Root user

[Allan Tagliaferro]

Hi all,

Does any one know the procedure of changing the Root user password as this is soon going to be administrated by me I would like to know if there is a set procedure to follow.

Help me impress those I work with please...Thanks.

[Scott Van Kalken]

So long as you're logged in as the root user you can change it.

You need to know the old password as well.

passwd root
enter old password
enter new password twice.

That's it.

If you do not know the root password currently, boot to single user mode and change it. In single user mode you're automagically logged in as root.

If this is a trusted system, boot to single user mode. Run /etc/tsconvert -r (revert to normal system) change password run /etc/tsconvert to revert to a trusted system.

If there is a password required to boot to single user mode, find that out first.

Scott.

[Michael Tully]

Hi,

To change the passwd for root (or any user)
you use the 'passwd' command.

# /sbin/passwd root

You must be 'root' already to change it!
You can change anyone's password with using
the passwd command as long as you are root.

Have a look at the man page for 'passwd' for
additional options.

# man passwd

HTH
-Michael

[Rob Galloway_1 · Accepted solution]

Log in as root.
Start SAM
Select accounts for users & groups
select users
tab into bottom window
select root
tab to actions
select modify
tab to modify password hit return
follow prompts to change password

[Helen French]

hey,

Login as root. then,

# passwd

type the new password !

See man pages of passwd command.

shiju

[Darrell Allen]

Hi Allan,

If you are referring to policies for choosing and changing the root password, that's entirely up to you. I think it is wise to:

- change root password on a regular basis - no more than a couple of months between changes - maybe more often
- limit knowledge of root's password to only those who really need to know
- combine alpha, numeric, and special characters
- 6 - 8 characters (preferrably 8)
- be sure you are logged in on more than 1 terminal session before changing the password and test logging in on another session as root before you log out
- avoid schemes (patterns) that can be figured out (ie using the name of the month in a foreign language or from an alternative calendar such as the Mayan)
- if you have a large shop it may be helpful to keep a secure record of past root passwords in case a server is missed a couple of times
- don't make it too hard to remember - perhaps use an acronym (with some numbers and punctuation)
- choose something that is somewhat different for each server just in case it is cracked on one server the others aren't immediately vunerable
- if you think the root password has possibly been compromised, change it

Darrell

[Michael Tully]

Hi,

Another item(s) that you could consider is
this.

Passwords on systems to be changed once
a month.
Make sure that a minimum number of people
have access to the password. Preferable
to have it locked away in secure location.
Don't use the root account or passwd at all,
use 'sudo' as an alternative.
'sudo' is quite easy to configure, it's free
it's already compiled and can be downloaded
from the HP porting centre.

http://hpux.connect.org.uk/hppd/hpux/Sysadmin/sudo-1.6.2b1/

HTH
-Michael

[Uday_S_Ankolekar]

Hi,

If you already know the root password then it's piece of cake.. ! type passwd on # prompt and follow the instruction
If you don't know the password then you need to bring down the system in single user mode and have to change the password.
-USA..

[Marc Dijkstra]

Allan

As you are going to be administering the machine(s) may I suggest the following informative SYSADMIN manual from HP....

http://www.docs.hp.com/hpux/onlinedocs/B2355-90672/B2355-90672.html

MND