Convert to trusted system : How to ?

To convert the system into trusted system the command is :

# /usr/lbin/tsconvert

After converting it will create a directory /tcb/files/auth/*/*

Note: before converting into trusted system you have to modify /etc/nsswitch.conf file. In that file "passwd compact " has to be changed into "passwd files"

To unconvert the trusted system with the following command:

# /usr/lbin/tsconvert –r

Differences between trusted and non-trusted systems?

1. A trusted system allows system auditing to be turned on. Non-trusted systems run with system auditing
disabled.

2.Trusted systems have improved password management.

Some features:
a.grace period and expiration period for passwords.
b.specify system-wide password aging
c.specify an absolute account life
d.disable accounts after repeated login failures.
d.Passwords lengths of up to forty (40) characters
e.access a random password generator

3.Trusted systems have additional login restrictions, while non-trusted systems do not.

4. A trusted system has shadowed passwords, while a non-trusted system does not have shadowed
passwords. Shadowed passwords are kept in locations other than /etc/passwd. This prevents
users from viewing the /etc/passwd file and determining which accounts do not have passwords.

This also prevents hackers from running "password cracker programs" against passwords in the
/etc/passwd file.