Trusted System Sorry Message when changing password

[Gary Tomlin]

Hi,

We have two HP-UX 11i systems that are at the same patch level and have recently been converted to trusted systems via SAM.
Both system prompted that the root password required changing in so many days (we enabled password aging), we changed the password on the first system without any problems but the second system responded with "Sorry" when we entered the new password. To avoid locking out the account we have disabled the password aging on the root account, but we still get "Sorry" when we try and change the root password. There is a message in the syslog that the /etc/default/security file was missing, this message is on both the working and non-working system. I tried touching the file and changing the permssions to 644 but it still complains the file is missing.

Any thoughts?

Thanks
GT

[Peter Godron]

Gary,
who is the owner of the file ?
"world readable and root writable"
What is in your security file ? see : http://docs.hp.com/en/B2355-60127/security.4.html

[RAC_1]

Do this first and then try changing the password.
(open two root sessions, so in case required you have them)

/usr/sam/lbin/usermod.sam -F -p "" root

[Martin Gould]

Thanks RAC, that fixed the problem. The syslog still has the file missing message for the /etc/default/security file even though it exists owned by root with rw-r--r--permissions.

[RAC_1]

Check perms on /etc and /etc/default directory. Also is pwgrd daemon running? Are there any other errors along with this error?

What does following commands return?

pwck
authck
grpck