topic Re: root login getting locked out in Operating System - HP-UX

root login getting locked out

Seshan — Thu, 29 Jul 2004 03:44:53 GMT

System is an HP9000 OS 11.11. the console is a normal terminal which is logged in most of the time... Normally one is able to login from outside via ssh, telnet as either root or any another id and then if need be change to su mode.. Once in a while the machine used to say, that id was locked in commercial database and then we had to log out of console and log back... now whether we do a logout and relogin or change passwords for root, nothing works.. there is no securetty file at all in /etc.. this forces us to work at console only, bcos even su to root privilege is being blocked, any idea on this?

Re: root login getting locked out

Steve Steel — Thu, 29 Jul 2004 04:03:47 GMT

Hi

1)Is the box trusted

2)Exactly what message do you see

Try to login as root then show the /var/adm/syslog/syslog.log from that period

3)How is your patch level

Steve Steel

Re: root login getting locked out

Michael Tully — Thu, 29 Jul 2004 04:15:06 GMT

You say that "id was locked in commercial database"
I've not seen this message before except in something like a system that had something like 'Etrust' loaded. So, other than what Steve has asked for, please also provide, if you can an 'swlist -a revision' output.

Re: root login getting locked out

Mei Jiao — Thu, 29 Jul 2004 05:27:19 GMT

How about trying this:
# /usr/lbin/modprpw -k root ==> resets root passwd
# passwd root

Re: root login getting locked out

Seshan — Thu, 29 Jul 2004 06:01:42 GMT

the box is trusted, so I found.. can u tell me how this became locked all of a sudden which never happend? what are the conditions which make such a situation happen?
Can we revert to normalcy and if so how?

Rgds

Re: root login getting locked out

Steve Steel — Thu, 29 Jul 2004 06:06:54 GMT

Hi

A Trusted System can be easily changed back to a standard HP-UX
system by using the Actions menu in any of the SAM Auditing subareas

Steve Steel

Re: root login getting locked out

Darren Prior — Thu, 29 Jul 2004 06:59:38 GMT

Hi,

Although it's not a supported tool, getprpw has a man page at 11.11. It will be able to show you the reason for the lockout (expired password, too many attempts, etc.)

regards,

Darren.

Re: root login getting locked out

Muthukumar_5 — Thu, 29 Jul 2004 07:00:02 GMT

We can check user status using

passwd -s

# passwd -s root
PS =passworded; LK =locked; and NP =no password.

If you get LK then it is locked.

unconvert the system using SAM.

Then unlock it using,

passwd -d root

See passwd man page more

It will do the trick. Then convert into trusted as usual.

Re: root login getting locked out

Seshan — Thu, 29 Jul 2004 08:45:21 GMT

thanks guys, managd to clear the same with a temporary reconvert to non truseted by /etc/tsconvert -r

Rgds