HP-UX Reference (11i v2 03/08) - 1M System Administration Commands A-M (vol 3)

ManualsBrandsHP ManualsSoftwareHP-UX Reference Manuals

authck(1M) authck(1M)

NAME

authck - check internal consistency of Authentication database

SYNOPSIS

authck [-p][-t][

-a][-v][-d [ domainname ]]

DESCRIPTION

authck checks both the overall structure and internal ﬁeld consistency of all components of the Authen-

tication database. It reports all problems it ﬁnds. Only users who have the superuser capability can run

this command. When

pwck is used with the

-s option, authck is run with the -p option automati-

cally.

Options

authck recognizes the following options and tests:

-p Check the Protected Password database. The Protected Password database and

/etc/passwd are checked for completeness such that neither contains entries not in the

other. The cross references between the Protected Password database and

/etc/passwd

are checked to make sure that they agree. However, if

Nis+ is conﬁgured in your system,

the password table is also checked before reporting a discrepancy. This means that a

discrepancy would not be reported for a user that does NOT exist in

/etc/passwd but

exists in the Protected Password database as well as the

Nis+ passwd table. Fields in

the Protected Password database are then checked for reasonable values. For example, all

time stamps of past events are checked to make sure that they have times less than the

times returned by time(2).

-t Fields in the Terminal Control database are checked for reasonable values. All time

stamps of past events are checked to make sure they have times less than those returned by

time(2).

-a Shorthand equivalent of using the -p and -t options together in a single command.

-v Provide running diagnostics as the program proceeds. Produce warnings when unusual

conditions are encountered that might not cause program errors in login, password and su

programs.

-d Removes Protected Password database entries that are not found in the

Nis+ passwd

table. Nis+ users may have an entry in the Protected database and not in

/etc/passwd.

Thus, this option removes orphaned Protected database entries: orphaned entries can exist

for deleted

Nis+ users. The optional domainname speciﬁes the desired Nis+ domain to

use for the passwd table. If domainname is not speciﬁed, the local domain name is used.

FILES

/etc/passwd System password ﬁle

/tcb/files/auth/*/*

Protected Password database

/tcb/files/ttys Terminal Control database

/tcb/files/auth/system/default System Defaults database

/usr/sbin/authck

AUTHOR

authck was developed by HP.