topic Re: Trusted System ! in Operating System - HP-UX

Trusted System !

Ivan Azuara — Mon, 24 Mar 2003 18:21:42 GMT

Hi !

I??m experimenting a strange event on my HPUX 11i server. I converted that server in a Trusted System, but something rare happen when i want to change the password for the user "root".

# passwd
Changing password for root
Old password:
Sorry.

After put the actual password that corresponds to the old password in this case, i receive the "sorry" message.

I have others serves on HPUX 11.0 with Trusted Systems, and don??t receive the same message, when i try to change the password's root. Both systems (11i, 11.0) have applied the same security policies.

Somebody know??s if the problem has relation about the OS version ?.

Thank??s in advance !

Re: Trusted System !

Ross Zubritski — Mon, 24 Mar 2003 18:25:06 GMT

Are you sure you are typing the old password correctly?

Regards,

RZ

Re: Trusted System !

Jeff Schussele — Mon, 24 Mar 2003 18:27:15 GMT

Hi Ivan,

This can occur IF your original root PW was greater than 8 chars. Before the chars >8 were just ignored, now they come into play.
Try entering JUST the first 8 chars of the old root PW & see if that works.
The cause is that when you converted, they system only converted the first 8 chars.

Rgds,
Jeff

Re: Trusted System !

Michael Steele_2 — Mon, 24 Mar 2003 18:27:28 GMT

Try nulling out the password for root and also checking the protected password file:

authck -p (* verifies *)

/usr/sam/lbin/usermod.sam -F -p "" root (* null password *)

Also good to know:

getprpw

alock=yes then account is disabled. Remember, three strkes and out!

Re: Trusted System !

Martin Johnson — Mon, 24 Mar 2003 19:37:23 GMT

Edit the file /tcb/files/auth/r/root.
Look for a line with something like this:

:u_pwd=UNpk1V5S4Kt.:
Edit it to look like this:

:u_pwd=:
That will remove the encrypted password for root. Use passwd to set a new password.

HTH
Marty

Re: Trusted System !

Sridhar Bhaskarla — Mon, 24 Mar 2003 20:22:03 GMT

Hi Ivan,

Jeff had the answer. Try the first 8 chars of the password. This is only the case if you had a password of more than 8 chars and converted the system.

Once the system is converted, subsequent password changes will not be affected though only first 8 chars are significant.

-Sri