topic Re: root account disabled in Operating System - HP-UX

root account disabled

Thomas Schler_1 — Tue, 02 Jul 2002 16:44:48 GMT

Hi,

I'm running the dtchooser for choosing the CDE server where to login (on HP-UX 11.00).

Since the root account is disabled on the local machine (it's a trusted system) because of too many unsuccessful logins, I have to login as root on the system console (without running dtchooser or dtlogin) to
re-activate the root account. Unfortunately, the dtchooser provides no action to change to "Command Line Login" as dtlogin does.

How do I enable the root account with a running dtchooser and without switching off the box (there
are processes running that should not be stopped)?

Re: root account disabled

PIYUSH D. PATEL — Tue, 02 Jul 2002 16:52:56 GMT

Hi,

to enable the root account again

#/usr/lbin/modprpw -l -k root
#modprpw -a alock=NO root

Piyush

Re: root account disabled

Martin Johnson — Tue, 02 Jul 2002 17:08:00 GMT

I generally set up a pseudo root account on all my machines for problems such as this. A psuedo root account has its own username and password and has the UID = 0. Therefore, it has root access, that is it can change passwords without having to know the old password, etc.

HTH
Marty

Re: root account disabled

Thomas Schler_1 — Tue, 02 Jul 2002 17:15:02 GMT

Piyush:

Unfortunately, I'm not logged in as root, now. Therefore I'm not able to execute 'modprpw'.

Martin:

Maybe, that's a good idea, but it helps not now.

Any other way???

Re: root account disabled

PIYUSH D. PATEL — Tue, 02 Jul 2002 17:22:29 GMT

Hi,
edit the file /tcb/files/auth/r/root

and blank out the password field:

Example
change
:u_pwd=nYRki9DfDgYf6:to
:u_pwd=:

Piyush

Re: root account disabled

Thomas Schler_1 — Tue, 02 Jul 2002 17:40:37 GMT

Piyush:

Are you kidding?? As I sayed, I'm not logged in as root, and the permissions of /tcb/files/auth/r/root are as they should be (I hope yours is not world-writeable).

Any other ideas???

Re: root account disabled

Uday_S_Ankolekar — Tue, 02 Jul 2002 17:44:55 GMT

Hello,

If the root account disabled you should stll be able to access server from system console or web console.

-USA..

Re: root account disabled

Martin Johnson — Tue, 02 Jul 2002 17:46:14 GMT

I don't think you can enable root without getting into command line mode on the console. If you can't do that then you will need to reboot the system and come up in single user mode.

HTH
Marty

Re: root account disabled

PIYUSH D. PATEL — Tue, 02 Jul 2002 17:53:53 GMT

Hi Thomas ,

Sorry......

You should be able to access the root thro system console or web console....

Or else you may have to boot the system into single user mode and then activate the root account.

Piyush

Re: root account disabled

Thomas Schler_1 — Tue, 02 Jul 2002 17:58:44 GMT

Uday:

Unfortunately, it's not a server but a workstation. Therefore, I have no system console or a web console.

Martin:

That's what I think, too. But, I still hope, one of you knows another way.

Any more ideas??????