User account locking/unlocking in HPUX 11i with SC + SMSE

[Sanjay Sutar]

Hi All,
What command I can use to lock and unlock user accounts on HPUX 11i with "Security Containment" (SC) and "Standard Mode Security Extensions" (SMSE)

Can we consider such system as trusted or they are still non-Trusted?
And how does the iscomsec behaves on such system?

Thanks for your assistance!!

[Chan 007]

Hi,

This PD gives information that you looking for

http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=SecurityExt

Chan

[Sunny Jaisinghani]

Hi Sanjay

you can lock a user account by using "passwd -l".

[Sanjay Sutar]

chan, Sunny,
Thanks for you reply!!

I can lock the accounts but not able to unlock them with modprpw -k command.

So my question is is there any other command to unlock the account on HPUX with Security Containment and Standard Mode Security Extension.

[Sanjay Sutar]

One more update on this!

I could get my hands on a HPUX v2 (11.23) machine with SC + SMSE and checked iscomsec.

as per iscomsec output, the machine is NOT trusted.

So clearly modprpw -k will not work.

So what should I use to unlock the user ( I am interested in doing it from command line)

Thanks for your help!!

[Reshma Malusare]

Hi sanjay,
Deactivating an account places an â *â in the userâ s password field & prevents user from logging in. However, the user entry remains in the /etc/passwd file & can be reactivated.

#passwd â l
Deactivate a user account.

you can also do it with sam. You can either use SAM to reactivate the account or simply change the userâ s password using the passwd command.
Choose Users from the next menu. SAM will display a list of users. If there are more than 500 users on your system, you will be asked to select a subset of users.
Choose either Remove or Deactivate... from the Actions menu. SAM will display a list of
choices for handling the userâ s files.

Thanks & Regards
Reshma