Operating System - HP-UX
1833758 Members
2602 Online
110063 Solutions
New Discussion

passwd with trusted system

 
mike mcclernon
Occasional Contributor

passwd with trusted system

We have implemented trusted systems on a server and are now unable to change the users passwords. We have tried using the passwd command as well as SAM. We are using the root id.

Thank you in advance for any assistance you can provide.
4 REPLIES 4
Victor BERRIDGE
Honored Contributor

Re: passwd with trusted system

Hi,
There is the possibility to use the restricted sam (sam -r) to grant some users privileges such as of adminitering users accounts, and so if not change the passwd, reset the passwd on trusted systems using sam

Good luck

Regards
Victor
Victor BERRIDGE
Honored Contributor

Re: passwd with trusted system

Hi again,
Since your system is trusted now it would be wise to grant also someon the right to shutdown the box in case the root account get deactivated or someone has changed to passwd without you knowing...
Just thoughts

all the best
Victor
P.S.
Just to check I gave a try on a trusted system, if you are not root it askes youfor the previous passwd and if you are root:
# passwd vbe
Changing password for vbe
Last successful password change for vbe: Tue Mar 16 17:53:07 1999
Last unsuccessful password change for vbe: Tue Mar 16 17:48:09 1999

Do you want (choose one letter only):
pronounceable passwords generated for you (g)
a string of letters generated (l) ?
to pick your passwords (p) ?
Karthik_2
Regular Advisor

Re: passwd with trusted system

Mike,
You can try
/usr/lbin/modprpw -k
to enable the account
/usr/lbin/modprpw -x
to reset the password

Let me know what error you get when trying these commands.

Cheers
Karthik...
Its ALL in the MATRIX
Philip Chan_1
Respected Contributor

Re: passwd with trusted system

Try the password check command also, that should be

pwck -s /* or pwchk, can't remember exactly */

that will verify the validity of /etc/password and the user account files under /tcb, this way you know at least the problem wasn't came from data.

~Philip