topic Re: Root Password Issue in Operating System - HP-UX

Root Password Issue

Samer khu — Sat, 23 Aug 2008 10:51:06 GMT

Hello experts,

I cann't login to system using root pwd
I recieved "Account is disabled-see Account Administrator"

Please help and advice.

Re: Root Password Issue

Deepak Kr — Sat, 23 Aug 2008 12:50:55 GMT

Hi!!

Reset the root password in single user mode

Login through console and go into single user mode

Interact with ISL (Y/N): Y
ISL>hpux -is

###passwd root

IS your system in trusted mode?

Re: Root Password Issue

Rasheed Tamton — Sat, 23 Aug 2008 12:51:55 GMT

Hello Samer,

Try

/usr/lbin/modprpw -k root

Re: Root Password Issue

SKR_1 — Sun, 24 Aug 2008 03:52:22 GMT

If you remember your password, you can login through console IP. Otherwise you can reset root password from single user mode.

Thanks

SKR

Re: Root Password Issue

Jeeshan — Sun, 24 Aug 2008 04:49:27 GMT

if the usr/lbin/modprpw -k root doesn't work you need to go to single user mode to change the account status.

Re: Root Password Issue

Anshumali — Sun, 24 Aug 2008 05:56:49 GMT

Sameer,
Trying at console should work if you know the password which system is expecting, not what you know, but changed at system by someone :)
If this is trusted mode, you might be required to unconvert this to non-trusted in Single user mode using tsconvert -r, be sure you note down the polices and params noted if you do that.
Also, review the passwd creation rules in man passwd to avoid use of special chars like @ etc..

Anshu

Re: Root Password Issue

Samer khu — Sun, 24 Aug 2008 07:05:39 GMT

Hi All,

Thanks for attention,

Could you please provide me how can I login to single mode. sorry for my question but i don't have a good background on UX sistems.

Re: Root Password Issue

Anshumali — Sun, 24 Aug 2008 07:20:48 GMT

Unfortunately, you will have to get the system restart, as you don't have the passwd, this will require the partition reset.
You can login to MP...type cm, select rs--->your partition no and press y
This will restart the partition, now you can stop at BCV by pressing any key, (it asks for that) and type bo pri, (to boot with primary path)
when asked if you want to interact with ISL(Initial System Loader), select Y
You will get ISL prompt
ISL>
Type hpux -is
This will land you to # prompt
#
(After work, its not advisable to type init 3 for switching the run level from Single user mode) Restart the system instead.

Re: Root Password Issue

Anshumali — Sun, 24 Aug 2008 07:24:22 GMT

I mentioned MP, w/o knowing your H/W type... :(
You can get the same with Serial Port if you don't have the MP based model, idea is to do this work from console.You need BCH access and console is required for that, be it MP or external one.

Re: Root Password Issue

Samer khu — Sun, 24 Aug 2008 10:37:25 GMT

Hello ALL ,

I want to connect directy to server through serial cable. My question is what type of serial cable is needed to connect my labtop to consol port (COM) in the server.

Also I have another question:
are there any different between when we are saying the acount is disabled and the account is loocked.

if Yes, could you please clarify this different?

Thanks to ALL.

Re: Root Password Issue

Anshumali — Sun, 24 Aug 2008 10:44:39 GMT

Samer,

A normal Rs232 cable should work if your laptop has the COM Port, for me, i use a Serial to USB converter as i don't have COM port in my laptop.
Account Disabled and blocked are same thing and happen due to the policies set on the system.
Which model you have and is it a trusted system?

Re: Root Password Issue

Deepak Kr — Sun, 24 Aug 2008 11:12:26 GMT

Yes RS-232 cable will work here. Connect your lapi with cable and start hyperterminal to see console messages on your laptop screen.

Provide the model of your server...?
is it a partition server ?

I believe you are running a trusted system..

Re: Root Password Issue

Samer khu — Sun, 24 Aug 2008 11:19:28 GMT

Hello Anshumali,

Thanks alot for your information.

I have a serial port in my laptop and Also I can see the serial port as console in My system (HP workstation c8000).

I am going to do directly connection and I will share the result with all.

Thanks Again.

Samer khurshaid

Re: Root Password Issue

Samer khu — Sun, 24 Aug 2008 11:21:18 GMT

Thanks alot Kumar,,

Re: Root Password Issue

Deepak Kr — Sun, 24 Aug 2008 11:28:33 GMT

Sure!!!

Cheers

Re: Root Password Issue

Steven E. Protter — Sun, 24 Aug 2008 11:29:23 GMT

Shalom,

Normally a console login re-enables the root user.

It would be a really good idea when this is said and done to do a lastb command and try and find out why the root account is disabled.

It could be a script, it could however be a hack attempt.

SEP

Re: Root Password Issue

Samer khu — Sun, 24 Aug 2008 11:39:11 GMT

Thanks alot steven for your critical answer,

Could you please provide me the command or procedure that help me to khnow "how or why the root account is disabled???"

Re: Root Password Issue

Anshumali — Sun, 24 Aug 2008 12:02:43 GMT

lastb -R|grep -i root|more
--->look for IPs for bad attempts
If this is trusted, check /usr/lbin/getprpw root and check for last unsuccessful login.

Re: Root Password Issue

Steven E. Protter — Sun, 24 Aug 2008 12:40:33 GMT

Shalom,

lastb -r will provide you the date and time and remote ip address of bad (b in lastb) login attempts.

Here is some similar sample out put from a nearly Linux machine.

sales ssh:notty 208.116.44.138 Wed Jul 9 07:17 - 07:17 (00:00)
sales ssh:notty 208.116.44.138 Wed Jul 9 07:17 - 07:17 (00:00)
staff ssh:notty 208.116.44.138 Wed Jul 9 07:17 - 07:17 (00:00)
staff ssh:notty 208.116.44.138 Wed Jul 9 07:17 - 07:17 (00:00)
root ssh:notty bzq-79-182-99-45 Wed Jul 9 00:29 - 00:29 (00:00)
root ssh:notty bzq-79-182-99-45 Wed Jul 9 00:29 - 00:29 (00:00)
root ssh:notty bzq-79-182-99-45 Wed Jul 9 00:29 - 00:29 (00:00)

SEP

Re: Root Password Issue

Samer khu — Sun, 24 Aug 2008 13:37:39 GMT

Thanks Anshumail/steven,

Dear All,
I have done the following procedure to create direct connection between my laptop and server:

1-I bought a new female-female serial cable.
2-the server has been turned off.
3-I connect one end of this cable to serial port in my labtop and the another end to serial port on rear panel of the server.(C8000)

4- open hyperterminal (version 5.1)
5- set the following setting:
bit rate =9600
bit =8
parity = none
flow = 1
flow control= XOF/XON

6- server has been turned on.

After this,I didn't see any thing on hyperterminal windows.
could someone please advice on this.