Planning and Configuring HP DCE 1.8

132 Chapter6
HP-UX Integrated Login
Integrating DCE with HP-UX Integrated Login
/etc/passwd or in the repository based on the NSS configuration and
appended to /etc/opt/dce/passwd_override. The activation process
will automatically create an override entry for root; however, you
must create override entries for any root aliases.
• The passwd_override file can also be used to disable access to the
local system for selected users or groups. See the passwd_override
man page for details.
• If necessary, use the /etc/opt/dce/sys.group
and/etc/opt/dce/group_override files to override the entries in
/etc/group. Use group_override to override /etc/group entries
that have an account in the DCE Registry; use sys.group for those
that do not.
The default /etc/opt/dce/sys.group file contains:
root::0:
other::1:
sys::3:
adm::4:
lp::7:
The default /etc/opt/dce/group_override file contains:
bin::2:
daemon::5:
mail::6:
If you plan to configure DCE as an additional technology:
• Configure the system as a DCE cell member.
• Set up valid accounts in the DCE Security Registry for all users that
require login access to the cell. Use either dcecp or passwd_import
to set up accounts.
When using passwd_import to set up accounts from /etc/passwd, be
aware that passwd_import:
• Creates accounts for all entries in /etc/passwd but marks the
accounts invalid. After using passwd_import, the cell administrator
must use dcecp to assign a password to each account and to mark
each account as valid.