Cannot unlock user account

[Shibin_2]

Hi,

I am facing a strange problem. The system is HP UX B.11.11 and it's non-trusted system. Cannot login with the user id, have changed the password, but not taking. Checked through SAM, the id is neither disabled not locked. Changed the password to different many times, cannot login at all. Even removed the id and recreated, it's not accepting the new password as well as old password.

Anybody has solution ?

[Jeeshan]

Hi Shibin

Is this happened only for any particular user or others are affected too?

[Shibin_2]

some of the users affected, but not on the same box, different boxes using same OS and patch level.

[Jeeshan]

use th following commands


usermod -x password_lifetime=0 username
usermod -x grace_limit=1 username

[Shibin_2]

Cannot use -x. I used it first, with the following command and received the error as follows:

# usermod -x administrative_lock_applied=0 klcc
Unrecognized Option 'x'

[Jeeshan]

then use SAM.

[Shibin_2]

What option to use through SAM ?? In Security section ? SAM says, ID is not locked or de-activated.

[Jeeshan]

check in security section.

[Anshumali]

I hope there are no @, # similar characters in password. Check password construction requirement in man passwd, man stty

[Shibin_2]

Sure, there are no @ and # characters.

[Shibin_2]

Ahsan, could you please more specific ?

It's not trusted system and there is no /tcb/files/auth and if existed in somewhere else ( I mean /usr/newconfig/tcb/.... ) there is nothing related to any users.

[Sajjad Sahir]

Dear Shibin

can u give us passwd -sa out put
and cat /etc/passwd file out put

thanks and regards

Sajjad

[Shibin_2]

I am giving you only the problematic user's detail.

here is the output

1. passwd -sa

klcc PS

2. # grep klcc /etc/passwd
klcc:ee96OWIrmrf4A:199:302:KL CC :/home/klcc:/usr/bin/ksh

[Sajjad Sahir]

dear Shibin
klcc ps

which means u userpasswd is not locked, can u change the shell in u /etc/passwd for the user klcc let u try once more for this user

thanks and regards

Sajjad Sahir

[Shibin_2]

I have changed the shell, but no way. I don't understand, even if the user is not locked, then why it is not accepting the password ?

# grep klcc /etc/passwd
klcc:ee96OWIrmrf4A:199:302:KL CC :/home/klcc:/usr/bin/sh

[Sajjad Sahir]

Dear Shibin
if it is not working in other shell also
i think u passwd has some special meaning character u have to remove this user and reset the new passwd for the user


thanks and regards
pls revert back
sajjad

[Shibin_2]

We were earlier using the password ZAQ!2wsx and after changing the shell I given the new password as VFR$5tgb. This too not accepting. Secondly, there is an application PWPlus, which won't allow the last 3 passwords, dictionary words, any characters that is in your user name etc. So, the above mentioned kind of passwords only is the best possible passwords for the ID. But that too not taking, there is something wrong with the system.

Hope somebody can give the answer.

[Yogeeraj_1]

hi Shibin,

can you perform the following test?

1. Create new user klcc2
(home directory: /home/klcc)

2. Note down the usrid and groupid of user klcc.

i.e.
usrid : 199
groupid: 302

3. Delete user klcc

4. Modify your password file:
(first, you may wish to do a backup of your passwd as a precautionary measure)

Change the usrid of klcc2 to 199 and
groupid to 302

5. retry the password commands that are failing.


revert!
kind regards
yogeeraj

[Shibin_2]

Creating a new user doesn't give any problem. Same password I given, accepted and logged in. But existing one, no idea, what is happening here :)

# grep klcc /etc/passwd
klcc2:V492rB2d7i2a2:186:302:KL CC - 2:/home/klcc2:/usr/bin/ksh

[Jeeshan]

did u check the /etc/default directory for any entry?

[Shibin_2]

It has the following entries.

# ll /etc/default
total 8
-r--r--r-- 1 bin bin 11 Nov 8 2002 fs
-r--r--r-- 1 root root 626 Jul 14 2004 nlspath
-r--r--r-- 1 bin bin 8 Jun 19 2001 tz
-r--r--r-- 1 bin bin 84 Apr 17 2004 useradd

[Sajjad Sahir]

Dear Shibin

can u check pwck for passwd consisteny

revert please

Sajjad

[Shibin_2]

I checked consistency. No problem found on this id.

[Rasheed Tamton]

Hi,

I think the dollar sign in your passwd itself causing the problem:

VFR$5tgb

either you escape the dollar sign with a backslash (VFR\$5tgb) when you login or change the passwd without dollar sign.



Rgds.

[Sajjad Sahir]

ok
u are telling if u are giving the same passwd to another user it is taking only u are facing in this user only am i right?

thanks and regards

sajjad