HPUX 11.00 : Trusted System Root Account Disabled

[LG Porter]

I have N4000 server running HPUX 11.0 configured as a stand alone "trusted" system. The root account has been disabled thus no one can login or su to the root account. What is the best method for resetting the root account on a trusted system?

[Rajeev Shukla]

Go to the console and login as root if you remember the password. The root though locked is allowed on console so login from there if you know the password. If you dont know the password then the only option left is to reboot the machine and go to single user mode and then change the password using /sbin/passwd

Cheers
Rajeev

[KCS_1]

Hi,

Go in to single mode and then
#cd /tcb/files/auth/r dir and vi the root file.

make :u_pwd=aKYOsuz9RLCQU:\ look like :u_pwd=:
Clear the field and Save the file

#passwd new_password

#init 3

[Scott Van Kalken]

if you reboot into single user mode, you'll either have to edit the root tcb file - or untrust the system, change the password, then retrust the system.

[Rajeev Shukla · Accepted solution]

Even if the system is trusted /usr/bin/passwd wont allow to change the password but /sbin/passwd does and you dont need to untrust and trust the system.

The best is coz you have just locked the root account go to console or use your webconsole and login as root and this is allow you to login then run
/usr/lbin/modprpw -k root
to unlock the root account

Rajeev

[Michael Elleby III_1]

Hello-

This one is easy if you have a recent backup of your 'trusted' system. On all my trusted systems I try to keep a recent backup of the root file system which includes the /tcb directory.

In addition, on my all of my systems (trusted or non-trusted), I have a unix workstation on my desk where I maintain a root login for just this occasion, as well as other administrative tasks.

Restore the file /tcb/files/auth/r from backup and your root account is restored. Voila! Well, hopefully you remember what the root password was when the backup was completed.

Mike-

[Michael Elleby III_1]

Hello-

Made a typo in the file to restore, the file spec should be:

/tcb/files/auth/r/root

Mike-