uid and gid for /etc/password changed. var 100%

[apple]

dear HPUX gurus,
would like to seek your advice.
our /var is 100% and all the files permission have changed to numbers and also /etc/passwd. what could be the reason for this? is it due to /var %?
how to investigate this? would really appreciate your advice. hope to hear from you. thank you

[R.K. #]

Hello,

First look for /var 100% issue. Find out the files that are occupying huge space.

# du -kx /var/* | sort -rn | head -n 20 <== will list top 20 big file

Unnecessary can be backed up in some other place.
log files can be trimmed.
Crash file can be removed.

Hope this helps.

Regds,
R.K.

[R.K. #]

Hello Apple,

Just go through following threads and you will find a lot of things here to get free space out of /var.

http://forums13.itrc.hp.com/service/forums/questionanswer.do?admit=109447627+1242352801706+28353475&threadId=1211222

http://forums11.itrc.hp.com/service/forums/questionanswer.do?threadId=81631

-R.K.

[Jestin John Chacko]

Dear,
Please check this link for 100% of /var


http://forums11.itrc.hp.com/service/forums/questionanswer.do?threadId=1112992


check for any process that fills the /var file system,

Use top to check the current CPU utilization and kill if any unwanted process is there.

hope this will help you a little to solve your issue.

[apple]

Dear Sir,
thank you. its very helpful. would like to seek your advice. is the cause of uuid changed is due to /var is full? what can cause the uuid to change? would really appreciate your advice.
many thanks in advance.

[R.K. #]

Hi,

Can you put the ls -l output of any directory where the uids changed to numbers.

Thanks,
R.K.

[Suraj K Sankari]

HI,
>>what can cause the uuid to change?

Main cause are user no more exist in your system. or your passwd file got corrupted.

Suraj

[Dennis Handly]

>what can cause the UID to change?

Other cases are NIS where you need to:
# /sbin/init.d/nis.client stop
# /sbin/init.d/nis.client start

Or you could have problems with pwgrd(1M) and you have to restart it.

[Ganesan R]

Hi Apple,

From system point of view everything will be dealed with uid and gid.
/etc/passwd file will be used to map the uid/gid with corresponding username and group whenever we list files and directories(for examable ls -al). If password file corrupts or owenership/permission changed then we may end of this kind of issue.

First you need to check the ownership and permission of /etc/passwd file and fix if improper ownership/permission.

You can run this command to fix improper ownership/permission to entire vg00

# swverify -F \*