root login problem

[Rick Urban]

As of recently, most of my HP-UX servers occasionally have this error when I try to su to root via SSH: "Account is disabled - see Account Administrator". I know I type the correct password. I have to login as root on the console and then it is fine. I checked the /tcb/files/auth/r/root file and it looks normal. What causes this?

[Muthukumar_5]

Yes,

If you convert the system TRUSTED one then you can able to do SU to root user. It will display that error. You can use su. You have to separatly do telnet or ssh or rlogin to root user.

--
Muthu

[Arunvijai_4]

It is expected behaviour of trusted system

-Arun

[Muthukumar_5]

Refer su man page:

Except for user root, users on a trusted system cannot use su to
change to an account that has been locked because of expired passwords
or other access restrictions.

--
Muthu

[Rick Urban]

I don't understand. They have been trusted systems and this has worked in the past. We do not permit root logins. Everyone has to su to root.

[Devender Khatana]

Hi,

This happens when the root account is actually disabled. When root account is disabled then it will allow logging as root only at console. Is root really disabled?

HTH,
Devender

[Arunvijai_4]

Hello,

Can you check these ?
/var/adm/sulog and /var/adm/syslog/syslog.log

-Arun

[Arunvijai_4]

Hi,

You can enable the account by following the steps given here,

http://h21007.www2.hp.com/dspp/tech/tech_TechSingleTipDetailPage_IDX/1,2366,7570,00.html

-Arun