Planning and Configuring HP DCE 1.7

Planning and Conﬁguring HP DCE 1.7 6-21

HP-UX Integrated Login

Integrating DCE with HP-UX Integrated Login

Password successfully changed in DCE registry

Permission denied.

As shown in the preceding message, the password has been changed

in DCE, but not in /etc/passwd. To resynchronize the passwords, the

user must login as root and run the passwd -r ﬁles command. This

command changes the password in the /etc/passwd ﬁle only.

• UNIX allows the root user to su to any other user’s account without

prompting root for a password. DCE, however, cannot issue

credentials without a password. Therefore, the su operation will

appear to succeed, but the new user will not have DCE credentials.

Unconﬁguring DCE from HP-UX Integrated

To unconﬁgure DCE without deactivating HP-UX Integrated Login,

perform the steps in the section “Activating HP-UX Integrated Login”,

and specify a different authentication policy. To unconﬁgure DCE and

deactivate HP-UX Integrated Login, follow the steps in the section

“Deactivating HP-UX Integrated Login.”

Notes, Cautions, and Warnings About Using

HP-UX Integrated Login with DCE

• After conﬁguring HP-UX Integrated Login with DCE as the login

technology, do not activate HP Commercial Security. For Integrated

“Notes, Cautions, and Warnings”.

• In previous releases, when ilogin was activated with DCE as the

primary authentication technology, the chsh and chfn commands

transparently changed the shell and ﬁnger information in the DCE

registry. At 11.0, the chsh and chfn utilities are no longer

transparently integrated with ilogin. chsh -r dce and chfn -r dce

must be used for this purpose. Alternately, one can also use the

passwd -r dce -e and passwd -r dce -g commands. For further

information, refer to the man pages for chsh, chfn, or passwd.

• If the passwd_export cron job has been set up and DCE becomes

unavailable, the cron job will fail and generate an e-mail error

message. To stop these error messages, remove the cron job by

unconﬁguring DCE from HP-UX Integrated Login after you stop or

remove DCE.