Root Password expired

[PedroMLG]

The root password expired and now I'm not able to change it. When su to root I receive the following notification but then it exit to the prompt:

$ su - root
Password:
Last successful login for root: Tue Jun 3 11:29:54 PWT0PST 2008
Last unsuccessful login for root: Tue Jun 3 11:00:08 PWT0PST 2008
Your password has expired.
su: Password for root has expired. Choose new password and try again
su: Sorry
$

An empty securetty file is set restricting the root access.

$ ls -l /etc/sec*
-r--r--r-- 1 root sys 0 Feb 14 17:46 /etc/securetty

From the other forums, it seems the only solution is to reset the system, enter in single user mode and then change the root password. Do you know a simpler way to change the root password?

[Deepak Kulkarni]

Hi,

Yes there is no other way, you can reset the root password only bringing down the system in to single user mode.

Regards
DK

[TTr]

Did you try to login to the root account by using a standard login method and NOT su? Maybe this will allow you to go through the password changing sequence. Try loging in directly to the console or type "exec login" and then login using the root account and password.

If all fails, you have to crash your server and do as you are thinking.

[SUDHAKAR_18]

If you have MP LAN configured.We can login to console using root.

[Prashanth Waugh]

Hi,

Pls check man page for #modprpw command

Regards
Atulkumar

[Fabien GUTIERREZ]

you just telnet or ssh to your server as root as you desire then you ll be prompted to change your password
if you have a user which can access root commands via sudo you can sudo sam an change policy of the root account to no password aging.

[PedroMLG]

Thank you for your answers but any of them has solved my problem. Only missing the reset in to single user mode.

I'm not allowed to telnet as root I supposed because of the securetty file. In all the methods to access I got the "Login incorrect" msg.

About the sudo command is not available in my system.

[Tim Nelson]

Whether or not the root account is disabled console access is always allowed.

If you know the "old" password then you can then change the password. ( try using ssh instead of telnet or su )

If you do not know the "old" password then you MUST crash the system and boot to single user mode.

Depending on your OS version the system will still ask you for the "old" password. If you are running trusted mode, then edit the /tcb/files/auth/r/root password field ( set to null ).

The /etc/securetty file restricts telnet access for root to the console. It does NOT restrict root access for ssh, rexec, remsh.
(a pretty whimpy way to enforce security)

[Dennis Handly]

>Tim: Depending on your OS version the system will still ask you for the "old" password.

I thought you don't need to do that as root using /sbin/passwd?

[PedroMLG]

Finally I was able to change the password from the console.

Thank you for your answers.

[PedroMLG]

Finally I was able to change the password from the console.

Thank you for your answers.