topic Re: A strange problem about root password in Operating System - HP-UX

A strange problem about root password

Rambo_1 — Thu, 11 Jan 2007 04:51:01 GMT

When I used root account and root password to login the HP-UX(11.11) ,The OS rejected and telled me the password had been disable .
Anyone can tell me how to reslove this problem ?

Thanks for your help

Rambo

Re: A strange problem about root password

Ivan Krastev — Thu, 11 Jan 2007 04:53:38 GMT

See this previouss thread - http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=980526

regards,
ivan

Re: A strange problem about root password

Fabio Ettore — Thu, 11 Jan 2007 04:54:31 GMT

Hi,

I would guess you have a trusted system. The password is rejected with that message when you type wrongly the password more than three times. In order to unlock the root user you need to access to console (if you can) otherwise go in single-user mode and run the following command:

/usr/lbin/modprpw -k root

HTH.

Best regards,
Fabio

Re: A strange problem about root password

Rambo_1 — Thu, 11 Jan 2007 05:08:15 GMT

Thanks for reply ,I will have a try to validate your suggestions.

rambo

Re: A strange problem about root password

Rambo_1 — Tue, 30 Jan 2007 02:42:05 GMT

I used "/usr/lbin/modprpw -k root" to unlock successfully ,but after a few days , I met the problem again. I always open a windown now , so that I can use "/usr/lbin/modprpw -k root" to unlock the root account when the "The root account has been deactivated" messages appear.
Any suggestions for resolve the problem forever?
Thanks for your help .

Rambo

Re: A strange problem about root password

张粤源 — Tue, 30 Jan 2007 03:14:43 GMT

you can try follow command

1.login system single mode.

remove the protect of root
2.#/usr/sbin/tsconvert -r root
change root password
3.#passwd root

Re: A strange problem about root password

Fabian Briseño — Tue, 30 Jan 2007 03:16:47 GMT

Hello.
Use SAM and there should be an option arround there to prevent root password being disabled

see account aging or login retries before the account is disabled.

I think its in SAM->Auditing and security

Re: A strange problem about root password

Peter Godron — Tue, 30 Jan 2007 11:30:07 GMT

Hi,
you still have not identified the cause of the problem : Why is your root account getting disabled ?

If it due to too many attempts with an invalid password, how is trying to use the root account?
Use the SAM auditing or a quick "lastb root".

Disabling the security setting of three failed attempt is not going to resolve the underlying problem, just hide it.

Re: A strange problem about root password

Onur Karakan — Wed, 31 Jan 2007 02:03:19 GMT

Hello,

I had the same problem and i solved this problem by the following method.

When you get this error for root account,

Account is disabled. see Account Administrator

â ¢ Go to console. Ctrl+B to goto GSP.
â ¢ Type rs to reboot system. And â Yâ to confirmation.
â ¢ Break on startup
â ¢ Bo pri
â ¢ hpux â is
â ¢ auto_parms
â ¢ sam
â ¢ reactivate root account and reset password.
â ¢ Vi /tcb/files/auth/r/root file.
â ¢ Change the following parameter as it is.
:u_pwd=:\
â ¢ Sam
â ¢ modify password with p.

Best Regards,

Onur

Re: A strange problem about root password

Rambo_1 — Wed, 31 Jan 2007 05:03:58 GMT

so thanks for everyone reply .I found the system is a "trusted system" , and I found the "unsuccessfully login tried allow" is "Default 3" in SAM . I modified the "Default" to "Customize" and choice the number was "0" ,and the problem seem was resolved .

Re: A strange problem about root password

Darren Prior — Wed, 31 Jan 2007 06:01:26 GMT

Hi Rambo,

You may have fixed the symptom, but it is likely you still have a problem. If someone is trying to break into your root account you have now given them an infinite number of login attempts in which to guess the password.

I would suggest looking at sulog and lastb output to see if there's a pattern to the invalid login attempts.

regards,

Darren.

Re: A strange problem about root password

Bill Hassell — Wed, 31 Jan 2007 09:15:16 GMT

I would strongly recommend Darren's advice: someone is trying to break into your system. Use this command:

lastb -R root

Every entry is a failed attempt by the listed IP address or hostname. You cannot ignore these attempts until you know who and why the attempts are occurring.

Setting the maximum root login attempts to zero is like solving a problem with someone using a hammer to break the lock on a door, by simply ignoring the damage to the lock. Someday, the lock may be gone...and possibly all your data.

Re: A strange problem about root password

Rambo_1 — Wed, 31 Jan 2007 21:31:09 GMT

Thanks for the suggestions .

B.R

Rambo