HP-UX Reference (11i v1 05/09) - 1M System Administration Commands A-M (vol 3)

ManualsBrandsHP ManualsSoftwareHP-UX Reference Manuals

101

102

103

104

105

106

107

108

109

110

authck(1M) authck(1M)

NAME

authck - check internal consistency of Authentication database

SYNOPSIS

authck [-p][-t][

-a][-v][-d [ domainname ]]

DESCRIPTION

authck checks both the overall structure and internal ﬁeld consistency of all components of the Authenti-

cation database. It reports all problems it ﬁnds. Only users who have the superuser capability can run this

command. When

pwck is used with the -s

option, authck is run with the -p option automatically.

Options

authck recognizes the following options and tests:

-p Check the Protected Password database. The Protected Password database and

/etc/passwd are checked for completeness such that neither contains entries not in the

other. The cross references between the Protected Password database and

/etc/passwd

are checked to make sure that they agree. However, if

Nis+ is conﬁgured in your system,

the password table is also checked before reporting a discrepancy. This means that a

discrepancy would not be reported for a user that does NOT exist in

/etc/passwd but

exists in the Protected Password database as well as the

Nis+ passwd table. Fields in the

Protected Password database are then checked for reasonable values. For example, all time

stamps of past events are checked to make sure that they have times less than the times

returned by time(2).

-t Fields in the Terminal Control database are checked for reasonable values. All time stamps

of past events are checked to make sure they have times less than those returned by time(2).

-a Shorthand equivalent of using the -p and -t options together in a single command.

-v Provide running diagnostics as the program proceeds. Produce warnings when unusual con-

ditions are encountered that might not cause program errors in login, password and su pro-

grams.

-d Removes Protected Password database entries that are not found in the

Nis+ passwd

table. Nis+ users may have an entry in the Protected database and not in

/etc/passwd .

Thus, this option removes orphaned Protected database entries: orphaned entries can exist

for deleted

Nis+ users. The optional domainname speciﬁes the desired Nis+ domain to use

for the passwd table. If domainname is not speciﬁed, the local domain name is used.

FILES

/etc/passwd System password ﬁle

/tcb/files/auth/*/*

Protected Password database

/tcb/files/ttys Terminal Control database

/tcb/files/auth/system/default

System Defaults database

/usr/sbin/authck

AUTHOR

authck was developed by HP.