topic Re: Changing rootB4s password in Operating System - HP-UX

Changing rootB4s password

Valkiria Santos — Sun, 07 Jul 2002 12:57:38 GMT

Hello all,

I converted my system on trusted. I lost root??s password and trusted deactive my account, when I tried execute manually /usr/lbin/modprpw -k root, nothing happend. Then I tried reset root??s passwd and following message its displayed for me.

An invalid command syntax was used to invoke the command
"/usr/lbin/modprpw". Failed to update protected password database
for user "root".

Thanks for helps,
Valkiria

Re: Changing rootB4s password

RAC_1 — Sun, 07 Jul 2002 13:54:50 GMT

check with authck for any problem with trusted mode.
also check if getprdef is working. It will list all options set.

Regards,

Re: Changing rootB4s password

Valkiria Santos — Sun, 07 Jul 2002 17:32:53 GMT

All files tcb is ok

Valkiria

Re: Changing rootB4s password

Scott Van Kalken — Sun, 07 Jul 2002 21:00:19 GMT

Boot to single user mode, untrust the system, change the password and retrust the system.

BEWARE though.

If you do this from the command line, using the following commands:

/etc/tsconvert -r (I think)
then /etc/tsconvert -c

this will expire all other passwords on the system.

I found out the hard way.

Re: Changing rootB4s password

Printaporn_1 — Mon, 08 Jul 2002 01:10:43 GMT

Hi Valkiria,
I guess that because of before change to trusted system , root password was longer than 8 characters.
OK,
Before try Scott's suggestion.
if you have console , login root at the console. if you can ,just make change to root password to < than 8 characters.
If you cannot login root at console , you may need to proceed with Scott's suggestion.

Re: Changing rootB4s password

Jerry Anderson_1 — Mon, 08 Jul 2002 17:04:30 GMT

The root password is stored in a file called /tcb/files/auth/r/root. The password should be in the same encrypted format as you would see in an untrusted system's /etc/passwd file.

* Boot to single user mode
* Issue: mount -a
* Make a backup copy of /tcb/files/auth/r/root
* Edit /tcb/files/auth/r/root
* Remove the encrypted password from the u_pwd= entry. The encrypted password is everything between the = and the final :\ on the line that begins :u_pwd=
* Save and close
* Reset root's passwd: passwd root

As a variation on that you could also replace root's password with the encrypted password from another user where you know the password.

Re: Changing rootB4s password

Martin Johnson — Mon, 08 Jul 2002 17:15:46 GMT

Jerry,

You are assuming Valkiria has some form of root access to modify /tcb/files/auth/r/root file.

I usually set up a pseudo root account (different username and password, but UID=0) to use when the root account becomes disabled for whatever reason. This has saved me many hours of frustration, especially with a production system that can't be brought down during the day.

HTH
Marty

Re: Changing rootB4s password

Donald Kok — Mon, 15 Jul 2002 09:56:19 GMT

I had the same problem the other day, this is what worked for me:

- login on the (web)console. According to the "trusted"manual this is always possible.
- vi /tcb/files/auth/r/root
- go to the line with u_pwd
- remove anything between = and :- exit
- login from another terminal
- you have to change your passwd immediately.

Hope this helps
Donald