1833301 Members
2951 Online
110051 Solutions
New Discussion

Password Related

 
Indrajit Bhagat
Regular Advisor

Password Related

Hi,

How to unlock an user account using command line in untrusted system ?
9 REPLIES 9
Asif Sharif
Honored Contributor

Re: Password Related

Jaime Bolanos Rojas.
Honored Contributor

Re: Password Related

Indrajit,

Easiest way, go to sam and go to users and then unlock the account.

Regards,

Jaime.
Work hard when the need comes out.
Raj D.
Honored Contributor

Re: Password Related

Indrajit,

The easiest way to release a password lock in non-trusted system , is to use SAM, SAM ==> Accounts ==> Users & Groups , choose the User and go to action field and choos "Re-activate user" ,

You can also release by replacing the * in the password file of that user with null value, but that will be insecure.

Cheers,
Raj.
" If u think u can , If u think u cannot , - You are always Right . "
Coolmar
Esteemed Contributor

Re: Password Related

Please see A. Clay Stephenson's response in the following thread:

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=1044359

"for an untrusted system, locking via the passwd command is done by replacing the user's passwd hash with '*' although any non-null, non 13 characterslong string would work as well because that would be an impossible to match hash. By convention, the '*' character is used to lock the account; it is then unlocked by assigning a new password (or by entering a null value in the passwd hash field of that user's passwd file entry -- but that would be terribly insecure until a real password were entered)."
Yarek
Regular Advisor

Re: Password Related

hello,

Please check

/usr/lbin/modprpw -k



grds
rmueller58
Valued Contributor

Re: Password Related


# /usr/lbin/modprpw -k username

If you want to see WHY the account is locked:

# /usr/lbin/getprpw -m lockout username

Sp4admin
Trusted Contributor

Re: Password Related

Hello,

To check if the account is locked you use the getprpw command.

#getprpw -r -m lockout userid ***status
#modprpw -k userid *****unlock account
#modprpw -x userid *****change passwd

sp,
Patrick Wallek
Honored Contributor

Re: Password Related

If the system is NOT trusted (untrusted) then the modprpw and getprpw commands will not work. Those commands work on a trusted system only.
Raj D.
Honored Contributor

Re: Password Related

Indrajit suggest you to review your threads once posted.
" If u think u can , If u think u cannot , - You are always Right . "