root account disabled! - how to disable this feature?

[JI HUI]

We have HP-UX11.11, somehow, we noticed that the user account root could be disabled if there are three failed login attempts. But, in another HP-UX 11.11 machine, we did not have such problem.
Is it so called trust mode in Hp-ux? how can I disable this feature?

Thank you.

[bhavin asokan · Accepted solution]

hi,
you can login as root and enable it through console.

go to sam->accounts for users and groups->users

select root

go to actions->modify users security policies-> general user account policies->

set account life time to none , unsuccessful login tries allowed to more than 100,max inactivity period disabled.

for all the users you can set it or individually.

regds,

[Peter Godron]

Hi,
looks like a trusted system.
Have a look at what user profiles you have set up. SAM ->Accounts -> Users [Action : User Templates].
Your root user may have been assigned a wrong profile.
You should be able to log into the console and do a "modprpw -k root" to reset.
Regards

[JI HUI]

thank you for the advice.

By the way, how can I convert a trusted system to a "normal" system? As we run the server for testing only. Too much security features do not help.

thank you.

[bhavin asokan]

hi,

see the document .it will help you for understanding about trusted system.

regds,

[Hoang Chi Cong_1]

Hi man
If you want to convert a trusted system to a "normal" system.
The easies way is using SAM:

SAM--> Auditing and Security-->Audited Events--->Action-->Unconvert the System

When unconverting the system, it will move user's password back to the /etc/passwd file and removes the /tcb directory structure

Goodluck!
HoangChiCong

[bhavin asokan]

hi,

see the following link to convert in to non trusted mode.you can search forum for more docs.

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=319769


regds,