root locked out from console and su.

[Henry F. Johnson]

We have a trusted HP-UX 11.23 rx1620 server, which we have configured sshd, tcpd. We cannot login to the server as root using SSH, telnet or on the console. One of the sysadmins has a window open on the server, so we can get in without taking the server to single user mode. The file /etc/securetty has been configured with console as the only entry in the file.Yesterday we could ssh into the system, today we cannot. I know it seems strange, but everything we try is blocked from allowing root into the server other than by using the window which we have open.

[Patrick Wallek]

What, if any, error messages are you getting when you try to connect?

Is the account just disabled? Have you tried enabling it?

To enable:
# /usr/lbin/modprpw -k root

To check its status:
# /usr/lbin/getprpw -m lockout root
If any of the digits in the numeric string are '1' then the account is locked. Check the getprpw man page, the lockout section, for an explanation of each column in the output.

[Steven E. Protter]

Shalom,

There is a root password file in /tcb

/tcb/auth/files/r

Null out the root password line, which should be obvious and root password access will be restored.

SEP
Where the heck has ITRC been all day?

[Henry F. Johnson]

The password did not meet the password requirements we had enabled so it would not allow us to login until we used the techniques that both of you provided. Thank you