topic Re: sudo help in Operating System - HP-UX

sudo help

Donny Jekels — Thu, 17 Apr 2003 20:38:17 GMT

After I installed sudo 1.6.6 on a HP-UX 11.0 trusted system. I can't login as root from console.

It tells me roots password is incorrect.
this is not the case.

Re: sudo help

John Dvorchak — Thu, 17 Apr 2003 20:55:31 GMT

Can you login as a normal user and su to root? Perhaps /etc/securetty got mangled?

Re: sudo help

Michael Tully — Thu, 17 Apr 2003 21:05:29 GMT

Not sure what has happened. (hopefully you still have a root session)
You didn't change to trusted at the same time?

1) Remove /etc/securetty
2) run '/usr/lbin/modprpw -k root'
3) change the root password
4) reinstate /etc/securetty file with only 'console'
5) test as root from console
6) test as sudo 'command' from another session
7) su -

Re: sudo help

Donny Jekels — Thu, 17 Apr 2003 21:06:11 GMT

yes, I can. but even from the console
it fails.

when I log in from the console, it tells me incorrect password try again.

I can login as myself, tehn I use sudo su and I am in as root.

Re: sudo help

Donny Jekels — Thu, 17 Apr 2003 21:10:02 GMT

I will give it a try.

thanx for the advise. is there anything that you know if sudo will affect this or cause this behavior?

Re: sudo help

John Dvorchak — Thu, 17 Apr 2003 21:10:59 GMT

I am curious if you have an @ in the password? The ampersand (@) is a throw back to the days of tty's, real tty's and it means EOL, erase to end of line. It will work everywhere but on the console. If that is the case try changing the password to something without a @ in it and give it a try.

Re: sudo help

John Dvorchak — Thu, 17 Apr 2003 21:13:01 GMT

Sorry I called the @ (at symbol) an ampersand. Must be having a senior moment.

Re: sudo help

Donny Jekels — Thu, 17 Apr 2003 21:22:40 GMT

okay, can't get to datacenter. no I don't have webconsole. I will check on monday again. And try all your tricks. let me know if you think of anything else in the meanwhile. have a great weekend.

Re: sudo help

Michael Tully — Thu, 17 Apr 2003 21:23:47 GMT

Donny,

I've used 'sudo' for years, never seen this. 'sudo' does not make any changes to either the trusted database (/tcb), password file etc. It uses the /etc/sudoers file as a reference point to who can do what, and utilises the users own password. It all presumes that 'root' has set it up.

Michael

Re: sudo help

CCIL — Thu, 17 Apr 2003 21:28:59 GMT

Try to reboot the system , in single user mode , then unconvert the system using the command tsconvert -r , & then change the runlevel to 3 . then check for the root login .

one more thing , whethere your root password is more than 8 charcters , if yes then key in only first eight characters of the root password

Re: sudo help

Michael Tully — Thu, 17 Apr 2003 21:37:13 GMT

If this is a production server, beware that making your system un-trusted and then trusted again afterwards *will* reset all passwords and make users change their passwords at the next login attempt, unless the proper precautions are taken. Have a look at the 'modprpw/getprpw' man pages. (A good way to start a mutiny ...)

Re: sudo help

Rick Garland — Fri, 18 Apr 2003 16:51:26 GMT

Is it possible that you came out of trusted for the sudo install then went back in to trusted?

If this is the case your passwds would have changed for all accts.

Re: sudo help

Donny Jekels — Sat, 19 Apr 2003 13:51:05 GMT

turning into an interresting thread.

it was just conincidance that I installed sudo 1.6.6 on 2 servers that had problem with their root password.

As it tunred out it had nothing to do wiht sudo. Still investigating the root cause of this problem.

Have anyone experienced something similar, where root's password became 'corrupted/lost' and required a reset? as described by Michael Tully.

Does HP know of this issue, and what have they done about it? Is there a patch available to prevent this flaw?