critical impact:
Security Information Architecture (SIA) routines - not available; use PAM routines (CrUn113)
Problem description
The SIA routines exist on Tru64 UNIX, but not on HP-UX.
Replacement technology exists in the Pluggable Authentication Modules (PAM) routines. Identifiers
 sia_audit |
siad_chg_shell |
sia_become_user |
siad_chk_invoker |
sia_chdir |
siad_chk_user |
sia_chg_finger |
siad_endgrent |
sia_chg_password |
siad_endpwent |
sia_chg_shell |
siad_get_groups |
sia_chk_invoker |
siad_getgrent |
sia_collect_trm |
siad_getgrgid |
sia_get_groups |
siad_getgrnam |
sia_getgroup |
siad_getpwent |
sia_getpasswd |
siad_getpwnam |
sia_init |
siad_getpwuid |
sia_log |
siad_init |
sia_make_entity_pwd |
siad_ses_authent |
sia_ses_authent |
siad_ses_estab |
sia_ses_estab |
siad_ses_init |
sia_ses_init |
siad_ses_launch |
sia_ses_launch |
siad_ses_reauthent |
sia_ses_reauthent |
siad_ses_release |
sia_ses_release |
siad_ses_suauthent |
sia_ses_suauthent |
siad_setgrent |
sia_timed_action |
siad_setpwent |
sia_validate_user |
siad_test_newpass |
siad_chg_finger |
siad_update_pass |
siad_chg_password |
|
See also
Solution description
Use respective PAM routines to achieve similar results.
The correct way for applications to apply security services on HP-UX is to use the PAM routines. Note that the PAM routines may not behave exactly the same as the SIA routines. Review your code, applicable manpages, and the Tru64 UNIX to HP-UX 11i Porting Guide for more information on PAM. See also
Problem summary
| classifications |
source types |
OS release |
severity |
type |
| SEC |
C, C++ |
any HP-UX 11i version |
critical |
unavailable |
|
