Weird issue with HP 9000 and changing root password

[urushi]

So I logged into SAM to change the root password (I think this was my mistake). One of my subordinates notified me that the new password and the old password both still work. My mind boggled, I decided to execute the passwd root command and change the password this way (though sam just basically does the same thing).

I currently have three passwords that work on root, none of which allowed me to 'secure' the system to ensure previous staff members who have been reassigned cannot access the system.

We noticed and oddity with some of our backups being blocked for our nightly cronjobs and are a bit concerned w/ previous staff potentially having access.

Any advise on what might be causing this issue and steps moving forward would helpful. I have googled around but found nothing useful.

[support_s]

System recommended content:

1. HPE Alletra 9000 Update 9.5.3 Release Notes | Known Issues with the HPE Alletra 9000 v9.5 user interface

Please click on "Thumbs Up/Kudo" icon to give a "Kudo".

Thank you for being a HPE valuable community member.

[georgek_1]

Hello urushi,

How many charactre are there in OLD password and the new one .
Are they more than 8 for these passwords , where the first 8 chars are matching for both (OLD & NEW) passwords.
In standard mode - only first 8 characters are being used for authentication , rest are ignored .
Thus , when you have a 10 letter password, you could still login by entering the first 8 characters .

You may try create a totally different password - from the OLD ones, and see if that helps .

Whats the OS version ?

I work for HPE/ I am an HPE Employee (HPE Community)