topic Re: Lock User in Operating System - HP-UX

Lock User

P Vel — Wed, 02 Feb 2011 03:48:28 GMT

Hi Gurus,

I am a novice in HP-UX. Please help me.
How to find the user status? Whether it is locked or not? How to lock the user and unlock the user? Any differences are there in command among the OS releases?

Thanks in advance...

Re: Lock User

sarfaraj ahmad — Wed, 02 Feb 2011 05:51:25 GMT

Hi,

you can lock the user by below command in untrusted system.

Use the following command to lock the user account:
# passwd -l

lock/unlock account user id on HP-UX trusted system

/usr/lbin/getprpw useraccount

unlock / enable / reactivate:
/usr/lbin/modprpw -k useraccount

lock/expire password:
/usr/lbin/modprpw -e useraccount

Do not use a capital E, as it will expire the password on all user accounts.

Also you can find the user status through SAM. when you select the user and go in action, will get the option unlock if user is currently locked and option lock if user is active in present.

Rgds,

Re: Lock User

P Vel — Wed, 02 Feb 2011 06:11:31 GMT

What is Truster/Untrusted system?

How to convert from trusted to untrusted, and untrusted to trusted system?

Thanks...

Re: Lock User

Manix — Wed, 02 Feb 2011 06:24:16 GMT

Untrusting:

# /usr/lbin/tsconvert -r

Trusting

# /usr/lbin/tsconvert

Unexpiring all passwords (all passwords are automatically expired when trusting a system):

# /usr/lbin/modprpw -V

Re: Lock User

Manix — Wed, 02 Feb 2011 06:25:28 GMT

Read what are trusted systems.

Thanks
Manix

Re: Lock User

Ismail Azad — Wed, 02 Feb 2011 19:00:29 GMT

Hi vel,

> How to find the user status?

By user status , I am guessing account status. Execute # passwd -sa. This will give you if the account is locked or passworded. It will give you this output.... PS for passworded and LK for locked. You can also see per user if account is locked by giving the user as the argument. If your sytem is UNTRUSTED {by that i mean is not a trusted system} a * would also say that the account is locked. However on TS you would see all the accounts having a * in the encrypted password field { the second field when you execute cat /etc/passwd }. The other commands mentioned by the other forumers modprpw/getprpw are specific to trusted systems.

Regards
Ismail Azad

Re: Lock User

Duncan Edmonstone — Wed, 02 Feb 2011 20:04:21 GMT

If your system isn't trusted already, then you certainly shouldn't be making it trusted now... the "trusted system" components of HP-UX will be deprecated in a future release, so I wouldn't entertain making any system that is currently not trusted into a trusted one.

Note pretty much all the functionality that was available only in trusted mode on older versions of HP-UX is available in standard mode on HP-UX11iv3.

HTH

Duncan

Re: Lock User

madhuchakkaravarthy — Thu, 03 Feb 2011 03:36:09 GMT

in trusted system u can also lock user by

/usr/lbin/modprpw -m alock=yes -k username

to unlock

/usr/lbin/modprpw -m alock=no -k username

regards

MC

Re: Lock User

DeafFrog — Thu, 03 Feb 2011 04:48:52 GMT

Hi ,

@Madhu :

# /usr/lbin/modprpw -m alock=yes -k apple
modprpw: invalid value - usrpick=yes
---think it should be like this :
# /usr/lbin/modprpw -l -m alock=YES apple ##lock the account of apple
# /usr/lbin/getprpw -r -m lockout apple ##check if lock,
0000010 ##a "1" indicates it's locked(at different position ,
it means lockout due to differnt reason)
#/usr/lbin/modprpw -l -m alock=NO apple ##to unlock
(or simply /usr/lbin/modprpw -k apple)

Regards,

Re: Lock User

Hakki Aydin Ucar — Thu, 03 Feb 2011 08:32:42 GMT

To see a specific user is Locked or not;
# passwd -s user_name

To see all user status;
# passwd -sa

Re: Lock User

madhuchakkaravarthy — Thu, 03 Feb 2011 09:09:30 GMT

hi

in trusted system u can also lock user by

/usr/lbin/modprpw -m alock=yes -k username
------------------------------>
mistyped the option:::::

@deaffrog try this

/usr/lbin/modprpw -k -m alock=YES username

regards

MC