Login Failed

[Roger Lavender]

Configuration:
HP-UX 10.20 Trusted w/Dec 2001 Updates

- /usr/bin/login is from PHCO_25591 dtd Nov 2001

- /usr/bin/passwd dtd Jan 1998

Problem:
User gets login failed after entering their password. We have checked the tcb encrypted password entry against the encrypted password and they match. The program to generate the encrypted password utilizes the internal UNIX encryption routines.

This is occurring intermittently on multiple servers.

[harry d brown jr]

Are you sure they entered their password correctly?

Once they have a failure, are they able to login on another attempt?

How are they attempting to login? rlogin, telnet, ??

have you checked the integrity of the tcb files?

live free or die
harry

[Roger Lavender]

Yes, we have actually typed the pw for the user to test the login.

No, once it fails the user continues to fail until the password is changed or the suthorization number is regened.

Login via telnet.

Yes, integrity visually verified.

"Kill the meat...save the metal"

Roger

[Bill Hassell]

Are these long passwords (more than 8 characters)? If so, long passwords are silently truncated in untrusted systems. So a password of: abcd1234verylong is the same as abcd1234 for untrusted. On a trusted system, entering abcd1234verylong results in a different password encryption than the 8 character version.

Also, does the user password contain any special characters such as @ or #? If so, then the password will probably work OK with su but not with login. This is due to the default stty values prior to a login where the backspace key does not erase anything but the # key does. You can change this setting by:

stty erase "^H" kill "^U" < /dev/ttyconf

Put this command into a startup script in /sbin/init.d and link to it from the runlevel directories. Here's a few more details:

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0x5936c4c76f92d611abdb0090277a778c,00.html