Bastille problem

[Sauvik Basu]

Hi,
We had used Bastille to harden our HP-UX servers.Today afternoon onwards no user is able to login and the error message is "Account is disabled - see Account Administrator".Even logging from the console has stopped with the same error.Also,root login is facing the same problem.Can anyone suggest some way out?
Thanks in advance,
Sauvik Basu.

[Steven E. Protter · Accepted solution]

Shalom Sauvik,

You choose the option to convert your system to trusted. This sets a hard limit, 90 days on how long an account can remain in use without a password change.

Probably password changes were not enforced before the conversion.

root login should re-enable the root account on all login modes.

Your accounts are expired even if you convert back from trusted mode to normal.

I suggest you login as root and use sam to set general system policy.

Then:
cp /etc/passwd /tmp/userlist

while read -r DATA
do
user=$(echo $DATA | awk -F: '{print $1}'
passwd -n 7 -w 7 -x 90 $user


done < /tmp/userlist


# You probably will need a modprpw command to this loop to unlock the user.

rm -f /tmp/userlist

SEP

[Sauvik Basu]

Thanks for your advice.But.I am not able to login as root through telnet session or from console.Any idea as to how I can do that?