topic Re: pwck question in Operating System - HP-UX

pwck question

Ken Penland_1 — Thu, 11 Dec 2003 13:11:56 GMT

Ok, I have been tasked to clean up any issues that come from running a "pwck -s" on our HPUX 11.00 trusted systems...got em all pretty much cleaned up, but one system gives me an error I dont understand.

has anyone ever seen pwck come back for every single user a message that says:

"cannot have a password set on the account" ?

I dont really understand this...all the accounts seem fine, can change passwords and all, but why is it reporting this error?

*BOGGLE*

Re: pwck question

Karthik S S — Thu, 11 Dec 2003 13:19:24 GMT

I hope the following link will answer your question.

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=210718

-Karthik S S

Re: pwck question

Paula J Frazer-Campbell — Thu, 11 Dec 2003 13:19:49 GMT

Ken

This may help:-

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=210718

paula

Re: pwck question

Karthik S S — Thu, 11 Dec 2003 13:21:38 GMT

Paula, I think our internal search engines are in sync :-)).

-Karthik S S
No points for this please....

Re: pwck question

Ken Penland_1 — Thu, 11 Dec 2003 13:22:54 GMT

yeah, saw that one...I always try to do a little ITRC research before asking a question...in that thread, his problem was the u_pswduser field...well not the case in mine...(I dont even see a u_pswduser field in my auth files, could that be a problem?)

Here is a sample auth-file:

mmouse:u_name=mmouse:u_id#43:\
:u_pwd=encryptedpasswordhere:\
:u_auditid#43:\
:u_auditflag#1:\
:u_succhg#1069761070:u_unsucchg#1051274558:u_suclog#1071165941:u_suctty=pts/ta:\
:u_unsuclog#1071165941:u_unsuctty=pts/ta:u_numunsuclog#0:u_lock@:\
:chkent:

Re: pwck question

Jeff Schussele — Thu, 11 Dec 2003 13:26:01 GMT

Hi Ken,

Is this a Trusted system?
If so I'd check /tcb/files/auth/system/default and/or the /etc/default/security files for a setting that's forcing the system to believe that no user should have a PW.
I've never seen this, but suppose it may be possible.

Rgds,
Jeff

Re: pwck question

Paula J Frazer-Campbell — Thu, 11 Dec 2003 13:26:28 GMT

Karthik, I think our internal search engines are in sync :-)).

- Paula
No points for this please....

Re: pwck question

Ken Penland_1 — Thu, 11 Dec 2003 13:42:43 GMT

Thanks Jeff!

Ya didnt really give me the "answer" but pointed me in the right direction...I guess I missread that other thread, or they worded it incorrectly....basically I compared the /tcb/files/auth/system/default file on a system that worked fine and the problem system, and noticed that on the problem system the field was MISSING from it...so I added "u_pswduser=root" to the default file and it fixed it right up...thanks all :)