Ok...I have reverted back to the BASE security option for now.  tonight I will
put it back to ENHANCED, and will then be able to reboot.  Several people
pointed out to me that a reboot is very necessary because there are daemons
running that need to be restarted so everything is in sync.  Hopefully that will
fix this issue...but then again it might not.
I received a ton of replies stating that some 3rd party applications are just
not written to support ENHANCED security, and there isn't much you can do
(except pay the software company a lot of money to re-write their code...which
people have done).
So that's where I'm at right now.  Wish me luck.
Jonathan Williams
Unix Systems Administrator
The Shubert Organization, Inc.
----- Original Message -----
From: "Jonathan Williams" <jonathw_at_shubertorg.com>
To: <tru64-unix-managers_at_ornl.gov>
Sent: Wednesday, November 20, 2002 4:17 PM
Subject: Shadowed passwords leads to login problem
> I've got an ES40 running tru64 5.1, patch 5.  Up until today we just had the
> BASE security installed.  Then I went ahead and did a "sysman secconfig", and
> chose ENHANCED.  Going throught the little wizard the only thing I chose was
to
> enable SHADOWED passwords...the rest of the steps I just skipped.  After
hitting
> "finish" it says that the new security option will be in full effect after
next
> boot.  I can't boot this system during the day, so figured I would do it
> tonight.  I'm not sure what it needs a reboot for, because I looked at the
> passwd file, and saw that there were little * where the passwords had been.  I
> also changed a password, and saw the enhanced security menu (choose your own
> password, blah blah blah).  Everything seemed fine.  I could login as any user
> normally--ftp was fine, telnet was fine--everything seemed OK.  Until...
>
> One of our programmers tried to access one of the Informix databases on this
> system through a graphical tool called ServerStudio.  Normally it just goes
> straight in and connects to the database.  Now it seems to ask for a username
> and password.  The problem is that when you put in the Informix user with the
> proper password, it says something like "invalid username or password".  I
went
> over and tried this myself, but it just won't let you connect to the
> database...(yes, I typed very slowly).  I can telnet into this system as
> Informix, and it lets me in just fine.  It seems to be a problem with this
> ServerStudio program and how it connects.  Has anyone had a similar
experience?
> I'm really at a loss.  TIA
>
> Jonathan Williams
> Unix Systems Administrator
> The Shubert Organization, Inc.
>
>
Received on Wed Nov 20 2002 - 22:49:31 NZDT