accounts expire after System Security Policies configured.

[Jonathan Grymes]

HPUX 11i Ver 2 (Itanium)
After I put my system in trusted mode Im still able to login with my account and su to root. I then configure System Security Policies (via SAM) with password aging Enabled, and then go to the individual accounts (mine and root) and disable password aging. At this point Im now locked out. The system will not accept my password nor can I su to root.

If I untrust the system at this point the passwords work.

[Patrick Wallek]

Accounts are expired by default after converting to trusted.

After converting you need to do:

# /usr/lbin/modprpw -V

to refresh all accounts.

[Jonathan Grymes]

Ok, how do set the root password. Im still unable to su. Same with the other accounts.

[Ganesan R]

Hi,

It is not preferred to set security policies for root account since some policies may deactivate the account.
For examample "unsuccessful login tries".

If root account locked follow the steps to reset it.

1. Boot the system in to single user mode.

2. Mount /usr file systems.
# mount /usr

Note: The file system might need file system check (fsck) before mounting.

3. Systems that are not using Trusted System security skip to step #4.
For Trusted Systems (presence of a /tcb directory), follow these additional
steps:

a) Use the following command to reactivate the 'root' account:
# /usr/lbin/modprpw -k root

b) Use the 'modprpw' command to null the password, so that the passwd command
does not prompt for the old password.

10.x
# /usr/lbin/modprpw -w "" root

11.x
# /usr/sam/lbin/usermod.sam -F -p "" root

NOTE: To untrust the system, use: tsconvert -r

4. Change the root account password.
# passwd root

5. Boot the system in to multi user mode.

Hope this helps.

[ManojK_1]

You can remove the root account lock out after making the system in trusted mode by the following command.

/usr/lbin/modprpw -m exptm=0,lftm=0,mintm=0,expwarn=0,llog=0 root


Do it always for root account.After making the system in trusted mode.