rkw@okc-unix.af.mil (Ron Wallman LAETA) (06/12/91)
I cleaning up various things now that my 9.7 -> 10.3 transition is
completed. Today I was looking at the registry.
There are reserved accounts (Ref: Admin. the Domain/OS Registry, pg 2-7).
After comparing with my registry I have the following "extra" system
accounts:
root.sys.none
bin.mail.none
root.bin.none
user.server.none
user.login.none
root.backup.apollo
sys_person.locksmith.none
daemon_sr9.none.none
My plan is to delete these accounts, but since I'm not a unix expert I
realize I could be shooting my foot off. I just happened to notice
the account "user.server.none" is used by /etc/server so I'm wondering
how many more of this accounts are really reserved too. Any comments?
The book also says I can change the passwords for these system accounts
without affecting operations. True?
All stations have Aegis and two have BSD/Aegis installed.
Thanks.
Ronald K Wallman
United States Air Force
Oklahoma City Air Logistics Center
OC-ALC/LAETA (Bldg 3220)
Tinker AFB, OK 73145-5990
(405)-736-5575 DDN Mail Address: rkw@okc-unix.af.milthompson@PAN.SSEC.HONEYWELL.COM (John Thompson) (06/13/91)
> I cleaning up various things now that my 9.7 -> 10.3 transition is > completed. Today I was looking at the registry. > There are reserved accounts (Ref: Admin. the Domain/OS Registry, pg 2-7). > After comparing with my registry I have the following "extra" system > accounts: > root.sys.none > bin.mail.none > root.bin.none > user.server.none > user.login.none > root.backup.apollo > sys_person.locksmith.none > daemon_sr9.none.none > > My plan is to delete these accounts, but since I'm not a unix expert I > realize I could be shooting my foot off. I just happened to notice > the account "user.server.none" is used by /etc/server so I'm wondering > how many more of this accounts are really reserved too. Any comments? I don't think you can shoot your foot off. The Domain registry tools will not let you remove a required account. /etc/server (essentially) does a setuid, setgid, and setoid to run as the user.server.none SID, so I don't think that you need an account set up in order for it to work. > The book also says I can change the passwords for these system accounts > without affecting operations. True? True. I wonder if some/all of these accounts are from the transition period, or were required at sr9.7.... -- jt -- John Thompson Honeywell, SSEC Plymouth, MN 55441 thompson@pan.ssec.honeywell.com When in danger, when in doubt -- run in circles, scream and shout.