topic Re: unlock user account in Operating System - HP-UX

unlock user account

Din_1 — Wed, 13 Feb 2008 08:25:12 GMT

Dear All,

How to unlock a user account in a non trusted system through command line ( Not through SAM ). Please help me...

Thanks in advance
Din

Re: unlock user account

yulianto piyut — Wed, 13 Feb 2008 08:47:08 GMT

hi din,

you can use command "passwd -l user_id" to lock user account. for example:
#passwd -l yulianto
#logins -ox |grep yuli
yulianto:1004:sysadmin:14:Yulianto ITDC-sysadmin:/home/yulianto:/usr/bin/ksh:LK:000000:-1:-1:-1
#grep yuli /etc/passwd
yulianto:*:1004:14:Yulianto ITDC-sysadmin:/home/yulianto:/usr/bin/ksh

the field of encrypted password will changed to *

-yut-

Re: unlock user account

Dennis Handly — Wed, 13 Feb 2008 08:48:01 GMT

Well there is vipw(1). Or passwd(1):
passwd -r files [-d|-l] [-f] [-n min] [-w warn] [-x max] name

Re: unlock user account

Din_1 — Wed, 13 Feb 2008 09:39:04 GMT

Dear all,

Thank you for spending your valuable time to this. I know how to lock the account in non trusted system. But now my question is how to unlcok the account?

Regards,
Din

Re: unlock user account

Dennis Handly — Wed, 13 Feb 2008 10:42:36 GMT

>But now my question is how to unlock the account?

As I said, you either use vipw(1) or passwd(1).
In particular "passwd -d" will unlock it.

Re: unlock user account

Robert-Jan Goossens_1 — Wed, 13 Feb 2008 11:42:53 GMT

Din,

# usermod -x administrative_lock_applied=0 username
# passwd username

Regards,
Robert-Jan

Re: unlock user account

yulianto piyut — Thu, 14 Feb 2008 05:30:20 GMT

to unlock:
1. passwd -d username or
2. reset the passwoed user

-yut-

Re: unlock user account

yulianto piyut — Thu, 14 Feb 2008 05:30:45 GMT

to unlock:
1. passwd -d username or
2. reset the passwoed user:
# passwd username

-yut-

Re: unlock user account

Din_1 — Thu, 14 Feb 2008 05:39:45 GMT

can't we unlock a user account without resetting the old password or changing the account to null password? My doubt is, the user should be able to login with their own old password.

Re: unlock user account

Dennis Handly — Thu, 14 Feb 2008 05:48:18 GMT

>can't we unlock a user account without resetting the old password or changing the account to null password?

Unfortunately not with passwd(1). With vipw(1) you just add a "*" to the start to lock, and remove it to unlock.

>the user should be able to login with their own old password.

Unfortunately it doesn't look like it.

Re: unlock user account

whiteknight — Thu, 14 Feb 2008 06:01:00 GMT

Din,

You can't unlocked user account, with retaining the old password.

#passwd -d

Allow user to login without a password by deleting it.In untrusted mode this unlocks/activates the user account if found locked/deactivated.

WK

Re: unlock user account

Din_1 — Thu, 14 Feb 2008 06:46:36 GMT

when i put a * in password field of username in /etc/passwd, it shows login incorrect, when i leave it as empty it's getting logged in without any authentication. So after removing the * in password field, is the user adviced to chane their password with the use of " passwd " command? ( user can no longer user their old password )

Re: unlock user account

Dennis Handly — Thu, 14 Feb 2008 07:48:29 GMT

>when i put a * in password field of username in /etc/passwd, it shows login incorrect

Insert a "*" before the old password.

>So after removing the * in password field,

You just remove the "*" before the old.

Re: unlock user account

Din_1 — Thu, 14 Feb 2008 08:06:55 GMT

Assume a windows machine, the account is getting locked when user enters the wrong password upto 3 times. So the Administrator is unlocking the account, and the user now can use his own old password. Is there any way to get this kind of option in HP UX?

Re: unlock user account

Dennis Handly — Thu, 14 Feb 2008 08:16:22 GMT

>and the user now can use his own old password. Is there any way to get this kind of option in HP-UX?

It depends on how it is locked. If the whole password (non-trusted) is replaced by a "*", you can't.

Re: unlock user account

Din_1 — Thu, 14 Feb 2008 08:23:39 GMT

This is what i was expecting for. Mine is a non trusted system. So i dont have any other option than resetting the password or making it as null. So in non trusted systems the only way we can use is, either reset the password or make the password null. Am i right Mr. Handy?

Re: unlock user account

Dennis Handly — Thu, 14 Feb 2008 08:39:41 GMT

>So in non trusted systems the only way we can use is, either reset the password or make the password null.

It depends on how it is "locked". passwd -l does a destructive lock.

Also from passwd(1): After the lifetime passes, the account is locked ... Once unlocked, the user is forced to change the password before using the account.

So it appears they really want you to change the password after it is locked.

Re: unlock user account

Din_1 — Thu, 14 Feb 2008 09:12:08 GMT

What kind effect will it have on wrong attempts of password?

Re: unlock user account

Dennis Handly — Thu, 14 Feb 2008 09:49:37 GMT

>What kind effect will it have on wrong attempts of password?

What "it" are you asking about?

Re: unlock user account

Din_1 — Thu, 14 Feb 2008 10:06:10 GMT

If password getting locked with the wrong attemps, will entry in /etc/passwd be like this

din::34:14::/home/din:/usr/bin/sh
or
din:*:34:14::/home/din:/usr/bin/sh
or
din:*74_s376!&%:34:14::/home/din:/usr/bin/sh

Thanks
Din