My system is trust system,and forget the root password. how to do.

[bbobb]

The version of HPUNIX is 11i,
in the single user mode, the system ask to enter old password, how to deal with it.
======================================
passwd root
Old password:

[Patrick Wallek]

2 things to try:

1) just type 'passwd'

# passwd

2) edit the /tcb/files/auth/r/root file and remove the encrypted password and then do the passwd command again.

[bbobb]

wallek, in single user mode. I do following:

#passwd root
Old password:
sorry
#cd etc
#cd files
sorry , not found files.

[Patrick Wallek]

Go back and read my post again, please.

1) I said

# passwd

Do NOT put root after passwd. Just do 'passwd'.

2) The files are in /tcb/files/auth/r/root

Note that the directory starts with 'tcb' NOT 'etc'.

[Hoang Chi Cong_1]

Hi bbobb
In trusted system has some disadvantages and I think this is one of them! :) (never tell to another people...just my idea......)


Here are some thread that will solve your trouble:

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=267217

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=617980

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=617877

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=425907

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=404746

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=26000


Best and regard,

ChiCong

[bbobb]

Thanks for Wallek and Jimkery
===================================
Hi,Wallek
I do as your advices, the following info. display:
Password cannot be changed, Reason: cannot access protected password entry.

I have resolved this problem as Jimkery
Following is the steps(in single user mode):
#mount /usr
#/etc/tsconvert -r
#passwd
New password: xxxxxx
Re-entry new password: xxxxxx

[Xavier Gutierrez_2]

Hi,

The problem on doing what you did is that you might have corrupted other user's passwords when unconverting from trusted system to untrusted (that's what you did)

HPUX trusted system only sees the first 8 characters of the password but lets the user enter many more, I can't remember the exact number.

When converting from non trusted (password as many characters long as the limit I said I did not remember) to trusted the passwords are truncated to eight characters but still accepting as many more as you can type after the first correct eight ones (if you don't believe this, give it a try)

So, re-convert immediately your system bac to trusted after changing the root password or the users whose password was longer than 8 chars will not be able to login anymore ebcause non trusted server will read more than 8 chars...

That's why I feel much more comfortable with Patrick's solution of removing the encrypted password entry for root in /tcb/files/auth/r/root...

Cheers,

Javier.

[Fred Ruffet]

"I have resolved this problem as Jimkery", so please assign points to his reply ! (And also to Patrick's which answers makes real sense)

0 point for this answer.

Regards,

Fred

[Jordan Bean]

Xavier, I think your statement is reversed. It doesn't make sense to truncate passwords when converting to trusted mode.

untrusted mode supports 8 character passwords because of crypt() hash

trusted mode supports up to 80 characters because of bigcrypt() hash. The 80 character limit is arbitrary because bigcrypt() has no defined limit as an iterative version of crypt()

So long passwords are truncated to short when converting from trusted to untrusted.

Am I wrong?