Root account locked in trusted computer base

[RK_7]

Hi all,

Here we have implemented TCB in our servers and now in one of our server root account becomes locked.even from console it is not getting login.When I try from console it is getting error as accout locked.We have enabled the option "Require Login Upon Boot to Single-User State".So we are unable to login to single user mode and login.Is there any way to unlock root password?

Regards,

[Steven E. Protter]

Shalom,

Options:

1) Console login should unlock root password.
2) Single user mode boot and passwd command if you know the password
3) Boot off a Core OS Cd and then manually edit the root password file

Tue May 2 21:21:41 2006:root@eilat /tcb/files/auth/r
[4299#] ll
total 16
-rw-rw-r-- 1 root root 297 May 2 16:21 root

Change:


root:u_name=root:u_id#0:\
:u_pwd=d7VvyqaVeTOfkep8pgqzkvT2:\
:u_bootauth:u_auditid#0:\
:u_auditflag#1:\
:u_minchg#0:u_exp#0:u_life#0:u_succhg#1139871189:\
:u_unsucchg#1131900593:u_pw_expire_warning#0:u_pswduser=root:u_suclog#11
46604899:\
:u_suctty=pts/0:u_unsuclog#1144601026:u_lock@:chkent:


to
# changing u_pwd line to null.

root:u_name=root:u_id#0:\
:u_pwd=:\
:u_bootauth:u_auditid#0:\
:u_auditflag#1:\
:u_minchg#0:u_exp#0:u_life#0:u_succhg#1139871189:\
:u_unsucchg#1131900593:u_pw_expire_warning#0:u_pswduser=root:u_suclog#11
46604899:\
:u_suctty=pts/0:u_unsuclog#1144601026:u_lock@:chkent:


SEP

[xcvzxvzxdv]

its simple just boot in single user mode and reset the password

[Chris Watkins_1]

My cheat, *if* you have Omniback, is to restore /tcb/files/auth/r/root
from a host where the root account is not locked, to the affected host.

Simply use the root password from the host you restored from. Presto!