topic Re: HPUX 11 & Trusted Mode in Operating System - HP-UX

HPUX 11 & Trusted Mode

kirk humphries — Wed, 05 Jun 2002 08:04:35 GMT

Hi All,

Wondered if you could assist me. We installed HP-UX 11.0 on a HP5000 workstation and failed to change the root password prior to convertion to a trusted system.

Following this it is not possible to change the root password either from SAM or by booting into single user mode. I am still able to log into the workstation.

Can anyone please provide information on the best way to resolve this issue i.e. be able to change the root password.

Thanks

Kirk

Re: HPUX 11 & Trusted Mode

Peter Kloetgen — Wed, 05 Jun 2002 08:11:59 GMT

Hi Kirk,

did you boot into a "real" singel user mode? ( at ISL> hpux -i -s ) Do you have restrictions for changing passwords in a specified time?
Please check this out first.

Allways stay on the bright side of life!

Peter

Re: HPUX 11 & Trusted Mode

Stefan Farrelly — Wed, 05 Jun 2002 08:18:01 GMT

Booting in single user mode by interrupting the boot sequence, interacting with IPL and typeing;

hpux -is (;0)/stand/vmunix

should always allow you in as root without a password, then you can reset it. Or you can boot in lvm maintenance mode (hpux -lm), then activate vg00 and then mount / and reset roots password that way.

Re: HPUX 11 & Trusted Mode

Peter Kloetgen — Wed, 05 Jun 2002 08:27:36 GMT

Kirk, hi again,

if you secured your console, and you also don't have that password, it's not so easy to get into system then:

you have to jumper a SCSI- device to the same target as your boot- disk. This causes a SCSI- conflict, which resets the secured console.

Allways stay on the bright side of life!

Peter

Re: HPUX 11 & Trusted Mode

Steven Sim Kok Leong — Wed, 05 Jun 2002 09:10:03 GMT

Hi,

You must have convert to trusted when your root password was not meeting the trusted password policies (such as minimum number of characters etc).

To fix that, unconvert your system first, change your root password for an okay password (abide by trusted password policies), then convert it to trusted again.

# /etc/tsconvert -r
# passwd
# /etc/tsconvert

Hope this helps. Regards.

Steven Sim Kok Leong

Re: HPUX 11 & Trusted Mode

Duncan Edmonstone — Wed, 05 Jun 2002 09:10:42 GMT

So you can still log in as root, but can't change the password? Was you root password more than 8 chars long? Try typong in just the first 8 chars when prompted by passwd.

HTH

Duncan

Re: HPUX 11 & Trusted Mode

kirk humphries — Wed, 05 Jun 2002 09:33:32 GMT

Hi All,

Thanks for your replies and suggestions.

Steven, that is what happened. I will give that a go and see if it works.

Regards

Kirk

Re: HPUX 11 & Trusted Mode

Keith Buck — Thu, 06 Jun 2002 14:09:39 GMT

PHCO_23224 (PHCO_24839 recommended) also fixes some problems like this. Steven's workaround is correct.

Re: HPUX 11 & Trusted Mode

Martin Johnson — Thu, 06 Jun 2002 17:49:37 GMT

Before you go an untrust the system, why don't you check the file:

/tcb/files/auth/r/root

If it has a line with u_pwd=password, for example:

":u_pwd=FLxujLI:\"

just delete the line. Root will no longer have a password, so you should be able assign a new password.

Marty