Unless otherwise noted, these accounts are locked by default, and should remain so.


root - The main administrator account. Obviously, this account should always have a good password and it should not be locked.


(NOTE: root's shell *must* be /sbin/sh, or else the system will be unbootable.)




daemon - Mainly for legacy compatibility, but used at least by grmd (which is a helper daemon for HP-UX X server: you may see it if you run a local X server on your system.) 




bin - The standard owner of all HP-UX system binaries and libraries. Do not remove this: if you do, you will see lots of error messages from swinstall when installing patches and other HP software depots. 




sys - Exists for legacy compatibility, I guess?




adm - The owner of /var/adm directory, the /var/adm/wtmp* files and the accounting files in /var/adm/acct/. 




uucp and nuucp - Related to UUCP subsystem: a system for transferring mail and files over modem lines and other serial connections. If UUCP is not used at your site, these accounts should be locked, as they are by default. Removing these accounts is not advisable, as some system files are owned by these user accounts; you might have difficulties installing a Quality Pack if these accounts don't exist on your system.




lp - The account of the printing subsystem, so that the print spooler does not have to run as root. 




hpdb - A system account on all HP-UX systems for historical reasons: it is/was used by the ALLBASE/HP-UX product. See ITRC Knowledge Base document emr_na-c00931789-3 for more information.
If you don't have ALLBASE/HP-UX on your system, this account should remain locked as it is by default.




nobody - This user is traditionally used in many cases when an application must run as an account that is guaranteed to not own any files and directories (i.e. to make sure it can only write to world-writeable locations like /tmp and /var/tmp). On new applications, it's recommended to create an application-specific user account for this purpose instead.


"nobody" is also used by the NFS subsystem: if a NFS client accesses a NFS filesystem using an UID that does not exist on the NFS server, the access is treated as if it was made by the "anonymous" UID... which is "nobody" by default. (The UID 0 on the NFS client is also translated to the anonymous UID on the NFS server to prevent an intruder from getting root access on the NFS server if s/he already has root on a NFS client.)


The "nobody" account *must* always remain locked, no exceptions. It should not be removed.




www - Used by HP Apache web server, if it's installed. 




webadmin - Used by the Webmin GUI that comes with the HP Apache Web Server (optional component). 




smbnull - Used by Samba (or HP CIFS Server) software. It is important that this account *not* own any files or directories: this is like "nobody" but specifically for Samba. 




mysql - Used by the MySQL database engine.




iwww and owww - Probably these exist to be compatible with HP-UX 11.04 VirtualVault product? 




hpsmh - Used by HP System Management Homepage, an unified Windows/Linux/HP-UX/... web administration tool for HP hardware. 




tftp - When a HP-UX system runs a TFTP server (for example, if it's acting as a Ignite-UX server or a Ignite boot helper), the TFTP clients will be allowed to access the system as user "tftp" (the TFTP protocol does not have usernames or authentication). 




sshd - This is used by the Privilege Separation feature of sshd (see SSH documentation for more details). It is very important that the home directory of this user (/var/empty) is actually empty and *not* owned by the sshd user. 




See also:
http://h30499.www3.hp.com/t5/System-Administration/HP-default-users-bin-sys-adm-etc-in-etc-passwd/m-...
 
MK
MK

除非另有说明，这些帐户被锁定缺省，并且应该继续这样做。


根 - 主管理员帐户。很显然，这个帐户应该始终有一个良好的密码，它不应该被锁定。


（注：root的外壳*必须*是/ sbin目录/ sh的，否则系统将无法启动。）




守护程序 - 主要用于传统设备的兼容性，但至少使用grmd（这是一个帮助守护程序，用于HP-UX X服务器：您可能会看到它，如果你在系统上运行的本地X服务器。）




仓 - 所有HP-UX系统二进制文件和库的标准拥有者。请不要删除这样的：如果你这样做，你将安装补丁和其它HP软件仓库时，看到很多错误消息从swinstall命令。




SYS - 存在传统设备的兼容性，我猜？




ADM - 中的/ var / adm目录是/ var / ADM / wtmp文件*文件，并在/ var / ADM /会计/会计文件的所有者。




UUCP和nuucp - 相关UUCP子系统：传输邮件和文件超过调制解调器线路和其它串行连接的系统。如果UUCP不使用你的网站，这些帐户应该被锁定，因为它们是在默认情况下。删除这些帐户是不可取的，因为某些系统文件被这些用户帐户拥有;你可能有安装质量包的困难，如果这些账户在系统上不存在。




LP - 打印子系统的账户，从而使打印后台处理程序没有以root身份运行。




hpdb - 所有HP-UX系统的历史原因的系统帐户：这是/曾通过ALLBASE / HP-UX产品。见ITRC知识库文档emr_na-c00931789-3以获取更多信息。
如果您没有ALLBASE / HP-UX系统上，这个账户应该保持锁定状态，因为它是在默认情况下。




没有人 - 这个用户是传统用在许多情况下，当一个应用程序必须为这是保证不拥有任何文件和目录的帐户下运行（即，以确保它只能写像/ tmp和/ var / tmp目录有可写权限的位置）。关于新应用，建议创建一个应用程序特定用户帐户用于此目的代替。


“没有人”也使用了NFS子系统：如果一个NFS客户端访问NFS文件系统使用不NFS服务器上存在的UID，访问被视为它是由在“匿名”UID ......这是“没有人”在默认情况下。 （NFS客户端上的UID 0也被翻译到NFS服务器上的匿名UID，以防止入侵者获取如果他/她已经有根NFS客户机上的NFS服务器上的root权限。）


在“无人”账户*必须*始终保持锁定状态，没有例外。它不应该被删除。




WWW - 惠普使用的Apache Web服务器，如果它的安装。




WebAdmin的 - 由Webmin的图形用户界面，配备了HP的Apache Web服务器（可选组件）。




smbnull - Samba使用（或HP CIFS服务器）软件。重要的是，这个账户*不*拥有任何文件或目录是很重要的：这就像“人”，而是专为桑巴。




MySQL的 - 所使用的MySQL数据库引擎。




iwww和owww - 这些可能存在与HP-UX 11.04 VirtualVault产品兼容？




hpsmh处 - 由HP系统管理主页，一个统一的Windows / Linux / HP-UX / ... web管理工具，使HP的硬件。




TFTP - 当HP-UX系统运行TFTP服务器（例如，如果它作为一个Ignite-UX服务器或点燃引导辅助程序），在TFTP客户端将被允许访问系统的用户“TFTP”（在TFTP协议中没有用户名或认证）。




sshd的 - 这是用的sshd的权限分离功能（请参阅SSH文档了解更多信息）。这是非常重要的，这个用户（在/ var /空）的主目录实际上是空的，*不*由sshd的用户所拥有。




也可以看看：
http://h30499.www3.hp.com/t5/System-Administration/HP-default-users-bin-sys-adm-etc-in-etc-passwd/m-...
 
MK
MK