can not change password

[avizen9]

HI,
I am facing problem to change password in hpux 11 server i am using root account and then trying to change password for any of the user its giving error as below

passwd arvpatel
Changing password for arvpatel
Sorry.

also when i am trying to open sam its giving error " SAM internal error has occured. Additinal information regarding this error has been logged to the SAM log file (/var/sam/log/samlog) contact your hp representative and provide them with the contents of the log file so that an appropriate resolution to this problem can be found.

below is the entry in this log file
please let me know if anybody got any clue for this.

Thu Mar 27 11:47:12 2008 Exiting SAM area "System Administration Manager (men
tortc)".
@!@4@1206591420@0
ioparser.sh: Executing the following command:\Cinsf > /dev/null 2>&1\Cto bind
devices to Card Instance numbers.
@!@4@1206591420@0
ioparser.sh: Determine if ioscan is to be run. If ioscan is not run at this
time use previous ioscan output cached in $IOSCAN_OUT.
@!@4@1206591420@0
ioparser.sh: Executing the following command:\Cioscan $* > $IOSCAN_OUT\C
@!@129@1206591421@0
Thu Mar 27 12:17:01 2008 Entering SAM area "System Administration Manager (me
ntortc)".
@!@8@1206591421@0
Entering Task Manager with task FAL_IS_MUL_SAMS.
@!@16@1206591421@0
Syntax Error: /usr/sam/lib/fal/fal.tm at line 1:^A^ALocation: tm_parse:2495^A
Error Code: 7159
@!@129@1206591512@0
Thu Mar 27 12:18:32 2008 Exiting SAM area "System Administration Manager (men
tortc)".

[YAQUB_1]

Hi Avizen9,

1. Check the directory permission level
$ ll /etc/passwd

2. Creat a new user, then try to change user passwd.

3. Edit root passwd profile.
$ vi /etc/passwd
root::0:3::/:/sbin/sh
(existing line like that root:0.bJnj39Mpqxk:0:3::/:/sbin/sh)

4. Now we can create a new passwd a as root user.

Thanks--Yaqub
HP Support!!!

[avizen9]

HI
its not helping me, i am getting same error
passwd arvpatel
Changing password for arvpatel
Sorry.

also sam not working giving above error

[Bill Hassell]

You need to post the results of these two commands:

ll -d / /etc /etc/passwd
ll -d /tcb

AS far as the SAM error, it appears that some of the control files are corrupted so SAM should be reinstalled.

[avizen9]

HI i will post both command result soon,
how i can re-install sam again? through hpux installation cd?

[Grayh]

To correct this type of error condition, reinstall SAM using the
-x reinstall=true command line option

# swlist -a state -l fileset SystemAdmin

[avizen9]

here is the result for both command,
ll -d /etc /etc/passwd
drwxrwxrwx 26 bin bin 7168 Mar 27 17:04 /etc
-rwxr-xr-x 1 root other 7940 Mar 27 17:04 /etc/passwd

$ ll -d /tcb
/tcb not found


i am still not clear about how to re-install SAM can you please give me details info.
thanks

[Grayh]

Using swinstall interactivelyâ ¦.run swinstall and then ...
When asked to "Specify Source", put "/cdrom" in the "Source Depot Path" field.

!!!!!IMPORTANT!!!! Change the Options as follows:

Options->Change Options

Select:
Reinstall files even if same one already there
Reinstall filesets even if same revision exists

scroll down AND de-select:
Autoselect dependencies when marking software

!!!!!IMPORTANT!!!!

Double-click on the English HP-UX Run-Time Environment Product

Scroll down to and select (single-click) the "SystemAdmin" fileset
Actions->Mark for Install

When told that "Some software currently marked for install depends on unmarked
software", click on OK.
Actions->Install (analysis...)

After analysis successfully completes, you can click on OK to install.
Then re-install the latest cumulative SAM patch(es).

latest 11.11 patch for SAM is PHCO_28123

If ur OS is not 11.11 the find the latest patch using the below link:-

http://patch-hub.corp.hp.com/wtec/catalog/

[Yashwant]

just copied the default sam db files located /usr/lib/sam area to /etc/sam/db directory.

or

Prepare the HP-UX Core & Install CD (the same version with your OS) and re-install just the SAM fileset.

Check the url below :

rcfaxsam001 - Steps to Reinstall SAM (docID : rcfaxsam001) :
http://www1.itrc.hp.com/service/cki/docDisplay.do?docLocale=en_US&docId=200000080069596

Reinstalling sam(1M) on 10.X (docID : DY025023) :
http://www1.itrc.hp.com/service/cki/docDisplay.do?docLocale=en_US&docId=200000080041895

Consider this as your last resources.

Hope this information can help you

[avizen9]

HI
Thanks for such detail info i will try this tomorrow as server is in Data Center and i need to put CD there,
but can you please tell me why i am not able to change password for any of user and getting error as below

passwd arvpatel
Changing password for arvpatel
Sorry.

even for root user also i am not able to change password.

[Grayh]

And for you Password Issue check this
---------------------------------------
This problem has been known to occur on systems
where the /tcb/files/auth/system/default file
for root had a duplicate password entry.

Verify that the rear eno duplicate entries in the
default file in order to resolve this issue.

[avizen9]

HI i could not found below file in my server
/tcb/files/auth/system/default file

i just go through pam.conf and its seems fine, there is no additional line all having default settings.
please advice.

[Bill Hassell]

> ll -d /etc /etc/passwd
> drwxrwxrwx 26 bin bin 7168 Mar 27 17:04 /etc
> -rwxr-xr-x 1 root other 7940 Mar 27 17:04 /etc/passwd

Wow, these are completely wrong permissions. Someone has been hacking at your system and really messed up security. If you are the system administrator, I would immediately run an swverify command and print out the swjob listing at the end of the output. There may be a *lot* repair steps.

The correct settings are:

# ll -d /etc/passwd /etc
dr-xr-xr-x 32 bin bin 8192 Mar 27 22:53 /etc/
-r--r--r-- 1 root sys 1869 Mar 7 20:57 /etc/passwd

To fix /etc and the /etc/passwd file:

# chmod 555 /etc
# chmod 444 /etc/passwd

This should fix the passwd problem.

> $ ll -d /tcb
> /tcb not found

This just indicates that you do not have a Trusted System which is an enhanced security setting.

[avizen9]

Hello Bill Hassell
thanks very much for such good information, i will try it out and let you know the result.

[Bill Hassell]

Just a note about running swverify -- you do need to specify the filesets to check by using \* as in:

swverify \*

At the end of this listing, there will be an swjob command. Just run that command as shown to get a list of the problems.