i cant login:(

[wayne_20]

hello! my bros.this is my first time to come here.
i got such message when i were logedin:"account is disabled but console log in is allowed."
but i AM log in at CONSOLE !!!
why? how can i settle it?
P.S it is D class.HPUX 11.00

[Peter Kloetgen]

Hi Wayne,

i think you are working on a trusted system, you should login as root and then reenable your normal user account. Perhaps your password is expired or there exist system policies which automatically disable an account after a given period of time without login of the user.

Allways stay on the bright side of life!

Peter

[Donald Kok · Accepted solution]

If you really can not get in the console, you have to reboot and go to single user mode. From there you can edit the /tcb/files/auth/r/root file and remove the * from /etc/passwd, so trustedlogin is not used. Then you have control back over your system.

There are plenty of threads on ITRC where a detailed instructions is given.
Good luck
Donald

[Steven Sim Kok Leong]

Hi,

Since you can login at the console, you can re-activate the root account by either via the command line or easiest via sam (under Users and Groups):

# /usr/sbin/sam

Hope this helps. Regards.

Steven Sim Kok Leong

[Peter Kloetgen]

Hi Wayne,

to get into single user mode to be able to fix your problem do the following:

--> hit any key to discontinue booting process when you are called.

--> interact with IPL? y

--> IPL> hpux -is

you will then get into single user mode and be able to fix your problem.

Allways stay on the bright side of life!

Peter

[wayne_20]

Hello!everybody.
Hi,Peter,i'd like to know if it will be halt during i use the SAM to fix some problem about audit or something under the single user?
Hi,Donald.i wonder what option should i edit in /tcb/files/auth/r/root file?
thank you very much!!!

[wayne_20]

P.S:i am root.:(

[Misa]

In case anyone would prefer not to use SAM, the command is (as root):

/usr/lbin/modprpw -k root

(or any other username).

--Misa

[Misa]

Sorry, that would be the command to re-enable an account that was disabled.

[wayne_20]

thank you Misa. But it doesnt work.
is there something about trusted system?

[Misa]

The message that you list -- "account is disabled but console login is allowed" -- is the same thing I see on my trusted systems when an account has been locked out. And the modprpw command I listed is a command-line way to unlock such an account.

If you are using a trusted system, have walked over to the physical terminal that's attached to the system (or the web console), gotten to the "login:" prompt, entered "root" and your password and STILL can't get in, I'm stumped. I've definitely had my root account get locked out, but going to the console always lets me log in.

[wayne_20]

bingo!thank you Misa.i settled it with tsconvert -r.
but i wonder why the command tsconvert have prior to the command you list,modprpw?
both them have the function to enable the root account in the console...

[Donald Kok]

wayne,
in /tcb/files/auth/root by the option u_pwd you can remove anything between = and :\. root does not need a passwd now.

Then when your system is in level 3, you can use sam to adjust your root account.
But you can also use the modprpw command.

You can choose witch road you take any moment. Whichever looks the fastetst at the moment you take.

Other members: do you know why on trusted systems the console sometimes is disabled and the other times not. The trustedsystems manual state clearly that disabled root account always can logon at the console. Is it Ux-version dependent, or are some patches required, or is it machine-type depentend?
Greetzz
Donald

[Eric Crosby_1]

Wayne,

If you are using a GUI console, to login after you lock root, you need to choose failsafe mode. Then you will not have to boot into single user mode and jump through all those hoops.