root password ( TCB)

[Patil P]

Hello,

We are using HP-UX with TCB & facing a problem for changing root user password as old password is expired & also old password is not accepting while changing the password. We are accessing the server through other root equivalent user. But through SAM & modprpw command it is not allowing to change the root user password.

Also we tried by booting system in single user mode & tried to change the password. There also it is asking for old password.

Pl do guide me,

Pushkar

[RAC_1]

With a alternate root account do as follows.
/usr/sam/lbin/usermod.sam -p "" root

This will null out root users password and after that you should eb able to chnage it.

Also things to check
1 Do you have special chars in the password??
2 Is it more than 8 chars, if yes enter just first 8 chars only

You can also just modify passwd file. (after backing it up)

[Muthukumar_5]

If your machine is still in trusted mode then you have to give old passwd.

1) To change machine in non-trusted then change passwd. (If your machine is not in production environment)

May be you can try RAC's solution better this.? Try that else .. use the above.

-Muthu

[AwadheshPandey]

try with this
check ur /etc/passwd file, if any * char in passwd file then remove it and try to login.

Awadhesh

[Patil P]

Hello,

My server is in production (24*7 online)& still TCB is working on it. if i will remove tcb again password of all users will be change.

pushkar

[HGN · Accepted solution]

Hi

This is how I reset the password
go to /tcb/files/auth/r
vi the root file
there is a line :u_pwd=xxxxxxxxxxxxxx:\

remove everything in the xxxx and try to reset the passwd,it will not ask for the old password

you can unlock it with
/usr/lbin/modprpw -k root

Rgds

HGN

[Bill Hassell]

Important: DO NOT remove the * in /etc passwd for a Trusted system. Every entry in /etc/passwd is a * because the password (and status) is not stored there in a Trusted (TCB) system. Is your old root password longer then 8 characters? If so, try typing just the first 8 characters as the old password. When converting to a Trusted system, the old passwords longer than 8 characters were silently ignoring characters 9+ but in a Trusted system, the password becomes exactly 8 and any if any more are entered, Trusted will pay attention and of course, the password won't match.

Otherwise, edit root's TCB entry as mentioned. The file in /tcb/files/auth/r/root has all the password information with the password itself on the line starting with ":u_pwd=". Just remove all the password characters up to the : so that the line now reads:

:u_pwd=" \

[Patil P]

yes, my probelm is solved
thanks for solution

pushkar