password expire each time login to trusted system

[AHMED ABDOU]

Hi

We have workstation B2000 with HP-UX 10.20 which is trusted system.
The password expiration and account locking are all disabled for the root, but each time when we rlogin from any system it till us that password is expired and enter new password.

For Example

Trying...
Connected to testbox.hp.com.
Escape character is '^]'.
Local flow control on
Telnet TERMINAL-SPEED option ON

HP-UX testbox B.10.20 U 9000/811 (ttypa)

login: dave
Your password was changed by root on Thu Jan 1 00:00:00 GMT 1970
Password:
Last successful login for dave: Mon Aug 5 14:56:14 GMT 2002
Last unsuccessful login for dave: NEVER
Your password has expired.
Old password:


Can you please help
Best regards

[Tom Geudens]

Hi,
-- password expiration and account locking are all disabled for the root --
I might misunderstand this, because your example is about user "dave", not root.
The default on a HP-UX 10.20 trusted system is that "Password Aging Policies" are enabled for all users.
If you want to change this for user "dave", use SAM, select the user, Actions -> Modify Security Policies -> Password Aging Policies -> Disable.

Hope this helps,
Tom

[Cheryl Griffin]

Tom: That example was copied from "Password aging is not set but login returns "password expired" DocId: USAMKBRC00010273 from the Knowledge Base and not an example from the problem system.
***

That document says to go look at your SAM log to see what might have been done to the user. Did you find anything significant in the SAM log? For instance did SAM run only 1 modprpw command and if so, what options were used?

In addition do you have another 10.20 system with similar aging/lock/inactivity settings that this works on. If so, compare /tcb/files/auth/system/default from both systems.

Check the SAM patch: you want to have the latest patch installed: PHCO_22268
# swlist -l fileset -a state |grep -i sam
The patches should state "configured".

Cheryl

[Darren Prior]

Further to Cheryl's advice on SAM patches, I'd suggest that you ensure you have the latest patches for passwd, login and also PHNE_20748 (for rlogin, remsh commands)

regards,

Darren.

[Michael D'Aulerio]

First Time User. Hi all.

We have a number of HP9000 systems running HP-UX 10.20 in our lab. Some of the systems have exhibited the exact symptoms described. We are unable to remotely login, but we can login locally using DCE login. The problem is seldom seen but when it does come up all users are locked out from remote logins including the root user. Disabling password aging has no effect. There is a command which root can run to unexpire all user passwords on a trusted system:
/usr/lbin/modprpw -V
Since the login process in the example indicated that the password had last been change in 1970, this may offer some relief.

Mike D'Aulerio