ROOT Account Disabled

[Rafael Casero]

I currently changed the password for root and it changed it successfully, after trying to login 3 times it locked out the root account.

How can I reset the root account in a trusted env.

Or how can I access the /tcb/files/auth/r/root file to delete the string in single user mode.

I tried it but it told me does not exist.

Please HELP...

[A. Clay Stephenson · Accepted solution]

When you boot in single-user, are you saying that the entire /tcb tree is missing (in which case you are no longer a trusted system) or are you saying that /tcb/files/auth/r/root is missing? If the latter, then copy another user's file to /tcb/files/auth/r/root and then edit the file setting these fields:
u_id#0:
u_pwd=:
u_auditid#0:
u_lock@:


the other fields can be left as they are as long as this account is still valid.

[Rafael Casero]

I have the file and able to get to it.

I had to mount /usr and created a /var/tmp so I can load vi to edit the file.

Now the problem I'm having is that when I edit the String

:u_pwd=XXXXXXx:\ and remove XXXXXXx and save it, when I cat the file it still has the XXXXXXx entry.

[Michael Steele_2]

I'd only add running 'authck -p' to Clay's response. And 'tsconvert' from single user mode.

1. (tsconvert -r)untrust the system
2. reset the root password
3. (tsconvert)then re-trust the system

[A. Clay Stephenson]

Are you saving vi using ":w!" ?

[Rafael Casero]

Im using

"wq"

[A. Clay Stephenson]

By the way, you violated a fundamental rule when changing root's password or doing trusted/untrusted conversions or the like: Always be logged in as root in at least two sessions so that you can get yourself out of trouble almost as fast as you got yourself in. If you are logged in as root in at least two sessions, you very seldom have problems. If not, ... . It's another one of God's little jokes.

[Rafael Casero]

Your right,

I took it for granted....

[Rafael Casero]

When I try to run the tsconvert -r it does not reconize command in single user mode...

[Rafael Casero]

I was able to do it by the untrust, reseting the password and then trusting it again.

[Rafael Casero]

Thanks all for the info...

I'm in ............

Ralph