System Administration
cancel
Showing results for 
Search instead for 
Did you mean: 

User account locking/unlocking in HPUX 11i with SC + SMSE

 
Sanjay Sutar
Frequent Advisor

User account locking/unlocking in HPUX 11i with SC + SMSE

Hi All,
What command I can use to lock and unlock user accounts on HPUX 11i with "Security Containment" (SC) and "Standard Mode Security Extensions" (SMSE)

Can we consider such system as trusted or they are still non-Trusted?
And how does the iscomsec behaves on such system?

Thanks for your assistance!!
5 REPLIES 5
Chan 007
Honored Contributor

Re: User account locking/unlocking in HPUX 11i with SC + SMSE

Sunny Jaisinghani
Trusted Contributor

Re: User account locking/unlocking in HPUX 11i with SC + SMSE

Hi Sanjay

you can lock a user account by using "passwd -l".

Sanjay Sutar
Frequent Advisor

Re: User account locking/unlocking in HPUX 11i with SC + SMSE

chan, Sunny,
Thanks for you reply!!

I can lock the accounts but not able to unlock them with modprpw -k command.

So my question is is there any other command to unlock the account on HPUX with Security Containment and Standard Mode Security Extension.

Sanjay Sutar
Frequent Advisor

Re: User account locking/unlocking in HPUX 11i with SC + SMSE

One more update on this!

I could get my hands on a HPUX v2 (11.23) machine with SC + SMSE and checked iscomsec.

as per iscomsec output, the machine is NOT trusted.

So clearly modprpw -k will not work.

So what should I use to unlock the user ( I am interested in doing it from command line)

Thanks for your help!!
Reshma Malusare
Trusted Contributor

Re: User account locking/unlocking in HPUX 11i with SC + SMSE

Hi sanjay,
Deactivating an account places an â *â in the userâ s password field & prevents user from logging in. However, the user entry remains in the /etc/passwd file & can be reactivated.

#passwd â l
Deactivate a user account.

you can also do it with sam. You can either use SAM to reactivate the account or simply change the userâ s password using the passwd command.
Choose Users from the next menu. SAM will display a list of users. If there are more than 500 users on your system, you will be asked to select a subset of users.
Choose either Remove or Deactivate... from the Actions menu. SAM will display a list of
choices for handling the userâ s files.

Thanks & Regards
Reshma