topic Re: system trusted in Operating System - HP-UX

system trusted

Clodoaldo João Rodrigue — Tue, 20 Aug 2002 18:17:51 GMT

Hello All

I have one problem with my Server (Hp-UX 10:10). When I try add one user on system, it is succefull, but when I try change the passwor his, the system display the follow message:

#passwd uroclodo

#Password cannot be changed. Reason: Cannot access protected password entry.

I have a trusted system actived in our system Operation.
Do you have some idea about it problem ???
thanks for all.

Re: system trusted

Roger Baptiste — Tue, 20 Aug 2002 18:25:48 GMT

hi,

Is the password command working for changing other user passwords?? i.e , is the problem for every user on the system or only for this user. Do a #ll `which passwd` to make sure the passwd command permissions are ok. Try the change as root user id.

tcb is in /tcb and its permission is:
dr-xr-x--x 3 root root 96 Jun 6 2001 /tcb

The password file for user(s) will be under /tcb/files/auth//userid

-raj

Re: system trusted

Uday_S_Ankolekar — Tue, 20 Aug 2002 18:38:19 GMT

Try untrust the system and change the password and then convert back as trusted. This problem could be due to password length.

to unconvert the system
/usr/lbin/tsconvert -r

change the passwword

then convert back as trusted by

/usr/lbin/tsconvert -c

Goodluck
-USA..

Re: system trusted

Darren Prior — Wed, 21 Aug 2002 11:03:26 GMT

Hi,

What method did you use to add this user? If you just edited the /etc/passwd it could cause this error as that would not add the relevant tcb entry. SAM and useradd are better ways to add users for trusted systems.

I'd suggest that you run authck -pv to check out your tcb files and /etc/passwd. Feel free to post the output here for people to help you analyze it. This should then help you solve your problem, probably by carefully removing the user and re-adding correctly.

In addition I recommend that you check that you have the latest patches related to trusted systems, login and passwd. Later versions of HP-UX have these patches incorporated, but 10.10 requires patching. PLEASE read the patch texts - some of these patches have very important fixes.

regards,

Darren.

Re: system trusted

James Beamish-White — Wed, 21 Aug 2002 11:55:59 GMT

Run the pwck and/or pwconv commands to clean up your protected password entry.

Cheers!
James

Re: system trusted

Geetha Alagappan — Wed, 21 Aug 2002 16:06:52 GMT

Try a
pwconv
This will update the secure password facility and you should not have problems.

Geetha.

Re: system trusted

Wodisch_1 — Wed, 21 Aug 2002 19:19:51 GMT

Hi,

HOW did you actually *add* that user? SAM or "useradd" or did you do something *manually*?
Then maybe you don't have the file describing that user below "/tcb/files/auth/FIRST_LETTER_OF_USERNAMER/USERNAME"...
"pwvonc" should help, but if it doesn't work, just delete the line from "/etc/passwd" and try adding it again, but this time using "useradd" (with options).

Just my $0.02,
Wodisch

Re: system trusted

Michael Tully — Wed, 21 Aug 2002 21:27:41 GMT

I've just tested this on my test system, by just editing the /etc/passwd file, and this exact message will be produced. This was on a HPUX 11.0 system.

To add a user properly, either use the 'useradd' command in conjunction with the man page, or use 'sam'