Problems with su - password expired

[Bernardo Bonifacio]

I need to su to users whose passwords are expired.
In hp-ux 10.20 I can do it but in hpux 11.00 I can?t.
Somebody can help me?

Thanks,
Bernardo

[Mark Fenton]

Not a direct method, but in SAM you can disable their account (their password expired, they can't get in anyway!) and then reenable it. Result you can set their password (to a temporary value, of course :), and then allow them to log in and change it.

[Michael Tully]

Hi,

Is the HP-UX 11 system trusted? If so password expiry can be handled differently. You may want to reset the users password by using this.
Only if it trusted, and after enough unsuccessful attempts the account maybe in fact locked.

# /usr/lbin/modprpw -k (to unlock the account
# /usr/lbin/modprpw -x (to reset the passwd. This return a number which can used for the user. The user will be forced to change the password the first time around.

hth
Michael

[shailesh_5]

Hi
Try editing the /etc/passwd file. Remove the password field. You can log in to the user login without password. You can assign new password.

SB

[Calvin Bebermeyer]

I might be misunderstanding the question.

su user
works on my system with 11.0 in trusted mode when you are root and the passwd is aged/expired.

Perhaps I need a little clarification?

calvin Bebermeyer

[Bernardo Bonifacio]

I give you more information about my problem.
I set expiration to the root password and I restricted root to login only from the console. So, I only can use root doing a su to root. Sometimes the root's password is expired and I can?t su to root.
One time, I configured Trusted Systems,but now I have uninstalled it. So I don't use Trusted Systems.

[Michael Tully]

Hi Bernado,

You say you had trusted system set up before? How did you un-install it? Did you use 'tsconvert -r' command to do this? It seems possible that the system has not completely 'untrusted itself'. If you can maybe try and trust the system again and then untrust it using the above. Make sure you have a
valid backup first.

One thing I would like to suggest is to implement a well know tool such as 'sudo' which is widely available from http://www.courtesan.com/sudo/
This tool when implemented properly replaces the need to use 'su - root'. It will assist in
accidently disabling the 'root' account. You can also reset the root password using this utility because you will be the root account.

HTH
Michael