hp unix 11 password are not required

[walid salah faroun]

I've inherited a system that does not require any passwords when login. Can somebody let me know what do i need to secure that?

[Geoff Wild · Accepted solution]

No passwords? What users are there? Check /etc/passwd

Go through them, and set password - either from sam or command line:

passwd userid


Rgds...Geoff

[walid salah faroun]

i did that, but still no password is prompted even root. thanks for the help

[Hazem Mahmoud_3]

If you "su" to any user from root, it will not prompt you for a password. What you can do is "su" to a user from root (will not be prompted for a password), and then try to "su" to root from that user. At that point it should prompt you for a password if they are setup.
If you still aren't getting prompted, then it probably has to do with the password file. Is it a trusted system?

-Hazem

[Hein van den Heuvel]

Check out the .rhosts files?

Hein.

[Marvin Strong]

Wild guess here.
check your /etc/pam.conf file.

login should have:
auth required
account required
session required
password required

in the appropriate sections.

[walid salah faroun]

Thanks for all the help.
Here is what I've have so far, I am still getting the same problem

Hazem - The system is not trusted
there is no .rhost file
/etc/pam.conf file is ok -every thing is tagged required.

Di you think I can blow away the passwd file and recreate it using some tool?

[Geoff Wild]

Let me get this straight - if you open up a new telent window, and telnet to this machine, if you enter root as the login , hit enter, you get no password prompt?

Rgds...Geoff

[walid salah faroun]

yes - that's the problem. I telnet and login as root without password prompt. I think the passwd file might be corrupted.

[Jeff Schussele]

Hi Walid,

In the /etc/passwd file is the second field null = i.e. like

username::UID:GID:GEICOS:HOME_DIR:SHELL

If so, then you can just hit at the PW prompt because, in fact, there is NO PW.
Then all you need to do is set PWs for the users.

Rgds,
Jeff

[Geoff Wild]

Is there a /etc/hosts.equiv??? with just a + sign in it?

Run pwck on your /etc/passwd file

If it is bad, to recreate it - Boot from recovery CD and copy standard
passwd file to /etc

You will lose all the users....

You will have to set the root password before you reboot...



Rgds...Geoff

[G. Vrijhoeven]

Hi,

If it is not the PAM file, and you tried resetting the passwd file. I do not know a tool to recreate the passwd file. If you have an other server you could copy that file. You can also use vipw and delete all unnessesery lines. If this does not help I would go for a clean install. On a system like that there can be a lot more not configured correct.
Is this possible, no apps running?

Gideon

[walid salah faroun]

Thanks Jeff - I did changed the password for the root and now I am getting the password prompt.

Thanks everybody

[Marvin Strong]

I would make a copy of the passwd file, before you replace it tho. So you have something to reference, when recreating your users.

However, I think I would get a good backup of application data, and do a fresh install.

copy the current passwd file to another machine for reference after you rebuild.

I wouldn't trust that machine, in my environment, how can you guarantee system integrity?

Of course this may not be possible.