HP-UX 11i September 2005 Release Notes

Security
HP-UX Shadow Passwords
Chapter 8
148
•The /etc/moduli file updated
• Support for GSSAPI replaced with GSSAPI-With-MIC
Impact
There are no impacts other than those listed previously.
Compatibility
There are no known compatibility issues.
Performance
There are no known performance issues.
Documentation
For more information, refer to the HP-UX Secure Shell A.04.00.002 Release Notes at
http://www.docs.hp.com under the section “Internet and Security Solutions.”
Obsolescence
Not applicable.
HP-UX Shadow Passwords
Increasing computational power available to password crackers has made the
non-hidden passwords in the UNIX /etc/passwd file vulnerable to decryption. Shadow
Passwords enhance system security by hiding user-encrypted passwords in a shadow
password file. Usually, encrypted passwords are stored in the /etc/passwd file that is
accessible to all users. With Shadow Passwords, the encrypted passwords can be
optionally moved to the /etc/shadow file, which is accessible only to a super user.
An updated version of this product is available on Software Pack (SPK) for HP-UX 11i v1
September 2005. (For more information about SPK, see “Software Pack (Optional HP-UX
11i v1 Core Enhancements)” on page 27.)
Summary of Change
HP-UX Shadow Passwords bundle version B.11.11.03 provides two defect fixes.
Impact
There are no impacts other than the defect fixes.