topic Re: Root user in Operating System - HP-UX

Root user

Allan Tagliaferro — Thu, 13 Dec 2001 02:32:51 GMT

Hi all,

Does any one know the procedure of changing the Root user password as this is soon going to be administrated by me I would like to know if there is a set procedure to follow.

Help me impress those I work with please...Thanks.

Re: Root user

Scott Van Kalken — Thu, 13 Dec 2001 02:36:27 GMT

So long as you're logged in as the root user you can change it.

You need to know the old password as well.

passwd root
enter old password
enter new password twice.

That's it.

If you do not know the root password currently, boot to single user mode and change it. In single user mode you're automagically logged in as root.

If this is a trusted system, boot to single user mode. Run /etc/tsconvert -r (revert to normal system) change password run /etc/tsconvert to revert to a trusted system.

If there is a password required to boot to single user mode, find that out first.

Scott.

Re: Root user

Michael Tully — Thu, 13 Dec 2001 02:39:43 GMT

Hi,

To change the passwd for root (or any user)
you use the 'passwd' command.

# /sbin/passwd root

You must be 'root' already to change it!
You can change anyone's password with using
the passwd command as long as you are root.

Have a look at the man page for 'passwd' for
additional options.

# man passwd

HTH
-Michael

Re: Root user

Rob Galloway_1 — Thu, 13 Dec 2001 02:40:30 GMT

Log in as root.
Start SAM
Select accounts for users & groups
select users
tab into bottom window
select root
tab to actions
select modify
tab to modify password hit return
follow prompts to change password

Re: Root user

Helen French — Thu, 13 Dec 2001 02:45:54 GMT

hey,

Login as root. then,

# passwd

type the new password !

See man pages of passwd command.

shiju

Re: Root user

Darrell Allen — Thu, 13 Dec 2001 02:58:36 GMT

Hi Allan,

If you are referring to policies for choosing and changing the root password, that's entirely up to you. I think it is wise to:

- change root password on a regular basis - no more than a couple of months between changes - maybe more often
- limit knowledge of root's password to only those who really need to know
- combine alpha, numeric, and special characters
- 6 - 8 characters (preferrably 8)
- be sure you are logged in on more than 1 terminal session before changing the password and test logging in on another session as root before you log out
- avoid schemes (patterns) that can be figured out (ie using the name of the month in a foreign language or from an alternative calendar such as the Mayan)
- if you have a large shop it may be helpful to keep a secure record of past root passwords in case a server is missed a couple of times
- don't make it too hard to remember - perhaps use an acronym (with some numbers and punctuation)
- choose something that is somewhat different for each server just in case it is cracked on one server the others aren't immediately vunerable
- if you think the root password has possibly been compromised, change it

Darrell

Re: Root user

Michael Tully — Thu, 13 Dec 2001 03:14:19 GMT

Hi,

Another item(s) that you could consider is
this.

Passwords on systems to be changed once
a month.
Make sure that a minimum number of people
have access to the password. Preferable
to have it locked away in secure location.
Don't use the root account or passwd at all,
use 'sudo' as an alternative.
'sudo' is quite easy to configure, it's free
it's already compiled and can be downloaded
from the HP porting centre.

http://hpux.connect.org.uk/hppd/hpux/Sysadmin/sudo-1.6.2b1/

HTH
-Michael

Re: Root user

Uday_S_Ankolekar — Thu, 13 Dec 2001 04:14:57 GMT

Hi,

If you already know the root password then it's piece of cake.. ! type passwd on # prompt and follow the instruction
If you don't know the password then you need to bring down the system in single user mode and have to change the password.
-USA..

Re: Root user

Marc Dijkstra — Thu, 13 Dec 2001 05:25:13 GMT

Allan

As you are going to be administering the machine(s) may I suggest the following informative SYSADMIN manual from HP....

http://www.docs.hp.com/hpux/onlinedocs/B2355-90672/B2355-90672.html

MND