Console Login Not Allowed

[Joey Raj]

We are running on HP-UX 10.2 on a K-class. I am unable to login as root or superuser from the console enven though the system says console login allowed. But I am able to login as an ordinary user from the consloe and am also able to ftp to the server as an ordinary user.

I am totally unable to enter the system for admin work. SOmebody help me out.

[Victor BERRIDGE]

Hi,
Is your system trusted? Can you su root?
Check for the presence of a file called /etc/securetty and whats in it (If it exist you should normally find just a word: console

Regards
Victor

[James R. Ferguson]

Hi Joseph:

If you have the file /etc/securetty, then make sure that it contains an entry for "console". If the file is present its contents describe the devices from which root is allowd to login.

I suggest you login as a normal user and 'su -' to root to affect this change.

...JRF...

[Joey Raj]

I was able to login as a user but I could not su to root. I get the sorry message. Also I was unable to locate the /etc/securetty file.

[Joey Raj]

yes my system is trusted

[Christian Valet_2]

The 'sorry' message to me indicate that your root
password has been changed.

I suggest, you do a search on the ITRC forum for
'lost root password', there are some good suggestion
on how to recover it.

Hope there is a good one for you!

Chris

[Joey Raj]

THe password has not been changed because I am the only on e who has access to the console and admin. I hold the root password. is it possible to somehow write a securetty file in the /etc folder using an user account, or some other way.

[Joseph C. Denman · Accepted solution]

I suppose you don't have a different user with restricted sam access???

Looks like you might have to boot to single user mode and check things out. Modify the /tcb/files/auth/r/root file. First make a backup copy. Then, remove the encryped pwd between the = and the : on the u_pwd variable of the file. Change roots password. Then look at the file again to ensure it put the encryption back into the file.

Hope this helps...

...jcd...

[vladimir_1]

Check permissions of the root directory with ll -d /. It should be 755.

Vlad

[Wodisch]

Hello Joseph,
even if your case is solved now, next time try to switch
back to "text mode" (NOT the CDE-login) on your
console and then try to log in as "root" - having a
trusted system means, your root-count can be
de-activated by someone trying to login as "root" and
not knowing the real password. BUT only on the console
and ONLY in text-mode "root" is able to login, anyway,
and then the account will be re-enabled, automagically.
HTH,
Wodisch