topic Re: password change issue in Operating System - HP-UX

password change issue

vinodan — Thu, 18 May 2006 03:30:57 GMT

Dear All ...

When i am trying to change my password below mentioned error is encountered.

"Password cannot be changed. Reason: Cannot access protected password entry."

system is trusted.root user is able to change my password but not me.What could ne the error any idea ?

Thanks in advance
Vinod

Re: password change issue

RAC_1 — Thu, 18 May 2006 03:43:23 GMT

pwck

Does it report error for your account?

grpck
authck

Re: password change issue

Vivekanandan Somanathan — Thu, 18 May 2006 05:06:47 GMT

Hi Vinod,

authck -s will help you.

Let me know the update

- Vivek

Re: password change issue

vinodan — Wed, 24 May 2006 02:50:05 GMT

Dear All ...

No error related to this account .root can change the password but not the user.Even this user accoiunt is deleted and recreated.But still persists.

Regards
Vinod

Re: password change issue

Glen R. Bartlett — Wed, 24 May 2006 05:44:54 GMT

Not sure of any differences for trusted, but i've heard of some clearing the SUID on /usr/bin/passwd so users cannot change their own passwords.

-r-sr-xr-x root bin /usr/bin/passwd

Re: password change issue

vinodan — Wed, 24 May 2006 23:23:53 GMT

Dear All ...
Had it been like that it would have effected all the users.But this user is the only one one who is efected.

Vinod

Re: password change issue

Rajeev Shukla — Wed, 24 May 2006 23:34:16 GMT

Have a look at the permission of the file containing the protected password information i.e. /tcb/files/auth//uid
it should be 664 i.e -rw-rw-r--

Re: password change issue

Glen R. Bartlett — Thu, 25 May 2006 07:31:48 GMT

I hope something here can help:
Administering Your HP-UX Trusted System
http://docs.hp.com/en/B2355-90121/index.html

man 4 prpw

The important fields (as I see it) are u_pickpw (u_pickpw@ would disallow you to change the password), and I'm not sure if u_minchg has to expire before change is allowed.

Like RAC said, a authck might reveal something:

authck -p -v