problem changing root passwd on a trusted system.

[Mark Harshman_1]

Hi,

i recently converted a HPUX 11i system to trusted mode. I tried to change my root passwd today, and it fails. I tried it thru sam and get the following error. "invalid command syntax was used to invoke the command /usr/lbin/modprpw, failed to update protected password database for user "". I am able to change other ID's, just not root's. Any brilliant ideas??

thanks in advance.

[Andy Torres]

Not sure, so maybe the others here can confirm this, but I think modprpw on root has to be accomplished from the console.

Anyone?

[Mark Harshman_1]

i dont have this problem on similar servers i have, and they also run 11i, trusted mode. thanks

[Andy Torres]

Were you trying to generate a random password for root when you tried to reset it? I don't think it can be done for user root. Maybe that's your error message reason?

[Gavin Clarke]

I just use passwd

I take it you've read about the 8 character only trusted system er... feature.

What I mean is that untrusted systems only use 8 chars but will let you enter more, whereas trusted will pay attention to all characters and fail if it thinks the password is only 8 chars.

[Mark Harshman_1]

yes im aware of that. I was just using the "passwd" command to change it, but it fails. I then tried to issue a random passwd thru sam, and that is when the error message is generated. I have 15 other servers similarly configured that i have had no trouble changing the passwd on.

[Andy Torres]

You recently converted this system to trusted. I believe converting to a trusted system will expires all accounts. You may need to reactivate root login before you can reset the password. "modprpw -k root" at the console, I think.

[Andy Torres · Accepted solution]

Here's a helpful thread on this subject:

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=150549&admit=-682735245+1130511420897+28353475

[Andy Torres]

I keep finding good info on this. I'll just keep plugging it in this thread, maybe it'll be helpful to others down the road...

Patch PHCO_31314 addressed this error when resetting a deactivated user's login in SAM. After this patch, SAM will activate the login, then reset the password.

[Andy Torres]

Yet another helpful thread, referencing a problem when the root password was longer than 8 characters before conversion to trusted:

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=519910

[Sundar_7]

Mark,

Try changing the password using /sbin/passwd. /sbin/passwd bypasses all the checks.

- Sundar.

[Mark Harshman_1]

Thanks Andy, that thread helped me get it changed. My password before conversion was 9 char, and that appears to create an issue. Many thanks to all for the suggestions.

[Andy Torres]

Glad to help, Mark. I recently started working for a company that has a slew of security features on their systems, many of which are new to me. The forums have been the single best teaching method so far, so we both win.

Happy trails!