Re: '/etc/shadow' vs '/etc/passwd' ?

Posted in 2005

SIMON COYNE — Thu, 14 Jul 2005 08:25:18 — source: IIUG Forums & Mailing Lists

This is a Unix setup issue and not really Informix specific. Look in your OS release notes for information on setting up enhanced or C2 security. I've no experience of HP-UX, but on other Unices there is a pwconv program which will create the shadow file. Check out this page. http://www.scit.wlv.ac.uk/cgi-bin/mansec?1M+pwconv And this is something about pwconv from HP http://forums2.itrc.hp.com/service/forums/questionanswer.do?threadId=89081&admit =-1335382922+1121328113602+28353475 If you are failing an audit you may want to look at C2 security. This removes the shadow file and places all the login control information (including passwords, ageing etc.) into a structure called /tcb (Trusted Computing Base) and mods all the ownerships such that non-root users cannot see it. HTH Simon Coyne Infrastructure Specialist DLA Piper Rudnick Gray Cary LLP