{"id":465,"date":"2024-10-17T14:16:59","date_gmt":"2024-10-17T05:16:59","guid":{"rendered":"http:\/\/www.iwgh.run\/?p=465"},"modified":"2024-10-17T14:16:59","modified_gmt":"2024-10-17T05:16:59","slug":"hpux%ec%97%90%ec%84%9c-%ea%b3%84%ec%a0%95-%ec%9e%a0%ea%b9%80-%ec%b2%98%eb%a6%ac-%eb%b0%8f-%ea%b3%84%ec%a0%95%ec%a0%95%eb%b3%b4","status":"publish","type":"post","link":"https:\/\/iwgh.duckdns.org\/?p=465","title":{"rendered":"HPUX\uc5d0\uc11c \uacc4\uc815 \uc7a0\uae40 \ucc98\ub9ac \ubc0f \uacc4\uc815\uc815\ubcf4"},"content":{"rendered":"\n

HPUX\uc5d0\uc11c \uacc4\uc815\ubcf4\uc548\uc815\ucc45 \uad00\ub9ac\ub294 2\uac00\uc9c0 \ubc29\uc548\uc774 \uc788\ub2e4.
Default\ub85c UNIX\uc5d0 \uc124\uc815\ub418\ub294 passwd\/shadows\uc640 “\/etc\/default\/security” \ud30c\uc77c\uc744 \uc0ac\uc6a9\ud558\uc5ec \uacc4\uc815\uc815\ucc45\uc744 \uc0ac\uc6a9\ud558\ub294 \uac83,
HPUX\uc5d0\uc11c \uc81c\uc870\uc0acSW\ub85c \uc81c\uacf5\ub418\ub294 Trust mode \ub97c \uc0ac\uc6a9\ud558\ub294 \uac83\uc774\ub2e4.

\/etc\/default\/security \ud30c\uc77c\uc744 \uc0ac\uc6a9\ud558\ub294 \uac83\uc774 \uae30\ubcf8 \uc815\ucc45\uc774\uba70 \uacc4\uc815\uc758 \ubcf4\uc548\uc815\ucc45\uc5d0 \ub300\ud55c \uc815\ubcf4\ub294 passwd \ud30c\uc77c\uc758 \uc554\ud638 \ubd80\ubd84\uc5d0 \uc0ac\uc6a9\uae30\uac04, \ub9cc\ub8cc\uae30\uac04\ub4f1\uc774 \uc800\uc7a5\ub41c\ub2e4. (shadows\ub97c \uc0ac\uc6a9\ud558\ub294 \uacbd\uc6b0 shadows\ud30c\uc77c\uc5d0 \uc800\uc7a5)
(\ucc38\uc870 : https:\/\/ziscuffine.tistory.com\/155<\/a>)

Trust mode\ub97c \uc0ac\uc6a9\ud558\ub294 \uacbd\uc6b0 tsconvert \uba85\ub839\uc5b4\ub97c \ud1b5\ud574 Trust mode\ub85c \uc804\ud658\ud558\uac70\ub098 SAM\/SMH\uc758 Accounts for user…\uc5d0\uc11c \ubcc0\uacbd\uac00\ub2a5\ud558\ub2e4. (Auditing and Security\uc5d0\uc11c\ub3c4 \uac00\ub2a5???)
“#\/usr\/lbin\/getprdef -r” \uba85\ub839\uc5b4\ub85c \ud655\uc778\ud558\uac70\ub098 \/tcb \ub514\ub809\ud1a0\ub9ac\uc758 \uc874\uc7ac\uc5ec\ubd80\ub85c\ub3c4 \ud655\uc778 \uac00\ub2a5\ud558\ub2e4.
(\ucc38\uc870 : https:\/\/infrastory.tistory.com\/43<\/a>)

\ucc28\uc774\uc810\uc740 Trust mode\uc5d0\uc11c \uacc4\uc815\ubcc4\ub85c \uc11c\ub85c \ub2e4\ub978 \uc815\ucc45\uc744 \uc9c0\uc815\ud558\uac70\ub098 \uac10\uc0ac \ub85c\uadf8\ub4f1\uc744 \uc124\uc815\ud560 \uc218 \uc788\ub2e4.
\ub2e8 Trust mode \uc124\uc815\uc2dc single mode\uc5d0\uc11c password \ubcc0\uacbd\uc774 \uc798 \uc548 \ub420 \uc218\ub3c4 \uc788\uc74c.
(trust process\uac00 \uc62c\ub77c\uc640\uc57c\ud558\uace0 \/tcb\uc5d0 write \uac00\ub2a5\ud574\uc57c \ubcc0\uacbd\uac00\ub2a5.)<\/p>\n\n\n\n

1. Default\uc758 \uacbd\uc6b0 userdbget \/ userdbset \uba85\ub839\uc5b4\ub97c \ud1b5\ud574 \uacc4\uc815\uc7a0\uae40 \ud655\uc778 \ubc0f \ud574\uc9c0\uac00 \uac00\ub2a5.<\/strong>
“\/etc\/default\/security” \ud30c\uc77c\uc5d0 “AUTH_MAXTRIES=0” \ubd80\ubd84\uc774 0\uc774\uc0c1\uc73c\ub85c \uc124\uc815\ub418\uc5b4 \uc788\uc73c\uba74 password \uc624\ub958 \ud574\ub2f9\ud69f\uc218 \uc774\uc0c1 \ud2c0\ub9b4\uc2dc\uc5d0 \uacc4\uc815\uc774 Lock \ub428
# passwd -s sfmdb
sfmdb LK ;; \ud328\uc2a4\uc6cc\ub4dc null\uc778 \uacc4\uc815\ub3c4 LK\ub85c \ud45c\uc2dc\ub428. \uc815\uc0c1\uc740 PS, min war max day\ud45c\uc2dc
\ub610\ub294 userdbget -a -i \ub85c \ud655\uc778\uac00\ub2a5. \uac01 \uacc4\uc815\uc758 “auth_failures” \ud655\uc778
“auth_failures” \ud69f\uc218 \uc124\uc815 \ucd08\uacfc\uc778 \uacbd\uc6b0 “userdbset -d -u username auth_failures” \ub85c \ud574\uc81c
# userdbset -d -u root auth_failures

\uadf8 \ubc16\uc5d0 max day\ub4f1\uc744 \ucd08\uacfc\ud55c \uacbd\uc6b0 “passwd -d username”\ub85c \ud574\uc81c\ud558\uac70\ub098 \ud328\uc2a4\uc6cc\ub4dc \uc7ac\uc9c0\uc815<\/p>\n\n\n\n

2. trust mode\uc758 \uacbd\uc6b0 \/usr\/lbin\/getprpw, \/usr\/lbin\/modprpw \uba85\ub839\uc5b4\ub97c \ud1b5\ud574 \uacc4\uc815\uc7a0\uae40 \ud655\uc778 \ubc0f \ud574\uc9c0\uac00 \uac00\ub2a5.<\/strong>
“getprpw\/modprpw” \uba85\ub839\uc5b4\ub294 path\uc5d0 \uac78\ub824\uc788\uc9c0 \uc54a\uc544 full path \ub85c \uc2e4\ud589\uac00\ub2a5.
# \/usr\/lbin\/getprpw -l root
uid=0, bootpw=YES, audid=0, audflg=1, mintm=-1, maxpwln=-1, exptm=-1, lftm=-1, spwchg=Fri May 29 09:25:30 2020, upwchg=Fri May 29 09:25:19 2020, acctexp=-1, llog=-1, expwarn=-1, usrpick=DFT, syspnpw=DFT, rstrpw=DFT, nullpw=DFT, admnum=-1, syschpw=DFT, sysltpw=DFT, timeod=-1, slogint=Thu Oct 17 09:12:55 2024, ulogint=Tue Sep 12 09:54:19 2023, sloginy=-1, culogin=-1, uloginy=-1, umaxlntr=-1, alock=NO, lockout=0000000<\/strong>

alock \/ lockout \ubd80\ubd84\uc774 \uacc4\uc815\uc7a0\uae40 \ubd80\ubd84. yes\ub098 1\uc774 \ud558\ub098\ub77c\ub3c4 \uc788\uc73c\uba74 \uc7a0\uae40\uc0c1\ud0dc.

“modprpw” \uba85\ub839\uc5b4\ub85c \ud574\uc81c \uac00\ub2a5
# \/usr\/lbin\/modprpw -l -k username

!! alock \ub294 administrator lock \uc0c1\ud0dc, \uad00\ub9ac\uc790\uac00 smh->user\uc5d0\uc11c \ud574\uc81c\uac00\ub2a5.
lockout\ub294 1\uc774 \uc5b4\ub290 \uc704\uce58\uc5d0 \uc788\ub290\ub0d0 \ub530\ub77c\uc11c \uc0c1\ud0dc\ub97c \ud45c\uc2dc\ud55c\ub2e4.
\uc81c\uc77c \uc67c\ucabd 1\ubc88\uc9f8 \ubd80\ud130 \uc774\uc720 \ud558\uae30\uc640 \uac19\uc774 \ud45c\uc2dc.
1 past password lifetime
2 past last login time (inactive account)
3 past absolute account lifetime
4 exceeded unsuccessful login attempts
5 password required and a null password
6 admin lock
7 password is a *<\/p>\n","protected":false},"excerpt":{"rendered":"

HPUX\uc5d0\uc11c \uacc4\uc815\ubcf4\uc548\uc815\ucc45 \uad00\ub9ac\ub294 2\uac00\uc9c0 \ubc29\uc548\uc774 \uc788\ub2e4.Default\ub85c UNIX\uc5d0 \uc124\uc815\ub418\ub294 passwd\/shadows\uc640 “\/etc\/default\/security” \ud30c\uc77c\uc744 \uc0ac\uc6a9\ud558\uc5ec \uacc4\uc815\uc815\ucc45\uc744 \uc0ac\uc6a9\ud558\ub294 \uac83,HPUX\uc5d0\uc11c \uc81c\uc870\uc0acSW\ub85c \uc81c\uacf5\ub418\ub294 Trust mode \ub97c \uc0ac\uc6a9\ud558\ub294 \uac83\uc774\ub2e4. \/etc\/default\/security \ud30c\uc77c\uc744 \uc0ac\uc6a9\ud558\ub294 […]<\/p>\n","protected":false},"author":1,"featured_media":121,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[34,29,159,157,28,158],"class_list":["post-465","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tech","tag-hpe","tag-hpux","tag-modprpw","tag-passwd","tag-throuble-shooting","tag-trust-mode"],"_links":{"self":[{"href":"https:\/\/iwgh.duckdns.org\/index.php?rest_route=\/wp\/v2\/posts\/465","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/iwgh.duckdns.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/iwgh.duckdns.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/iwgh.duckdns.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/iwgh.duckdns.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=465"}],"version-history":[{"count":3,"href":"https:\/\/iwgh.duckdns.org\/index.php?rest_route=\/wp\/v2\/posts\/465\/revisions"}],"predecessor-version":[{"id":468,"href":"https:\/\/iwgh.duckdns.org\/index.php?rest_route=\/wp\/v2\/posts\/465\/revisions\/468"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/iwgh.duckdns.org\/index.php?rest_route=\/wp\/v2\/media\/121"}],"wp:attachment":[{"href":"https:\/\/iwgh.duckdns.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=465"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/iwgh.duckdns.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=465"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/iwgh.duckdns.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=465"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}