pwck question

[Ken Penland_1]

Ok, I have been tasked to clean up any issues that come from running a "pwck -s" on our HPUX 11.00 trusted systems...got em all pretty much cleaned up, but one system gives me an error I dont understand.

has anyone ever seen pwck come back for every single user a message that says:

"cannot have a password set on the account" ?

I dont really understand this...all the accounts seem fine, can change passwords and all, but why is it reporting this error?

*BOGGLE*

[Karthik S S]

I hope the following link will answer your question.

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=210718

-Karthik S S

[Paula J Frazer-Campbell]

Ken

This may help:-

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=210718


paula

[Karthik S S]

Paula, I think our internal search engines are in sync :-)).

-Karthik S S
No points for this please....

[Ken Penland_1]

yeah, saw that one...I always try to do a little ITRC research before asking a question...in that thread, his problem was the u_pswduser field...well not the case in mine...(I dont even see a u_pswduser field in my auth files, could that be a problem?)

Here is a sample auth-file:

mmouse:u_name=mmouse:u_id#43:\
:u_pwd=encryptedpasswordhere:\
:u_auditid#43:\
:u_auditflag#1:\
:u_succhg#1069761070:u_unsucchg#1051274558:u_suclog#1071165941:u_suctty=pts/ta:\
:u_unsuclog#1071165941:u_unsuctty=pts/ta:u_numunsuclog#0:u_lock@:\
:chkent:

[Jeff Schussele · Accepted solution]

Hi Ken,

Is this a Trusted system?
If so I'd check /tcb/files/auth/system/default and/or the /etc/default/security files for a setting that's forcing the system to believe that no user should have a PW.
I've never seen this, but suppose it may be possible.

Rgds,
Jeff

[Paula J Frazer-Campbell]

Karthik, I think our internal search engines are in sync :-)).

- Paula
No points for this please....

[Ken Penland_1]

Thanks Jeff!

Ya didnt really give me the "answer" but pointed me in the right direction...I guess I missread that other thread, or they worded it incorrectly....basically I compared the /tcb/files/auth/system/default file on a system that worked fine and the problem system, and noticed that on the problem system the field was MISSING from it...so I added "u_pswduser=root" to the default file and it fixed it right up...thanks all :)