topic Re: i cant login:( in Operating System - HP-UX

i cant login:(

wayne_20 — Thu, 18 Jul 2002 08:51:22 GMT

hello! my bros.this is my first time to come here.
i got such message when i were logedin:"account is disabled but console log in is allowed."
but i AM log in at CONSOLE !!!
why? how can i settle it?
P.S it is D class.HPUX 11.00

Re: i cant login:(

Peter Kloetgen — Thu, 18 Jul 2002 08:59:39 GMT

Hi Wayne,

i think you are working on a trusted system, you should login as root and then reenable your normal user account. Perhaps your password is expired or there exist system policies which automatically disable an account after a given period of time without login of the user.

Allways stay on the bright side of life!

Peter

Re: i cant login:(

Donald Kok — Thu, 18 Jul 2002 09:25:16 GMT

If you really can not get in the console, you have to reboot and go to single user mode. From there you can edit the /tcb/files/auth/r/root file and remove the * from /etc/passwd, so trustedlogin is not used. Then you have control back over your system.

There are plenty of threads on ITRC where a detailed instructions is given.
Good luck
Donald

Re: i cant login:(

Steven Sim Kok Leong — Thu, 18 Jul 2002 09:37:22 GMT

Hi,

Since you can login at the console, you can re-activate the root account by either via the command line or easiest via sam (under Users and Groups):

# /usr/sbin/sam

Hope this helps. Regards.

Steven Sim Kok Leong

Re: i cant login:(

Peter Kloetgen — Thu, 18 Jul 2002 10:02:50 GMT

Hi Wayne,

to get into single user mode to be able to fix your problem do the following:

--> hit any key to discontinue booting process when you are called.

--> interact with IPL? y

--> IPL> hpux -is

you will then get into single user mode and be able to fix your problem.

Allways stay on the bright side of life!

Peter

Re: i cant login:(

wayne_20 — Fri, 19 Jul 2002 01:42:38 GMT

Hello!everybody.
Hi,Peter,i'd like to know if it will be halt during i use the SAM to fix some problem about audit or something under the single user?
Hi,Donald.i wonder what option should i edit in /tcb/files/auth/r/root file?
thank you very much!!!

Re: i cant login:(

wayne_20 — Fri, 19 Jul 2002 02:05:17 GMT

P.S:i am root.:(

Re: i cant login:(

Misa — Fri, 19 Jul 2002 02:05:33 GMT

In case anyone would prefer not to use SAM, the command is (as root):

/usr/lbin/modprpw -k root

(or any other username).

--Misa

Re: i cant login:(

Misa — Fri, 19 Jul 2002 02:07:21 GMT

Sorry, that would be the command to re-enable an account that was disabled.

Re: i cant login:(

wayne_20 — Fri, 19 Jul 2002 04:38:33 GMT

thank you Misa. But it doesnt work.
is there something about trusted system?

Re: i cant login:(

Misa — Fri, 19 Jul 2002 04:53:47 GMT

The message that you list -- "account is disabled but console login is allowed" -- is the same thing I see on my trusted systems when an account has been locked out. And the modprpw command I listed is a command-line way to unlock such an account.

If you are using a trusted system, have walked over to the physical terminal that's attached to the system (or the web console), gotten to the "login:" prompt, entered "root" and your password and STILL can't get in, I'm stumped. I've definitely had my root account get locked out, but going to the console always lets me log in.

Re: i cant login:(

wayne_20 — Fri, 19 Jul 2002 05:09:35 GMT

bingo!thank you Misa.i settled it with tsconvert -r.
but i wonder why the command tsconvert have prior to the command you list,modprpw?
both them have the function to enable the root account in the console...

Re: i cant login:(

Donald Kok — Fri, 19 Jul 2002 06:11:55 GMT

wayne,
in /tcb/files/auth/root by the option u_pwd you can remove anything between = and :\. root does not need a passwd now.

Then when your system is in level 3, you can use sam to adjust your root account.
But you can also use the modprpw command.

You can choose witch road you take any moment. Whichever looks the fastetst at the moment you take.

Other members: do you know why on trusted systems the console sometimes is disabled and the other times not. The trustedsystems manual state clearly that disabled root account always can logon at the console. Is it Ux-version dependent, or are some patches required, or is it machine-type depentend?
Greetzz
Donald

Re: i cant login:(

Eric Crosby_1 — Fri, 01 Nov 2002 14:19:47 GMT

Wayne,

If you are using a GUI console, to login after you lock root, you need to choose failsafe mode. Then you will not have to boot into single user mode and jump through all those hoops.