Root Password Issue

[Samer khu]

Hello experts,

I cann't login to system using root pwd
I recieved "Account is disabled-see Account Administrator"

Please help and advice.

[Deepak Kr · Accepted solution]

Hi!!

Reset the root password in single user mode

Login through console and go into single user mode

Interact with ISL (Y/N): Y
ISL>hpux -is

###passwd root

IS your system in trusted mode?

[Rasheed Tamton]

Hello Samer,

Try

/usr/lbin/modprpw -k root

[SKR_1]

If you remember your password, you can login through console IP. Otherwise you can reset root password from single user mode.

Thanks

SKR

[Jeeshan]

if the usr/lbin/modprpw -k root doesn't work you need to go to single user mode to change the account status.

[Anshumali]

Sameer,
Trying at console should work if you know the password which system is expecting, not what you know, but changed at system by someone :)
If this is trusted mode, you might be required to unconvert this to non-trusted in Single user mode using tsconvert -r, be sure you note down the polices and params noted if you do that.
Also, review the passwd creation rules in man passwd to avoid use of special chars like @ etc..

Anshu

[Samer khu]

Hi All,

Thanks for attention,

Could you please provide me how can I login to single mode. sorry for my question but i don't have a good background on UX sistems.

[Anshumali]

Unfortunately, you will have to get the system restart, as you don't have the passwd, this will require the partition reset.
You can login to MP...type cm, select rs--->your partition no and press y
This will restart the partition, now you can stop at BCV by pressing any key, (it asks for that) and type bo pri, (to boot with primary path)
when asked if you want to interact with ISL(Initial System Loader), select Y
You will get ISL prompt
ISL>
Type hpux -is
This will land you to # prompt
#
(After work, its not advisable to type init 3 for switching the run level from Single user mode) Restart the system instead.

[Anshumali]

I mentioned MP, w/o knowing your H/W type... :(
You can get the same with Serial Port if you don't have the MP based model, idea is to do this work from console.You need BCH access and console is required for that, be it MP or external one.

[Samer khu]

Hello ALL ,

I want to connect directy to server through serial cable. My question is what type of serial cable is needed to connect my labtop to consol port (COM) in the server.

Also I have another question:
are there any different between when we are saying the acount is disabled and the account is loocked.

if Yes, could you please clarify this different?

Thanks to ALL.

[Anshumali]

Samer,

A normal Rs232 cable should work if your laptop has the COM Port, for me, i use a Serial to USB converter as i don't have COM port in my laptop.
Account Disabled and blocked are same thing and happen due to the policies set on the system.
Which model you have and is it a trusted system?

[Deepak Kr]

Yes RS-232 cable will work here. Connect your lapi with cable and start hyperterminal to see console messages on your laptop screen.

Provide the model of your server...?
is it a partition server ?

I believe you are running a trusted system..

[Samer khu]

Hello Anshumali,

Thanks alot for your information.

I have a serial port in my laptop and Also I can see the serial port as console in My system (HP workstation c8000).

I am going to do directly connection and I will share the result with all.

Thanks Again.

Samer khurshaid

[Samer khu]

Thanks alot Kumar,,

[Deepak Kr]

Sure!!!

Cheers

[Steven E. Protter]

Shalom,

Normally a console login re-enables the root user.

It would be a really good idea when this is said and done to do a lastb command and try and find out why the root account is disabled.

It could be a script, it could however be a hack attempt.

SEP

[Samer khu]

Thanks alot steven for your critical answer,

Could you please provide me the command or procedure that help me to khnow "how or why the root account is disabled???"

[Anshumali]

lastb -R|grep -i root|more
--->look for IPs for bad attempts
If this is trusted, check /usr/lbin/getprpw root and check for last unsuccessful login.

[Steven E. Protter]

Shalom,

lastb -r will provide you the date and time and remote ip address of bad (b in lastb) login attempts.

Here is some similar sample out put from a nearly Linux machine.


sales ssh:notty 208.116.44.138 Wed Jul 9 07:17 - 07:17 (00:00)
sales ssh:notty 208.116.44.138 Wed Jul 9 07:17 - 07:17 (00:00)
staff ssh:notty 208.116.44.138 Wed Jul 9 07:17 - 07:17 (00:00)
staff ssh:notty 208.116.44.138 Wed Jul 9 07:17 - 07:17 (00:00)
root ssh:notty bzq-79-182-99-45 Wed Jul 9 00:29 - 00:29 (00:00)
root ssh:notty bzq-79-182-99-45 Wed Jul 9 00:29 - 00:29 (00:00)
root ssh:notty bzq-79-182-99-45 Wed Jul 9 00:29 - 00:29 (00:00)

SEP

[Samer khu]

Thanks Anshumail/steven,

Dear All,
I have done the following procedure to create direct connection between my laptop and server:

1-I bought a new female-female serial cable.
2-the server has been turned off.
3-I connect one end of this cable to serial port in my labtop and the another end to serial port on rear panel of the server.(C8000)

4- open hyperterminal (version 5.1)
5- set the following setting:
bit rate =9600
bit =8
parity = none
flow = 1
flow control= XOF/XON

6- server has been turned on.

After this,I didn't see any thing on hyperterminal windows.
could someone please advice on this.

[Steven E. Protter]

Shalom,

I'd use a null modem cable.

It is a little different I recall from a regular serial cable.

Then I use hyperterminal defaults just as you have done.

Also a serial terminal from HP might do the job.

There is a connector on the back of your system. It should have a special cable with three output cables marked.

Remote
UPS
Console

Hook a serial terminal or your null modem cable to that.

If your GSP/Console has been configured, you may find that connecting to that is the path of least resistance. The terminal emulation is easier to deal with than hyperterminal.

SEP

[Dennis Handly]

>My system (HP workstation c8000).
>6- server has been turned on.

You don't have a server. Also, if your workstation has a monitor, why are you fooling with a laptop? You should just go to the console and do all of this.

[Samer khu]

Unfor. My system didn't have monitor.

After investigation, I am going to buy a null modem cable.

Thanks all,

[Sp4admin]

Login to the console directly, this will unlock the account. If you do not know the password go to single user mode and set the password.

sp,

[Steven E. Protter]

Shalom,

If its a workstation it probably has a standard vga/svga port. It will most likely work with any standard pc monitor and ps/2 keyboard.

That is certainly an easier path than console/null modem cable login.

The null modem trick will work, but why take the hard road.

SEP