Ran tsconvert and root access is disabled----help!

[Mike Kidwell]

Here's exactly what I did:

[11] % su root
Password:
# ./tsconvert
Creating secure password database...
Directories created.
Making default files.
System default file created...
Terminal default file created...

logged off of root to do testing and when trying to log back on received:

[36] % su root
Password:
Last successful login for root: Thu Nov 9 17:25:13 CST6CDT 2000
Last unsuccessful login for root: NEVER
Your password has expired.
su: Password for root has expired. Choose new password and try again
su: Sorry
[37] % su root
Password:
Last successful login for root: Thu Nov 9 17:25:13 CST6CDT 2000
Last unsuccessful login for root: Thu Nov 9 17:27:37 CST6CDT 2000
Your password has expired.
su: Password for root has expired. Choose new password and try again
su: Sorry
[40] % su root
Password:
Account is disabled - see Account Administrator


Help, Anyone?
Device assignment file created...
Moving passwords...
secure password database installed.
Converting at and crontab jobs...
At and crontab files converted.
# exit

[Kofi ARTHIABAH · Accepted solution]

Mike, you have to login as root from the console. Do not login as another user and su to root. Trusted mode automatically disables root logins from remote sites and if the passwd "expired" you will have to be at the console to change it.

After you have logged in as root, you can change your password etc.

If the machine is on a remote site, you have to get someone you trust to login at the console, and change the password.

[Vincente Fernandes]

Even if root id is disabled, you should be able to login from console. You could have tried to login from a different session for testing and keep the current root session in cases like these when the root id is disabled.
Note: You want be able to login as root other then console when if there is an entry of "root=/dev/console" in "/etc/default/su" file.

[Wodisch]

Hello,
in the directory "/usr/lbin" you will find some programs
with names like "modprpw". Those are the command
line tools for trusted systems. First login on your
serial console - NOT using CDE, or TELNET, or any
networking/graphics! That way your root-account
will be re-enabled.
If you have some other super-user account (UID=0)
logged in, try the command "/usr/lbin/modprpw -x root"
or "/usr/lbin/modprpw -k root"; one of the two will
complain about not beeing able to work for "root",
but the other will work and re-enable the account.
HTH,
Wodisch