topic Re: Password Related in Operating System - HP-UX

Password Related

Indrajit Bhagat — Wed, 10 Jan 2007 00:40:02 GMT

Hi,

How to unlock an user account using command line in untrusted system ?

Re: Password Related

Asif Sharif — Wed, 10 Jan 2007 01:25:00 GMT

Hi Bhagat,

See the below thread, i think it will solve your problem.

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=1044359&admit=-682735245+1168410047652+28353475

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=857393

Regards,
Asif Sharif

Re: Password Related

Jaime Bolanos Rojas. — Wed, 10 Jan 2007 07:37:51 GMT

Indrajit,

Easiest way, go to sam and go to users and then unlock the account.

Regards,

Jaime.

Re: Password Related

Raj D. — Wed, 10 Jan 2007 09:29:05 GMT

Indrajit,

The easiest way to release a password lock in non-trusted system , is to use SAM, SAM ==> Accounts ==> Users & Groups , choose the User and go to action field and choos "Re-activate user" ,

You can also release by replacing the * in the password file of that user with null value, but that will be insecure.

Cheers,
Raj.

Re: Password Related

Coolmar — Wed, 10 Jan 2007 09:40:11 GMT

Please see A. Clay Stephenson's response in the following thread:

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=1044359

"for an untrusted system, locking via the passwd command is done by replacing the user's passwd hash with '*' although any non-null, non 13 characterslong string would work as well because that would be an impossible to match hash. By convention, the '*' character is used to lock the account; it is then unlocked by assigning a new password (or by entering a null value in the passwd hash field of that user's passwd file entry -- but that would be terribly insecure until a real password were entered)."

Re: Password Related

Yarek — Wed, 10 Jan 2007 09:54:36 GMT

hello,

Please check

/usr/lbin/modprpw -k

grds

Re: Password Related

rmueller58 — Wed, 10 Jan 2007 09:58:16 GMT

# /usr/lbin/modprpw -k username

If you want to see WHY the account is locked:

# /usr/lbin/getprpw -m lockout username

Re: Password Related

Sp4admin — Wed, 10 Jan 2007 10:40:03 GMT

Hello,

To check if the account is locked you use the getprpw command.

#getprpw -r -m lockout userid ***status
#modprpw -k userid *****unlock account
#modprpw -x userid *****change passwd

sp,

Re: Password Related

Patrick Wallek — Wed, 10 Jan 2007 11:03:54 GMT

If the system is NOT trusted (untrusted) then the modprpw and getprpw commands will not work. Those commands work on a trusted system only.

Re: Password Related

Raj D. — Wed, 10 Jan 2007 15:54:41 GMT

Indrajit suggest you to review your threads once posted.