HPUX 11 & Trusted Mode

[kirk humphries]

Hi All,

Wondered if you could assist me. We installed HP-UX 11.0 on a HP5000 workstation and failed to change the root password prior to convertion to a trusted system.

Following this it is not possible to change the root password either from SAM or by booting into single user mode. I am still able to log into the workstation.

Can anyone please provide information on the best way to resolve this issue i.e. be able to change the root password.

Thanks

Kirk

[Peter Kloetgen]

Hi Kirk,

did you boot into a "real" singel user mode? ( at ISL> hpux -i -s ) Do you have restrictions for changing passwords in a specified time?
Please check this out first.

Allways stay on the bright side of life!

Peter

[Stefan Farrelly]

Booting in single user mode by interrupting the boot sequence, interacting with IPL and typeing;

hpux -is (;0)/stand/vmunix

should always allow you in as root without a password, then you can reset it. Or you can boot in lvm maintenance mode (hpux -lm), then activate vg00 and then mount / and reset roots password that way.

[Peter Kloetgen]

Kirk, hi again,

if you secured your console, and you also don't have that password, it's not so easy to get into system then:

you have to jumper a SCSI- device to the same target as your boot- disk. This causes a SCSI- conflict, which resets the secured console.

Allways stay on the bright side of life!

Peter

[Steven Sim Kok Leong]

Hi,

You must have convert to trusted when your root password was not meeting the trusted password policies (such as minimum number of characters etc).

To fix that, unconvert your system first, change your root password for an okay password (abide by trusted password policies), then convert it to trusted again.

# /etc/tsconvert -r
# passwd
# /etc/tsconvert

Hope this helps. Regards.

Steven Sim Kok Leong

[Duncan Edmonstone]

So you can still log in as root, but can't change the password? Was you root password more than 8 chars long? Try typong in just the first 8 chars when prompted by passwd.

HTH

Duncan

[kirk humphries]

Hi All,

Thanks for your replies and suggestions.

Steven, that is what happened. I will give that a go and see if it works.

Regards

Kirk

[Keith Buck]

PHCO_23224 (PHCO_24839 recommended) also fixes some problems like this. Steven's workaround is correct.

[Martin Johnson]

Before you go an untrust the system, why don't you check the file:

/tcb/files/auth/r/root

If it has a line with u_pwd=password, for example:

":u_pwd=FLxujLI:\"

just delete the line. Root will no longer have a password, so you should be able assign a new password.


Marty