A strange problem about root password

[Rambo_1]

When I used root account and root password to login the HP-UX(11.11) ,The OS rejected and telled me the password had been disable .
Anyone can tell me how to reslove this problem ?

Thanks for your help

Rambo

[Ivan Krastev]

See this previouss thread - http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=980526


regards,
ivan

[Fabio Ettore]

Hi,

I would guess you have a trusted system. The password is rejected with that message when you type wrongly the password more than three times. In order to unlock the root user you need to access to console (if you can) otherwise go in single-user mode and run the following command:

/usr/lbin/modprpw -k root

HTH.

Best regards,
Fabio

[Rambo_1]

Thanks for reply ,I will have a try to validate your suggestions.

rambo

[Rambo_1]

I used "/usr/lbin/modprpw -k root" to unlock successfully ,but after a few days , I met the problem again. I always open a windown now , so that I can use "/usr/lbin/modprpw -k root" to unlock the root account when the "The root account has been deactivated" messages appear.
Any suggestions for resolve the problem forever?
Thanks for your help .

Rambo

[张粤源]

you can try follow command

1.login system single mode.

remove the protect of root
2.#/usr/sbin/tsconvert -r root
change root password
3.#passwd root

[Fabian Briseño]

Hello.
Use SAM and there should be an option arround there to prevent root password being disabled

see account aging or login retries before the account is disabled.

I think its in SAM->Auditing and security

[Peter Godron]

Hi,
you still have not identified the cause of the problem : Why is your root account getting disabled ?

If it due to too many attempts with an invalid password, how is trying to use the root account?
Use the SAM auditing or a quick "lastb root".

Disabling the security setting of three failed attempt is not going to resolve the underlying problem, just hide it.

[Onur Karakan]

Hello,

I had the same problem and i solved this problem by the following method.

When you get this error for root account,

Account is disabled. see Account Administrator

â ¢ Go to console. Ctrl+B to goto GSP.
â ¢ Type rs to reboot system. And â Yâ to confirmation.
â ¢ Break on startup
â ¢ Bo pri
â ¢ hpux â is
â ¢ auto_parms
â ¢ sam
â ¢ reactivate root account and reset password.
â ¢ Vi /tcb/files/auth/r/root file.
â ¢ Change the following parameter as it is.
:u_pwd=:\
â ¢ Sam
â ¢ modify password with p.

Best Regards,

Onur

[Rambo_1]

so thanks for everyone reply .I found the system is a "trusted system" , and I found the "unsuccessfully login tried allow" is "Default 3" in SAM . I modified the "Default" to "Customize" and choice the number was "0" ,and the problem seem was resolved .

[Darren Prior]

Hi Rambo,

You may have fixed the symptom, but it is likely you still have a problem. If someone is trying to break into your root account you have now given them an infinite number of login attempts in which to guess the password.

I would suggest looking at sulog and lastb output to see if there's a pattern to the invalid login attempts.

regards,

Darren.

[Bill Hassell]

I would strongly recommend Darren's advice: someone is trying to break into your system. Use this command:

lastb -R root

Every entry is a failed attempt by the listed IP address or hostname. You cannot ignore these attempts until you know who and why the attempts are occurring.

Setting the maximum root login attempts to zero is like solving a problem with someone using a hammer to break the lock on a door, by simply ignoring the damage to the lock. Someday, the lock may be gone...and possibly all your data.

[Rambo_1]

Thanks for the suggestions .

B.R

Rambo