user passwords or even user accounts would be eventually deleted.

Please suggest the best way to convert to trusted system, and if the option above is used, is there a way to restore the PHI software?

Thanks,
Aigini
# 2  
Old 03-02-2018
For what reason do you wish to go trusted?
I ask you because using a shadow password is not standard under HP-UX ( it might have changed since I have no new boxes since 2010...) in other words you had an optional package for shadow password when going trusted is native... So what made you or whoever decide for shadow password? Because the reason may still be valid.
I had a server using shadow passwd, because of a software not being able to find the passwords in trusted mode ( I cant remember what it was, sorry...).
the reason you have to use pwunconv is to put back the passwords in /etc/passwd in order to be removed by the conversion and create the adequate files in ...
Found this:
Quote:
HP-UX PHI11i3 has the following requirements and restrictions:
Requires HP-UX 11i version 3.
Can be installed only on systems with shadowed passwords (that is, with passwords stored in the /etc/shadow file).
in:
Hewlett Packard Enterprise

Last edited by vbe; 03-02-2018 at 05:01 AM.. Reason: url
# 3  
Old 03-02-2018
Hi,

It's been a long time since I worked on HPUX (15 Years), but from memory there was an other way of preparing the system which I think used the "tsconvert -x" command followed by the "pwconv" command.

This might not be relevant any more as this was HPUX 10.20, but it might be worth exploring - although I may just be having a senior moment.

Regards

Gull04
Login or Register to Ask a Question

Previous Thread | Next Thread

9 More Discussions You Might Find Interesting

1. HP-UX

HP-UX revert from trusted system to default

All, I have inherited some software that is running on HP-HX 11.11. The software ofers a GUI login and the user passwords can be either internal to the software, user defined or based on the matching unix account. The problem I have is that the server has been converted to 'trusted' years... (7 Replies)
Discussion started by: rbatte1
7 Replies

2. HP-UX

Enable telnet as root to 11.31 non-trusted system?

I have a new box that was set up for me and I want to allow telnet to the box as root. I know that it's not secure but due to the nature of what I test I need an easy and reliable way back in if I've messed up the other connection methods(SSH). This is in a protected lab environment. Eventually... (17 Replies)
Discussion started by: gctaylor
17 Replies

3. What is on Your Mind?

Converting an old windows vista system to Unix

I have an old Dell system that I would like to convert over to a Unix system and I have no idea how to do this. Where can I go to get the information to do this. This will be a secondary computer that I will learn and "play" with. I have heard that it is fairly easy to do and that once I get used... (0 Replies)
Discussion started by: Richard.Borden2
0 Replies

4. Solaris

Solaris Trusted Extension ?

How to check if a system has Solaris trusted extensions installed or not on a solaris 10 system ? (5 Replies)
Discussion started by: fugitive
5 Replies

5. HP-UX

shadowed password file on non-trusted system?

Is it possible to have shadowed password file without implementing a Trusted System? (3 Replies)
Discussion started by: linuxdude
3 Replies

6. UNIX for Dummies Questions & Answers

Converting a Windows system to a UNIX system

Hello I am looking for advise on how to convert a windows based computer system into a UNIX based operating system.. I would like to be able to learn UNIX better than I know it and work didn't allow me to work with UNIX much. Is there a book where I could learn how to accomplish that... (6 Replies)
Discussion started by: baksg1995
6 Replies

7. HP-UX

Trusted system: Please Help.

I was playing with sam and i turned on the Trusted System feature (UX11i). Now i cant log onto it anymore, i can ping it, but icant telnet, rlogin or login at the login screen. I dont want to reboot my machine because i am affraid it wont boot and ask for a password. My root password is not... (1 Reply)
Discussion started by: Netghost
1 Replies

8. Cybersecurity

Trusted Computing

About a year ago, a friend of mine who worked on the OReilly Snort book took a propsal he and I had worked on for a book on Trusted Computing. Though the editor thought the content was good and worthwhile, he felt that there wasn't enough of a market to justify printing such a work. How many... (0 Replies)
Discussion started by: kduffin
0 Replies

9. UNIX for Dummies Questions & Answers

PAM Vs Trusted mode in HP-UX

Hi All, Some questions on PAM (Pluggable Authentication Modulues) and Trusted mode in HP-UX. As default, when I turn on trusted mode (need shadow password only), the PAM is atomatically installed(not sure the word "installed" is appropriate or not). Can we turn on the trusted mode only,... (0 Replies)
Discussion started by: wilsonchan1000
0 Replies
Login or Register to Ask a Question