topic Re: root account disabled! - how to disable this feature? in Operating System - HP-UX

root account disabled! - how to disable this feature?

JI HUI — Tue, 25 Jan 2005 02:38:12 GMT

We have HP-UX11.11, somehow, we noticed that the user account root could be disabled if there are three failed login attempts. But, in another HP-UX 11.11 machine, we did not have such problem.
Is it so called trust mode in Hp-ux? how can I disable this feature?

Thank you.

Re: root account disabled! - how to disable this feature?

bhavin asokan — Tue, 25 Jan 2005 02:56:37 GMT

hi,
you can login as root and enable it through console.

go to sam->accounts for users and groups->users

select root

go to actions->modify users security policies-> general user account policies->

set account life time to none , unsuccessful login tries allowed to more than 100,max inactivity period disabled.

for all the users you can set it or individually.

regds,

Re: root account disabled! - how to disable this feature?

Peter Godron — Tue, 25 Jan 2005 03:01:08 GMT

Hi,
looks like a trusted system.
Have a look at what user profiles you have set up. SAM ->Accounts -> Users [Action : User Templates].
Your root user may have been assigned a wrong profile.
You should be able to log into the console and do a "modprpw -k root" to reset.
Regards

Re: root account disabled! - how to disable this feature?

JI HUI — Tue, 25 Jan 2005 03:49:30 GMT

thank you for the advice.

By the way, how can I convert a trusted system to a "normal" system? As we run the server for testing only. Too much security features do not help.

thank you.

Re: root account disabled! - how to disable this feature?

bhavin asokan — Tue, 25 Jan 2005 04:11:31 GMT

hi,

see the document .it will help you for understanding about trusted system.

regds,

Re: root account disabled! - how to disable this feature?

Hoang Chi Cong_1 — Tue, 25 Jan 2005 04:27:37 GMT

Hi man
If you want to convert a trusted system to a "normal" system.
The easies way is using SAM:

SAM--> Auditing and Security-->Audited Events--->Action-->Unconvert the System

When unconverting the system, it will move user's password back to the /etc/passwd file and removes the /tcb directory structure

Goodluck!
HoangChiCong

Re: root account disabled! - how to disable this feature?

bhavin asokan — Tue, 25 Jan 2005 04:29:45 GMT

hi,

see the following link to convert in to non trusted mode.you can search forum for more docs.

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=319769

regds,