topic Re: problem changing root passwd on a trusted system. in Operating System - HP-UX

problem changing root passwd on a trusted system.

Mark Harshman_1 — Fri, 28 Oct 2005 09:13:25 GMT

Hi,

i recently converted a HPUX 11i system to trusted mode. I tried to change my root passwd today, and it fails. I tried it thru sam and get the following error. "invalid command syntax was used to invoke the command /usr/lbin/modprpw, failed to update protected password database for user "". I am able to change other ID's, just not root's. Any brilliant ideas??

thanks in advance.

Re: problem changing root passwd on a trusted system.

Andy Torres — Fri, 28 Oct 2005 09:19:08 GMT

Not sure, so maybe the others here can confirm this, but I think modprpw on root has to be accomplished from the console.

Anyone?

Re: problem changing root passwd on a trusted system.

Mark Harshman_1 — Fri, 28 Oct 2005 09:37:18 GMT

i dont have this problem on similar servers i have, and they also run 11i, trusted mode. thanks

Re: problem changing root passwd on a trusted system.

Andy Torres — Fri, 28 Oct 2005 09:47:00 GMT

Were you trying to generate a random password for root when you tried to reset it? I don't think it can be done for user root. Maybe that's your error message reason?

Re: problem changing root passwd on a trusted system.

Gavin Clarke — Fri, 28 Oct 2005 09:47:57 GMT

I just use passwd

I take it you've read about the 8 character only trusted system er... feature.

What I mean is that untrusted systems only use 8 chars but will let you enter more, whereas trusted will pay attention to all characters and fail if it thinks the password is only 8 chars.

Re: problem changing root passwd on a trusted system.

Mark Harshman_1 — Fri, 28 Oct 2005 09:50:47 GMT

yes im aware of that. I was just using the "passwd" command to change it, but it fails. I then tried to issue a random passwd thru sam, and that is when the error message is generated. I have 15 other servers similarly configured that i have had no trouble changing the passwd on.

Re: problem changing root passwd on a trusted system.

Andy Torres — Fri, 28 Oct 2005 09:56:20 GMT

You recently converted this system to trusted. I believe converting to a trusted system will expires all accounts. You may need to reactivate root login before you can reset the password. "modprpw -k root" at the console, I think.

Re: problem changing root passwd on a trusted system.

Andy Torres — Fri, 28 Oct 2005 09:59:53 GMT

Here's a helpful thread on this subject:

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=150549&admit=-682735245+1130511420897+28353475

Re: problem changing root passwd on a trusted system.

Andy Torres — Fri, 28 Oct 2005 10:03:07 GMT

I keep finding good info on this. I'll just keep plugging it in this thread, maybe it'll be helpful to others down the road...

Patch PHCO_31314 addressed this error when resetting a deactivated user's login in SAM. After this patch, SAM will activate the login, then reset the password.

Re: problem changing root passwd on a trusted system.

Andy Torres — Fri, 28 Oct 2005 10:05:31 GMT

Yet another helpful thread, referencing a problem when the root password was longer than 8 characters before conversion to trusted:

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=519910

Re: problem changing root passwd on a trusted system.

Sundar_7 — Fri, 28 Oct 2005 10:22:57 GMT

Mark,

Try changing the password using /sbin/passwd. /sbin/passwd bypasses all the checks.

- Sundar.

Re: problem changing root passwd on a trusted system.

Mark Harshman_1 — Fri, 28 Oct 2005 10:52:36 GMT

Thanks Andy, that thread helped me get it changed. My password before conversion was 9 char, and that appears to create an issue. Many thanks to all for the suggestions.

Re: problem changing root passwd on a trusted system.

Andy Torres — Fri, 28 Oct 2005 10:55:43 GMT

Glad to help, Mark. I recently started working for a company that has a slew of security features on their systems, many of which are new to me. The forums have been the single best teaching method so far, so we both win.

Happy trails!