Big Trouble Part 2

[Mario Gratz]

Having logged in as root, I gave the following command

cd /
chmod -R 777 .

Now I am not able to log into the machine (HP-UX 11.00).

I have fixed the /etc/pam.conf
permissions

Now the error message with ...pam.conf... is not longer indicate in the display,

but I am not able to log into the machine .

I have no backup from the system. The system is a HP-UP 2600 Workstation.

If i must reinstall the system, where can i find a good Guidance to do this?

[Jochen Heuer]

Hello,

try to boot the system in single user mode (ISL> hpux -is). There you still be able to get a prompt and change permissions.

[Mario Gratz]

Hallo Jochen,

i can boot the system in single user mode.

what are the permissions and the files to change?

Thank You

[Jochen Heuer]

I am not sure which permissions all have to be changed. I guess one problem is that some suid programs are not suid root anymore.

Do you have another system running 11.0? Then you could check permissions on that system and copy them over.

[Jochen Heuer]

Hello Mario,

I suppose you are a german customer. Do you have a valid sw support contract? If so please log a call (and include my name). I remember a possibility to recover permissions with some sd-ux commands.

Thanks, Jochen

[Mario Gratz]

Hello Jochen,

yes i am a german customer.
I will check if my company have a support contract. We have leased the workstation at 2.8.2002 with the following support options:

H4401A - SW. Tel.Support.; HW: n??chst. Tag(Mo-Fr. 1J)

Now i am searching for the System Handle an the "
Kennnummer der Support-Vereinbarung oder
Seriennummer".

We don??t have another workstation from this type.

It is very interesting to recover permissions with some sd-ux commands. Can you send me informations over this forum?

[Stefan Farrelly]

Using Software distributor to fix your permissions is indeed the way to go, but its not easy.

Let me describe;

1. In the dir /var/adm/sw/products is very installed product and fileset. In each is an INFO file describing the exact default permissions for each file and directory.
2. For each fileset you can write a script to read these permissions and change them back. I suggest you start in the dir /var/adm/sw/products/OS-Core/
3. for each subdir in this dir cd to it, and do; cat INFO|grep -e file -e path
4. This lists a mode (permissions) followed by 1 or more dirs/files. If lots of files have the same mode then onle 1 mode statement is shown followed by lots of files.

You can then write a script using a for loop to read this and reset your permissions. I suggest you do ALL subdirs under the OS-Core product to start with, then you should be able to boot up aok and fix the rest. Theres a lot to do.

Of course it will be probably quicker to use an ignite make_recovery tape backup to restore your system.

Good luck.

[Pete Randall]

Mario,

I think the command you're thinking of is swverify, but I'm not sure that's going to be the magic answer. Without a backup, your best answer is probably going to be re-install.

Good luck,
Pete

[James Murtagh]

Hi Mario,

You could try running something like:

#swverify -x fix=true -x check_permissions=true \*

I've just checked it on one of my products and it fixed all file permissions but not directories. Still, it may be a start.

Regards,

James.

[Jochen Heuer]

Hi Mario,

just send me an email (jochen dot heuer at hp dot com) and I will check if I can find the document. If you do find the system handle or serial number please include it.

Thanks

[Carlos Fernandez Riera]

Even if the correct command is swverify, i recall a thread where where the question was dicussed ( this is not the first time), and Mr. Voss write a small scritp to fix perms.

Check:
http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0xa5d9a1abbac8d5118ff10090279cd0f9,00.html