HP-UX Integrated Login

Integrating DCE with HP-UX Integrated Login

Password successfully changed in DCE registry

Permission denied.

As shown in the preceding message, the password has been changed in DCE, but not in /etc/passwd. To resynchronize the passwords, the user must login as root and run the passwd -r files command. This command changes the password in the /etc/passwd file only.

UNIX allows the root user to su to any other user’s account without prompting root for a password. DCE, however, cannot issue credentials without a password. Therefore, the su operation will appear to succeed, but the new user will not have DCE credentials.

Unconfiguring DCE from HP-UX Integrated Login

To unconfigure DCE without deactivating HP-UX Integrated Login, perform the steps in the section “Activating HP-UX Integrated Login”, and specify a different authentication policy. To unconfigure DCE and deactivate HP-UX Integrated Login, follow the steps in the section “Deactivating HP-UX Integrated Login.”

Notes, Cautions, and Warnings About Using HP-UX Integrated Login with DCE

After configuring HP-UX Integrated Login with DCE as the login technology, do not activate HP Commercial Security. For Integrated Login support of Commercial Security and how to configure it, see “Notes, Cautions, and Warnings”.

In previous releases, when ilogin was activated with DCE as the primary authentication technology, the chsh and chfn commands transparently changed the shell and finger information in the DCE registry. At 11.0, the chsh and chfn utilities are no longer transparently integrated with ilogin. chsh -r dce and chfn -r dce must be used for this purpose. Alternately, one can also use the passwd -r dce -eand passwd -r dce -gcommands. For further information, refer to the man pages for chsh, chfn, or passwd.

If the passwd_export cron job has been set up and DCE becomes unavailable, the cron job will fail and generate an e-mail error message. To stop these error messages, remove the cron job by unconfiguring DCE from HP-UX Integrated Login after you stop or remove DCE.

Planning and Configuring HP DCE 1.7

6-21