dxaccounts with enchanced security

[Ronny_7]

Hi,

I have an ES40 running on Tru64 Unix V5.0A.
A few of the user accounts are not showing correctly on the account manager window.

One user has the lock icon but when double click on the user, the lock account is not checked.

Another user has no lock icon but the lock account is checked.

Any advise?

Thanks and Regards,
Ronny

[Gregory Lee_1]

Ronny,

What Patch Kit is installed on this system?

Regards,
Greg

[Dave Bechtold]

Hi Ronny,

I checked the v5.0a Patch Kit 3, the latest, and there are no known issues similar to what you described as being fixed, nor am I aware of this behavior being reported.

The dxaccounts application would be expected to look for the u_lock field for the user's account in the auth.db. I'd check the user account in question by executing "edauth {username}" and reviewing the fields. An entry of u_lock@ would indicate the account is _not_ locked, without the @ would indicate it's locked. Maybe check for multiple u_lock fields for the account. The fields are explained under "man authcap".

Run "usr/sbin/authck" to see if the auth.db is OK.

Maybe try restarting the prpasswd daemon using "/sbin/init.d/prpasswd restart".

Hope this helps,
Dave Bechtold

[Ronny_7]

Hi Gregory and Dave,

Thank you very much for replying.

The system is with patch kit 1.

I will try out Dave's suggestions.

Thanks and Regards,
Ronny

[Orrin]

Hi Ronny,

try using

usermod -x administrative_lock_applied=0

and

usermod -x administrative_lock_applied=1

Before running dxaccounts, also confirm that the shadow passwd file is updated.

[Orrin]

Hi Ronny,

try using

usermod -x administrative_lock_applied=0

and

usermod -x administrative_lock_applied=1

Before running dxaccounts, also confirm that the shadow passwd file is updated.

Regards,

Orrin

[Ronny_7]

Hi Orrin,

Thank you for the recommendations.
I will try them as well.

Regards,
Ronny

[Ronny_7]

As per replies.