not able to login after changing passwd on trusted Hp-UX box

[kashyapi]

John,
suadm was able to login for a long time. and suddenly we are facing this issue.User is having home directory following is the output..
HOSTA:/>cat /etc/passwd|grep suadm
suadm:*:103:111:,,,:/home/suadm:/usr/bin/sh
HOSTA:/>

[Keith Bryson]

Hi there

Check to see if the UID for suadm is unique and no-one else has the same UID in the passwd file (incidentally, sshd uses this UID if it's installed). I'd try untrusting the system, resetting the password and then re-trusting again.

Hope that helps

Keith

[kashyapi]

Most strange part is , i am able to change the password using password command but user is not able to login
MIN_PASSWORD_LENGTH=6
HOSTA:/>passwd suadm
Changing password for suadm
Last successful password change for suadm: Thu Jan 21 11:26:23 2010
Last unsuccessful password change for suadm: Thu Jan 21 10:51:14 2010

Do you want (choose one letter only):
pronounceable passwords generated for you (g)
a string of letters generated (l) ?
to pick your passwords (p) ?

Enter choice here: p
New password:
Re-enter new password:
Passwd successfully changed

[kashyapi]

John,
user id is unique
HOSTA:/>cat /etc/passwd|grep 103
suadm:*:103:111:,,,:/home/suadm:/usr/bin/sh
HOSTA:/>

[Johnson Punniyalingam]

partically speaking we just suggesting & advice as per our experience.

in this case if were (I) would be.

cd /tcb/files/auth/s
ll suadm
vi suadm and try erase the entries before pwd

or you rm suadm file

again try to reset passwd of the user account

or i will try creating for testing purpose and check if something strange in the system or its only problem with that particular user account "suadm"

[Johnson Punniyalingam]

can you also check if anyone using the sam user id UID from the /etc/passwd file

[kashyapi]

Hi John,
I removed pwd entry from/tcb/files/auth/s/suadm
and then i changed the password using passwd commandbut no luck

Also i moved the file suadm to other folder and tried to change the password and showing error

"Password cannot be changed. Reason: Cannot access protected password entry."

I created a new test user and test user is able to login.even the new user can change password also.

[Johnson Punniyalingam]

if in this chase " i would delete" user "suadm" and re-create suadm account. please take note do not delete the suadm -> home directory while
deleting the user account

[Johnson Punniyalingam]

step 1:-

Use ->SAM-> User & Group ->Select User -> remove

Please take note * left the where they are

step 2:-

User's Files and Directories Should Be:

<*> Left Where They Are
< > Removed from User's Home Directory Only
< > Removed from All Local File System
< > Assigned to Another User


Than Again use SAM->Add user->

while recreating user account please key in

UID=exit uid which showed on the above post of the thread.

Hope this will help -> Best of Luck

[Tom Henning]

Is is possible that the new password you are using contains a '@' or '#' character? These characters are special to the /bin/login program and should never be used in a password.

From man passwd:

Avoid password characters which have special meaning to the tty
driver, such as # (erase) and @ (kill). You may not be able to login
with these characters.