root password disabled

[attilio_1]

Hi at all

I am passed to a trusted system.
So any user has can atetempt only tre times
to insert password, after is disabled.
This is true olso for root and this is the problem becouse someone has tried to log with root and now is disabled also root.
How can I rehabilitate root password
and avoid this problem in the future ?
Thanks

[Shaikh Imran · Accepted solution]

Hi,

Try to first login as 'root' from the console. If successful, then unlock the account,
run:# /usr/lbin/modprpw -k root

If you can't then you will need to boot
into single-user mode.Interrupt the boot sequence and from the ISL prompt:
ISL> hpux -is
Wait for the prompt and change
the passwd and unlock the account.


Regards,

[bhavin asokan]

reboot in singleuser mode and use sam to enable it. in sam go to accounts and users option.
for second i think the only option is to disallow the root access other than console.

regds.

[R. Sri Ram Kishore_1]

Hi,

Take a look at these threads:
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=566471
bizforums.itrc.hp.com/cm/QuestionAnswer/ 1,,0x2ec453921f1ad5118fef0090279cd0f9,00.html

HTH.

Regards,
Sri Ram

[Shaikh Imran]

Hi,

On trusted system, three unsuccessfuly logins attempts will lock the account. This is controlled by umaxlntr.

/usr/lbin/getprdef -m umaxlntr
/usr/lbin/modprdef -m umaxlntr=5

Now 5 unsuccessfult logins attempts will lock the account

see man getprdef & modprdef for more details.


Regards,

[Muthukumar_5]

It is critical problem on system with trusted system, because when ever some user's want to hack the system then they will be using duplication IP-Address and try to login as root. It will lock directly without caring anything there.

IF you want to avoid this, then try to make users to login with only their user id not with root user ( console ) there. We can do this with /etc/securetty file. ( man login )
-- /etc/securetty --
console
---------------------
chmod 400 /etc/securetty

But currently you are having this problem then single user mode is the key to open super user lock there.

Go to the console prompt and stop at boot process and start with hpux -is to go to super user mode. unlock the root user and put securetty file there to avoid future problem.

[Muthukumar_5]

Attachment contains trusted system administration document with man pages and FAQ's there.

HTH.

[Sunil Sharma_1]

Hi,

You will not be able to do normal shutdown or reboot as your root login disabled so either power recycle or got o gsp login and reset.

Be sure to shutdown all applications and database using application user id. Otherwise some file system may get corrupted.

Sunil

[Sean Dale]

You can reset the password by cd editing the file called root in/tcb/files/r

Delete everything after the equal sign up to (but not including) the colon on this line->

:u_pwd=

save the file then use passwd to set the password