not allowed to run passwd

[tigm7103105q1]

Hi! I'm Marcos, and I need your help.

I've a HP9000 D270 and Operating System HP-UX 10.20 in Trusted System (TCB), when I assign an administrative number a any user with "/usr/lbin/modprpw -x username" and they enter for firts time, the System say follow:

Your password was changed by conif on Thu Jan 1 00:00:00 GMT 1970
Last successful login for prueba: Fri Jun 13 21:59:32 GMT 2003
Last unsuccessful login for prueba: Fri Jun 13 22:17:57 GMT 2003 on ttyp9
You don't have a password.
Enter your user number here: 613
Last successful password change for prueba: NEVER
Last unsuccessful password change for prueba: Fri Jun 13 18:03:17 2003

passwd: not allowed to run passwd
Login aborted due to no password.

[Steven E. Protter]

Darn I though I replied to this thread.

There is a solution linked in this thread.

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0xddf6585fae8bd711abdc0090277a778c,00.html

Also, check the permissions on passwd

That program needs suid root so it can update a file, /etc/passwd and the tcb files owned by root.

Also, as root, attempt passwd prueba

That should work.

sEP

[Michael Steele_2]

For different password security utilities with trusted systems use SAM.

"Account for users and groups" -> "users"

Select "root" (or others accounts you want to
modify), select "Action"->"Modify security policies"->"Password aging". Or modify as "disable"

[Sridhar Bhaskarla]

Hi,

As Steven suggested, look at the permissions on the passwd executable. It should have a suid bit set.

I have seen trusted systems bumping out errors to ordinary users due to no passwords. Instead of using -x with modprpw, do

Just enabling in case it is disabled
#/usr/lbin/modprpw -k user
#passwd user

Set some initial password and let he user use it login and change the password.

If it still does not work, then it is most probably due to the permissions on the password executable.

-Sri

[Caesar_3]

Hello!

Check your permissions of passwd that it
have suid on, maybe you or some one else
change it.
The passwd must have the suid because it made
operations that only root can make.

Caesar