HPE Community read-only access December 15, 2018
This is a maintenance upgrade. You will be able to read articles and posts, but not post or reply.
Hours:
Dec 15, 4:00 am to 10:00 am UTC
Dec 14, 10:00 pm CST to Dec 15, 4:00 am CST
Dec 14, 8:00 pm PST to Dec 15, 2:00 am PST
System Administration
cancel
Showing results for 
Search instead for 
Did you mean: 

not able to login after changing passwd on trusted Hp-UX box

 
kashyapi
Frequent Advisor

not able to login after changing passwd on trusted Hp-UX box

i am not able to login after changing password by passwd command.Showing error like "Access denied" .when i am reseting password thru SAM it not showing any password string which needs to be provided during login.folowing is the output...
"The new password for user "xyz123" is: . The user must enter this
password when logging in the next time. "
34 REPLIES
Jupinder Bedi
Respected Contributor

Re: not able to login after changing passwd on trusted Hp-UX box

Can you please send me the output of /usr/lbin/getprpw -l username

and also I think you need to login into the server using telnet or ssh than give your new password and change the password.


Good luck
All things excellent are as difficult as they are rare
Sunny123_1
Esteemed Contributor

Re: not able to login after changing passwd on trusted Hp-UX box

Hi

Provide the output of

/usr/lbin/getprpw -l username

Regards
Sunny
Johnson Punniyalingam
Honored Contributor

Re: not able to login after changing passwd on trusted Hp-UX box

ITRC member since: December 11, 2003
Last contribution date: January 21, 2010
I have assigned points to 11 of 21 responses to my questions.
Problems are common to all, but attitude makes the difference
Johnson Punniyalingam
Honored Contributor

Re: not able to login after changing passwd on trusted Hp-UX box

Please assign points for the people who spare their time and knowledge in helping to resolve your problem
Problems are common to all, but attitude makes the difference
Johnson Punniyalingam
Honored Contributor

Re: not able to login after changing passwd on trusted Hp-UX box

If its trusted system ?

You need to enable the account and before you reset the password username

/usr/lbin/modprpw -k

will enable user account if it has been locked to check use

/usr/lbin/getprpw -l
Problems are common to all, but attitude makes the difference
Johnson Punniyalingam
Honored Contributor

Re: not able to login after changing passwd on trusted Hp-UX box

lockout - returns the reason for a lockout in a "bit" valued
string. The position, left to right represents:

1 past password lifetime
2 past last login time
3 past absolute account lifetime
4 exceeding unsuccessful login attempts
5 password required and a null password
6 admin lock
7 password is a *

the value 0 = condition not present, 1 is present.

RETURN VALUES

0 success
1 user not privileged
2 incorrect useage
3 can not fine the password file for this user
4 system is not trusted
Problems are common to all, but attitude makes the difference
Johnson Punniyalingam
Honored Contributor

Re: not able to login after changing passwd on trusted Hp-UX box

for more information on the Non trusted System

Check below thread.
http://forums11.itrc.hp.com/service/forums/questionanswer.do?threadId=1328224

I believe if your system is NON-trusted
possiblties are could the user_accounts life time expire anyways you post the output of the /etc/shadow

# grep /etc/shadow
Problems are common to all, but attitude makes the difference
kashyapi
Frequent Advisor

Re: not able to login after changing passwd on trusted Hp-UX box

Yes, this is a trusted system.following is the output of getprpw
HOSTA:/>/usr/lbin/getprpw -l suadm
uid=103, bootpw=NO, audid=184, audflg=1, mintm=-1, maxpwln=-1, exptm=-1, lftm=-1, spwchg=Thu Jan 21 11:26:23 2010, upwchg=Thu Jan 21 10:51:14 2010, acctexp=-1, llog=-1, expwarn=-1, usrpick=DFT, syspnpw=DFT, rstrpw=DFT, nullpw=DFT, admnum=-1, syschpw=DFT, sysltpw=DFT, timeod=-1, slogint=Thu Jan 21 10:51:46 2010, ulogint=Thu Jan 21 10:44:40 2010, sloginy=-1, culogin=-1, uloginy=-1, umaxlntr=-1, alock=NO, lockout=0000000
HOSTSA:/>

also i tried unlocking the account using modprpw -k suadm
but no luck.
Sunny123_1
Esteemed Contributor

Re: not able to login after changing passwd on trusted Hp-UX box

Hi

Set the new password with passwd command and then try to login.

Regards
Sunny
kashyapi
Frequent Advisor

Re: not able to login after changing passwd on trusted Hp-UX box

Thanks sunny for quick response.I already tried changing password using passwd command.i tried fora user account which was able to login to the box , but changing the password using passwd command this user also not able to login.it seems whoever user will change the password using passwd command , will not be able to login.it says.." access denied"
Johnson Punniyalingam
Honored Contributor

Re: not able to login after changing passwd on trusted Hp-UX box

than i suspect you check your "password security file" if it has any conditions ?

while settings password

Problems are common to all, but attitude makes the difference
Johnson Punniyalingam
Honored Contributor

Re: not able to login after changing passwd on trusted Hp-UX box

did you check /etc/default/security file yet ?
Problems are common to all, but attitude makes the difference
kashyapi
Frequent Advisor

Re: not able to login after changing passwd on trusted Hp-UX box

Hi Johnson,

can you pls tell me which file ("password security file")it is and what is the absolute path.
kashyapi
Frequent Advisor

Re: not able to login after changing passwd on trusted Hp-UX box

Hi Johnson,
Following is the content

HOSTA:/>cat /etc/default/security
PASSWORD_HISTORY_DEPTH=3
MIN_PASSWORD_LENGTH=6
HOSTA:/>
Johnson Punniyalingam
Honored Contributor

Re: not able to login after changing passwd on trusted Hp-UX box

Ok, so your MIN_PASSWORD_LENGTH ="6"

1qazxsw2 -> can you try setting this password
Problems are common to all, but attitude makes the difference
Sunny123_1
Esteemed Contributor

Re: not able to login after changing passwd on trusted Hp-UX box

Hi

Try following

first do the

passwd -d username

then check if user can login then set passwd again with passwd command and try to login.


-d = Allow user to login without a password by deleting it. In untrusted mode this unlocks/activates the user account if found locked/deactivated.

Regards
Sunny
kashyapi
Frequent Advisor

Re: not able to login after changing passwd on trusted Hp-UX box

John,

Tried, but no luck.
Johnson Punniyalingam
Honored Contributor

Re: not able to login after changing passwd on trusted Hp-UX box

This very strange !!!!!! :(

grep /etc/passwd -> output

does the user_account have any shell to login or if its only ftp account ?
Problems are common to all, but attitude makes the difference
kashyapi
Frequent Advisor

Re: not able to login after changing passwd on trusted Hp-UX box

Sunny,

I think password security policy does not allow to assign null password.following is output
HOSTA:/>passwd -d suadm
You are not allowed to have a null password.
HOSTA:/>
kashyapi
Frequent Advisor

Re: not able to login after changing passwd on trusted Hp-UX box

John,
suadm was able to login for a long time. and suddenly we are facing this issue.User is having home directory following is the output..
HOSTA:/>cat /etc/passwd|grep suadm
suadm:*:103:111:,,,:/home/suadm:/usr/bin/sh
HOSTA:/>
Keith Bryson
Honored Contributor

Re: not able to login after changing passwd on trusted Hp-UX box

Hi there

Check to see if the UID for suadm is unique and no-one else has the same UID in the passwd file (incidentally, sshd uses this UID if it's installed). I'd try untrusting the system, resetting the password and then re-trusting again.

Hope that helps

Keith
Arse-cover at all costs
kashyapi
Frequent Advisor

Re: not able to login after changing passwd on trusted Hp-UX box

Most strange part is , i am able to change the password using password command but user is not able to login
MIN_PASSWORD_LENGTH=6
HOSTA:/>passwd suadm
Changing password for suadm
Last successful password change for suadm: Thu Jan 21 11:26:23 2010
Last unsuccessful password change for suadm: Thu Jan 21 10:51:14 2010

Do you want (choose one letter only):
pronounceable passwords generated for you (g)
a string of letters generated (l) ?
to pick your passwords (p) ?

Enter choice here: p
New password:
Re-enter new password:
Passwd successfully changed
kashyapi
Frequent Advisor

Re: not able to login after changing passwd on trusted Hp-UX box

John,
user id is unique
HOSTA:/>cat /etc/passwd|grep 103
suadm:*:103:111:,,,:/home/suadm:/usr/bin/sh
HOSTA:/>

Johnson Punniyalingam
Honored Contributor

Re: not able to login after changing passwd on trusted Hp-UX box

partically speaking we just suggesting & advice as per our experience.

in this case if were (I) would be.

cd /tcb/files/auth/s
ll suadm
vi suadm and try erase the entries before pwd

or you rm suadm file

again try to reset passwd of the user account

or i will try creating for testing purpose and check if something strange in the system or its only problem with that particular user account "suadm"
Problems are common to all, but attitude makes the difference