System Administration
cancel
Showing results for 
Search instead for 
Did you mean: 

uid and gid for /etc/password changed. var 100%

apple
Super Advisor

uid and gid for /etc/password changed. var 100%

dear HPUX gurus,
would like to seek your advice.
our /var is 100% and all the files permission have changed to numbers and also /etc/passwd. what could be the reason for this? is it due to /var %?
how to investigate this? would really appreciate your advice. hope to hear from you. thank you
8 REPLIES
R.K. #
Honored Contributor

Re: uid and gid for /etc/password changed. var 100%

Hello,

First look for /var 100% issue. Find out the files that are occupying huge space.

# du -kx /var/* | sort -rn | head -n 20 <== will list top 20 big file

Unnecessary can be backed up in some other place.
log files can be trimmed.
Crash file can be removed.

Hope this helps.

Regds,
R.K.
Don't fix what ain't broke
R.K. #
Honored Contributor

Re: uid and gid for /etc/password changed. var 100%

Hello Apple,

Just go through following threads and you will find a lot of things here to get free space out of /var.

http://forums13.itrc.hp.com/service/forums/questionanswer.do?admit=109447627+1242352801706+28353475&threadId=1211222

http://forums11.itrc.hp.com/service/forums/questionanswer.do?threadId=81631

-R.K.
Don't fix what ain't broke
Jestin John Chacko
Regular Advisor

Re: uid and gid for /etc/password changed. var 100%


Dear,
Please check this link for 100% of /var


http://forums11.itrc.hp.com/service/forums/questionanswer.do?threadId=1112992


check for any process that fills the /var file system,

Use top to check the current CPU utilization and kill if any unwanted process is there.

hope this will help you a little to solve your issue.
apple
Super Advisor

Re: uid and gid for /etc/password changed. var 100%

Dear Sir,
thank you. its very helpful. would like to seek your advice. is the cause of uuid changed is due to /var is full? what can cause the uuid to change? would really appreciate your advice.
many thanks in advance.
R.K. #
Honored Contributor

Re: uid and gid for /etc/password changed. var 100%

Hi,

Can you put the ls -l output of any directory where the uids changed to numbers.

Thanks,
R.K.
Don't fix what ain't broke
Suraj K Sankari
Honored Contributor

Re: uid and gid for /etc/password changed. var 100%

HI,
>>what can cause the uuid to change?

Main cause are user no more exist in your system. or your passwd file got corrupted.

Suraj
Dennis Handly
Acclaimed Contributor

Re: uid and gid for /etc/password changed. var 100%

>what can cause the UID to change?

Other cases are NIS where you need to:
# /sbin/init.d/nis.client stop
# /sbin/init.d/nis.client start

Or you could have problems with pwgrd(1M) and you have to restart it.
Ganesan R
Honored Contributor

Re: uid and gid for /etc/password changed. var 100%

Hi Apple,

From system point of view everything will be dealed with uid and gid.
/etc/passwd file will be used to map the uid/gid with corresponding username and group whenever we list files and directories(for examable ls -al). If password file corrupts or owenership/permission changed then we may end of this kind of issue.

First you need to check the ownership and permission of /etc/passwd file and fix if improper ownership/permission.

You can run this command to fix improper ownership/permission to entire vg00

# swverify -F \*
Best wishes,

Ganesh.