topic Re: Root behaviour changed after using modprpw - k root in Operating System - HP-UX

Root behaviour changed after using modprpw - k root

Asim Azhar — Wed, 06 Feb 2008 07:07:38 GMT

Basically my root account was locked and i started my hpux server in single user mode and execute this command modprpw - k root and reboot system and access it with old password,but its behaviour is changed now it is not disabling root after 3 wrong attempts and whenever i create new user it does'nt ask to enter password for that user and it assign default password to this user.

Re: Root behaviour changed after using modprpw - k root

Steven E. Protter — Wed, 06 Feb 2008 10:33:12 GMT

Shalom,

You could have a script disabling the root password.

The command you used should have worked.

When I am forced to take a system to single user mode I run a simple passwd command.

Note also that a console root login is supposed to reset a locked root password.

SEP

Re: Root behaviour changed after using modprpw - k root

Brian A. Scurlock_1 — Wed, 06 Feb 2008 22:10:25 GMT

run /usr/lbin/getprpw root
the last field will be the lockout code/reason with an unlocked account = to all zeros e.g.:

lockout=0000000

If any position 1-7 is = to 1, the account will was locked for the following reason:
(man getprpw)
Position 1
past password lifetime
Position 2
past last login time (inactive account)
Position 3
past absolute account lifetime
Position 4
exceeded unsuccessful login attempts
Position 5
password required and a null password
Position 6
admin lock
Position 7
password is a *

This will help you isolate the reason/cause of the locked account, a login to the console should override the lock.
-Brian

Re: Root behaviour changed after using modprpw - k root

Robert Fritz — Thu, 07 Feb 2008 00:21:36 GMT

If you don't see "/tcb" then you aren't in trusted mode anymore.... that could change the behavior.... which in standard/shadow is driven with /etc/default/security AUTH_MAXTRIES (and if SMSE is installed... you can set per-user values with userdbset)

If you still are in trusted ... use getprdef and get /usr/lbin/getprpw to check the settings for the variable umaxlntr