password change issue

[vinodan]

Dear All ...

When i am trying to change my password below mentioned error is encountered.

"Password cannot be changed. Reason: Cannot access protected password entry."

system is trusted.root user is able to change my password but not me.What could ne the error any idea ?

Thanks in advance
Vinod

[RAC_1]

pwck

Does it report error for your account?

grpck
authck

[Vivekanandan Somanathan]

Hi Vinod,


authck -s will help you.

Let me know the update

- Vivek

[vinodan]

Dear All ...

No error related to this account .root can change the password but not the user.Even this user accoiunt is deleted and recreated.But still persists.

Regards
Vinod

[Glen R. Bartlett]

Not sure of any differences for trusted, but i've heard of some clearing the SUID on /usr/bin/passwd so users cannot change their own passwords.

-r-sr-xr-x root bin /usr/bin/passwd

[vinodan]

Dear All ...
Had it been like that it would have effected all the users.But this user is the only one one who is efected.

Vinod

[Rajeev Shukla]

Have a look at the permission of the file containing the protected password information i.e. /tcb/files/auth//uid
it should be 664 i.e -rw-rw-r--

[Glen R. Bartlett · Accepted solution]

I hope something here can help:
Administering Your HP-UX Trusted System
http://docs.hp.com/en/B2355-90121/index.html

man 4 prpw

The important fields (as I see it) are u_pickpw (u_pickpw@ would disallow you to change the password), and I'm not sure if u_minchg has to expire before change is allowed.

Like RAC said, a authck might reveal something:

authck -p -v