INTELLIGENT WORK FORUMS
FOR COMPUTER PROFESSIONALS

Member Login




Remember Me
Forgot Password?
Join Us!

Come Join Us!

Are you a
Computer / IT professional?
Join Tek-Tips Forums!
  • Talk With Other Members
  • Be Notified Of Responses
    To Your Posts
  • Keyword Search
  • One-Click Access To Your
    Favorite Forums
  • Automated Signatures
    On Your Posts
  • Best Of All, It's Free!

Join Tek-Tips
*Tek-Tips's functionality depends on members receiving e-mail. By joining you are opting in to receive e-mail.

Posting Guidelines

Promoting, selling, recruiting, coursework and thesis posting is forbidden.
Jobs from Indeed

Link To This Forum!

Partner Button
Add Stickiness To Your Site By Linking To This Professionally Managed Technical Forum.
Just copy and paste the
code below into your site.

Disabled accounts on HP-UX 10.20

Disabled accounts on HP-UX 10.20

(OP)
Hello,

Does anyone have any advice on how to enable accounts? My root account has become disabled. Thanks

RE: Disabled accounts on HP-UX 10.20

Log with another account that has access to SAM.  Go into SAM and reactivate the root account.

RE: Disabled accounts on HP-UX 10.20

(OP)
I do not have another account with access to sam. I am able to log on with another user at the console howerver, I am not able to su -. I also tried to boot into single-user mode and change my root password which was successful. On reboot, the root account was still disabled.

RE: Disabled accounts on HP-UX 10.20

Sorry, I read your question wrong.  I thought that the root account was deactivated.

RE: Disabled accounts on HP-UX 10.20

(OP)
I appriciate your response. Any other suggestions on what I might try?

RE: Disabled accounts on HP-UX 10.20

A bit of a longshot but login as another user. Try the su command followed by password. Then try running sam. If this runs you should be able to reactivate root login.

RE: Disabled accounts on HP-UX 10.20

(OP)
I tried but SAM will not run from single-user. I also tried to login as another user and the su command followed by the password. It still says the account is disabled. I can run SAM as a user but I do not have the privleges to add or remove users or groups.

RE: Disabled accounts on HP-UX 10.20

(OP)
I'm sorry, I am still new to the unix world. What do you mean by "trusted system"? If you mean do I allow others to use my system then no.

RE: Disabled accounts on HP-UX 10.20

Hi Kaos,

A Trusted System is a way of running your HP box, it gives a higher degree of security than the standard way.

I asked because, when we converted to a trusted system, I began having trouble with the root login becoming disabled.

Unfortunately I'm not in the office tomorrow, and I don't have an HPUX computer at home. If you're still having trouble when I get back in the office (thu, sorry) I'll dig around and find out some stuff for you.

Mike
michael.j.lacey@ntlworld.com
Cargill's Corporate Web Site

RE: Disabled accounts on HP-UX 10.20

Kaos1,

  after hunting through some man pages... I found this in man 1 login:

On a trusted system, login always allows user root to log in on the console unless /etc/securetty exists and does not contain console.

It also stated that the administrative lock could be set on that user account or the terminals involved..

So it is worth checking if a /etc/securetty exists and reading it to see if a console entry is in there. If it isn't then you may be a bit stuffed!

Another problem (which would be worse) is that on our systems at least /etc/securetty is read-only, requiring root privilages...

It might be worth searching the FAQs on hpsearch.com.

Good Luck!
Loon

RE: Disabled accounts on HP-UX 10.20

(OP)
Mike and Loon,

The box was setup as a standard load. So I believe that it is not a trusted system. Also, I have an /etc/securetty file that needs root privileges to open or change. I search the HP faqs for anything on the root account becoming disabled and found nothing. I believe I'm stuck. Again, I appriciate any help you could give.
Thanks

Kaos1

RE: Disabled accounts on HP-UX 10.20

Boot to single user mode.  Then mount /usr.  Then run the following command:

/usr/lbin/modprpw -kroot

This should work.  Let me know.

RE: Disabled accounts on HP-UX 10.20

You can tell very quickly if your HP is a "trusted" system by looking at the /etc/passwd file. If the /etc/passwd file contains encrypted passwords, the sytem is NOT trusted. If ALL the passwd fields are "*" this indicates that the system has been converted to a "trusted" system. The actual encrypted passwds are located in /tcb/files/auth/...

crowe

RE: Disabled accounts on HP-UX 10.20

Hi

Another thing you could try if you have a trusted system (use crowe's way to see if you have a trusted system or not by looking in /etc/passwd file), is to edit the /tcb/files/auth/r/root file.  You will see a line similar to this :

u_unsuctty=pts/tb:u_numunsuclog#1:u_lock:chkent:

Add a @ sign after the u_lock, so that the line looks like the following :

u_unsuctty=pts/tb:u_numunsuclog#1:u_lock@:chkent:

Hope this ends you nightmare!!

George

Reply To This Thread

Posting in the Tek-Tips forums is a member-only feature.

Click Here to join Tek-Tips and talk with other members!

Close Box

Join Tek-Tips® Today!

Join your peers on the Internet's largest technical computer professional community.
It's easy to join and it's free.

Here's Why Members Love Tek-Tips Forums:

Register now while it's still free!

Already a member? Close this window and log in.

Join Us             Close