topic Re: account and expired passwd in Operating System - HP-UX

account and expired passwd

navin — Tue, 07 Jul 2009 14:31:51 GMT

Hi ,

I have an account which has the info as below.
So looks like the passwd expired.But user does not know the passwd .with out resetting the passwd , is there a way that i can make this account current.But there are lot of processes running in the system which is owned by this account - so if do any changes through sam - i get the message as account is active - so log off and do the change.
pls advice
# logins -xl yuana
yuana 200 users 20 YUANA,,,
/yuana
/usr/bin/ksh
PS 040209 0 91 -1

Re: account and expired passwd

Steven E. Protter — Tue, 07 Jul 2009 14:42:30 GMT

Shalom,

An account can be expired as follows:

* Converting a system to trusted (stretch but it does require a password update)
* running a passwd command changing the number of days to expire.
* Allowing time to pass.

What does the account say on a
passwd -sa
report?

You might be able to make the account current with the passwd command.

http://docs.hp.com/en/B2355-60130/passwd.1.html

passwd -x username

You will have to try it. I'm not up for turning on an HP-UX system today and turning my home office into an oven.

SEP

Re: account and expired passwd

OldSchool — Tue, 07 Jul 2009 14:55:49 GMT

my question would be, "If the user doesn't know the passwd, what good does 'unexpiring' it do you in this case?"

Re: account and expired passwd

navin — Tue, 07 Jul 2009 14:57:02 GMT

thanks for the reply.
Yuana PS 07/02/09 0 35

what does this mean?

Thanks

Re: account and expired passwd

Ganesan R — Tue, 07 Jul 2009 15:03:10 GMT

Hi Navin,

Password expire doesn't make the account inactive. I am not sure what do you want to do with password expired account. You can always go to SAM and reset the password or modify the password without affecting running process owned by that account.

You can also use the commands to reactive the account.

# passwd user # Reactivate a user account
# passwd -d user1 # set a null password. In untrusted mode this unlocks/activates the user account if found locked/deactivated.

Re: account and expired passwd

Tingli — Tue, 07 Jul 2009 15:10:09 GMT

Yuana PS 07/02/09 0 35
name status mm/dd/yy min max warn

The date shows the time of the last password reset.

PS: This account has a password.

Re: account and expired passwd

Nido — Tue, 07 Jul 2009 15:15:16 GMT

Hello Navin,

>>>>Yuana PS 07/02/09 0 35
>>>>what does this mean?

The format of the display is:

name status mm/dd/yy min max warn

Status can be anything:
PS This account has a password.
NL This account is a no login account.
LK This account is locked account.
NP This account has no password and is therefore open without authentication.

Check man page for `passwd` for details.

Cheers!!

Re: account and expired passwd

navin — Tue, 07 Jul 2009 15:16:18 GMT

Thanks for the reply.but using sam could not change the passwd attribute if the user id is logged in or running processes in that system.
there are some remote programs that use remsh to this system using this id and giving the error message that the [asswd is expired

Re: account and expired passwd

Tingli — Tue, 07 Jul 2009 15:25:42 GMT

You can try to vi /etc/passwd or /etc/shadow (some risk!!) to modify it. Not highly recommended but if the sitaution is desperate...

Re: account and expired passwd

navin — Tue, 07 Jul 2009 15:28:01 GMT

I still dont understand clearly what does the 0 35 mean

yuana PS 07/02/09 0 35

in the above output (passwd -sa)

pls advice

thanks to all

Re: account and expired passwd

Tingli — Tue, 07 Jul 2009 15:30:34 GMT

0 means the minimum days before the user can reset the password after the password was reset. And 35 is the password life in days.

Re: account and expired passwd

anidil — Tue, 07 Jul 2009 21:03:47 GMT

try passwd -x -1 yuana