Console login

[muthamilan]

hi friends
Once again i need your help.i'm having hp-ux 11.In my HP-UX 11 console i can login as a root,but user id can't login on console.I think in hpux 10.20 remove /etc/securetty file then user can login on console.In hpux 11 what can i do?kindly guide me friends.

Thanks and Regards
S.Muthu

[Michael Tully]

HPUX 11 uses the same concept for logging in at the console for root. Yes remove /etc/securetty but you must be root in order to do so. Is a user account locked out?
If the system is trusted you can unlock an account by using

# /usr/lbin/modprpw -k

[Keith Bevan_1]

Hi,

/etc/securetty still works on HPUX 11.

creating a zero length file called /etc/securetty will prevent the root account from being accessed directly from any terminal line (including the console).

However the users can still use the console for other logins and use su from their own account in the unlikely event that they know the root password.

Keith

[muthamilan]

Hi Michael

But i didn't see /etc/securetty file on my hpux11.but user can't able to login in console.
root user only able to login on console.

[Michael Tully]

what if any messages are being received by the user when they try to login? This might help us identify the problem. Is this account being used by an operator or the like??

[Keith Bevan_1]

Hi,

One additional item to check is :-

Do you have the file /var/adm/inetd.sec

If so review its contents in relation to the advice and usage detailed on the man page inetd.sec.

Keith

[muthamilan]

hi friends
while user login on console then no error message.that time system once again goto authentication menu i.e., once again ask user name and password.if i give root user id and password then it will goes normally.
i didn't see /var/adm/ined.sec* files.
kindly guide me friends.

[Rainer von Bongartz]

Is this a trusted system ????

If yes check to see if there is a line

console:t_devname=console:t_maxtries#777:chkent:

in /tcb/files/ttys


Regards
Rainer

[muthamilan]

Dear Rainer
No it's not trusted system.

Thanks and Regards
S.Muthu

[Massimo Bianchi]

Hi,
i suspect an hand-made security.

login from the console and check all the
/etc/profile
.profile
.login

to see if there is a check against the tty.

i thik of a user exit to prevent root from logging in..

Massimo

[yogesh_4]

Dear Muthu ,

/etc/securetty is not generated bydefault when system is getting installed. We have to create it manually. Also in your case just check whether /var/adm/inetd.sec file exists and any login is restricted in that. Also whether this is happening only from console or for telnet also other nonroot users can not login ?

[Kelli Ward]

Hi,
One annoyingly simple thing that got me once for a little while, no world read permissions for the /etc/hosts file.
You might want to check, just to be sure.
Good luck,
Kel