topic Root account disabled in Operating System - HP-UX

Root account disabled

Otto Folprecht — Tue, 07 Dec 2004 19:01:57 GMT

The root cause of the problem was that one of our systems administrators needed to increase security by logging on the UNIX box telnet sessions. In SAM the admin went into Auditing and Security – Audited Events – and then answered yes to convert to a trusted system. The outcome was an error message indicating that it cannot access rootmod file. Since then we cannot access the UNIX box as root with a message that the root account has been disabled. All other users can access the system but are being asked to change passwords. THX

Re: Root account disabled

Steven E. Protter — Tue, 07 Dec 2004 19:14:19 GMT

At the console

log on as root

If you have the password, that alone will reset the disabled root account. If you don't know the password proceed further.

Boot the system

interupt at the 10 second prompt.

bo
Answer Y to the Interact question.

hpux -is

mount /var
mount /usr

vi /tcb/files/auth/r/root

change:
:u_pwd=YcVZTmswL7o/.:\
to
:u_pwd=:\

Your intial entry will be different because its encrypted.

passwd

Set the root password.

You have now reset the root password.

SEP

Re: Root account disabled

Con O'Kelly — Tue, 07 Dec 2004 20:00:30 GMT

Hi Otto

If you are already logged in as root (or else login in single user as Steven says) then you can also use:
# /usr/sam/lbin/usermod.sam -F -p "" root

This will set a null password for root and you should be able to login as root and then set a new password.

Also check root account using:
# /usr/lbin/getprpw root

Converting to a trusted system will expires all accounts.
You can avoid this using:
# /usr/lbin/modprpw -V

Cheers
Con

Re: Root account disabled

Hoang Chi Cong_1 — Tue, 07 Dec 2004 21:46:30 GMT

Hi

Try to first login as 'root' from the console. If successful, then unlock the account,
run:# /usr/lbin/modprpw -k root

If can not, reboot server into single-user mode:
Stop the boot process when it says "Press any key to stop in 10 seconds". It will be on "Main Menu >" prompt.

Type "bo pri" hit Enter.
< Interact with IPL ? >
Say Y ( for yes)
You will be at "ISL>" prompt.
Type "hpux -is" hit Enter.
System will be booted in single user mode and it will be logged in as "root".
At the end of this you'll be able to change root password

Regard,

Jim

Re: Root account disabled

Nguyen Anh Tien — Wed, 08 Dec 2004 06:46:12 GMT

Otto.
Let take care that In single mode,passwd command only run when you already mounted /var and /usr (as S.E.P saying).
mount /var
mount /usr
tienna