ssod:[664529]: Login disabled user: instant12345 Error: No such file or directory

[Mr. Lewis Lampkin, III]

Here is my error text:

Nov 25 10:59:14 hostname ssod:[11580]:Login disabled User: instant Error: No such file or directory

Nov 25 10:59:14 hostname ssod:[11580]:Failed to update password Error: ERROR User: instant

Nov 25 11:01:14

[Mr. Lewis Lampkin, III]

Basically, I'm trying to set up one-way password synching, from Windows to HP-UX. So far, only the 'instant' account is participating in the synch.

To test, I restart the ssod, then modify the password of the user.

Now, I cannot determine why I am getting this error.

I have only the Microsoft documentation for setting this up, so, of course, all of my problems occur with trying to set up the HP-UX side of things, as the documentation is from the Microsoft point of view.

I'm using the http://technet.microsoft.com/en-us/library/cc785926(WS10).aspx

[Matti_Kurkela]

Your link had one small typo, here's a corrected version:

http://technet.microsoft.com/en-us/library/cc739223(WS.10).aspx

So... the product is "Identity Management for UNIX", by Microsoft.

Now, some basic information about the HP-UX system would be handy.

What's your HP-UX version? (What does "uname -r" report?)

Is the HP-UX system in Shadow Password or Trusted System mode? Which one, or neither? (Does the file /etc/shadow exist? Does the file /tcb/files/auth/system/default exist?)

If the system is in Trusted System Mode, the file /tcb/files/auth/i/instant should have been created along with the creation of the user "instant". If that file is not there, that would be a very probable cause for this problem... and it would also indicate that the user "instant" was not created using the proper procedure (=using the "useradd" command or SAM), but instead by editing the /etc/passwd file manually.

If the system is *not* in Trusted System Mode, then the validity of the user must be checked in a different way. What does

grep "^instant:" /etc/passwd /etc/shadow

report?

Does the home directory of user "instant" exist? (just in case the ssod needs it for something)

MK

[Mr. Lewis Lampkin, III]

Matt:

Good afternoon.

Matt:

Thanks for your help, I've included my comments.


What's your HP-UX version? (What does "uname -r" report?)
>> uname-r
>> B.11.11

Is the HP-UX system in Shadow Password or Trusted System mode? Which one, or neither? (Does the file /etc/shadow exist? Does the file /tcb/files/auth/system/default exist?)

>>/etc/shadow does not exist


>> /tcb/files/auth/system/default DOES exist

If the system is in Trusted System Mode, the file /tcb/files/auth/i/instant should have been created along with the creation of the user "instant". If that file is not there, that would be a very probable cause for this problem... and it would also indicate that the user "instant" was not created using the proper procedure (=using the "useradd" command or SAM), but instead by editing the /etc/passwd file manually.

>>/tcb/files/auth/i/instant DOES exist

>> the user account was created using the useradd command

If the system is *not* in Trusted System Mode, then the validity of the user must be checked in a different way. What does



grep "^instant:" /etc/passwd /etc/shadow

report?

>> grep "^instant:" /etc/passwd /etc/shadow
>> /etc/passwd:instant:*:162:125:Fullname, Location:/home/instant:/usr/bin/sh
>> grep: can't open /etc/shadow


Does the home directory of user "instant" exist? (just in case the ssod needs it for something)

MK

>> ls -l /home/instant
>> total 28
>> drwxr-xr-x 2 instant bsp 1024 Nov 17 11:57./
>> drwxr-xr-x 196 root root 7168 Nov 17 12:00 ../
>> -r-------- 1 instant bsp 832 Aug 7 09:42 .cshrc
>> -r-------- 1 instant bsp 347 Aug 7 09:42 .exrc
>> -r-------- 1 instant bsp 334 Aug 7 09:42 .login
>> -rw------- 1 instant bsp 1409 Aug 7 09:42 .profile
>> -r-------- 1 instant bsp 439 Aug 7 09:42 .profile.orig

[Tim Nelson]

please post output from

getprpw instant

[Mr. Lewis Lampkin, III]

man getprpw works, but

getprpw instant does not work

I get this result:

sh: getprpw: not found

is there a path to where this one usually lives? I didn't see it inside bin or sbin.

[Tim Nelson]

"whereis getprpw" should return /usr/sbin/getprpw

so

/usr/lbin/getprpw instant12345

[Mr. Lewis Lampkin, III]

hope this looks okay ...

hostname:/ > /usr/lbin/getprpw instant
uid=162, bootpw=NO, audid=317, audflg=1, mintm=-1, maxpwln=-1, exptm=-1, lftm=-1
, spwchg=Wed Nov 25 13:34:46 2009, upwchg=Wed Nov 25 13:35:23 2009, acctexp=-1,
llog=-1, expwarn=-1, usrpick=DFT, syspnpw=DFT, rstrpw=DFT, nullpw=DFT, admnum=-1
, syschpw=DFT, sysltpw=DFT, timeod=-1, slogint=Wed Nov 25 13:35:12 2009, ulogint
=Wed Nov 25 13:12:19 2009, sloginy=pts/ta, culogin=-1, uloginy=pts/ta, umaxlntr=
-1, alock=NO, lockout=0000000

[Tim Nelson]

oops.. cannot type today.sorry


"whereis getprpw" should return /usr/lbin/getprpw

so

/usr/lbin/getprpw instant12345

[Mr. Lewis Lampkin, III]

I got the gist of it, it's ok.

[Mr. Lewis Lampkin, III]

But, I don't know how to read the command output to jump to any conclusions.

[Mr. Lewis Lampkin, III]

If this helps, from the Windows side, I get this error message:

check user exists and user account is not disabled, expired or locked


.... which is what it appears you're trying to help me to determine, correct?

[David Nixon]

Just a thought, but I'm wondering if
your 'ssod' binary was compiled to support
shadow passwords?

Unlike the one I obtained from V3 Microsoft Services for UNIX:

# strings /usr/local/lbin/ssod | grep Shadow

Shadow option not supported on HP-UX

[Mr. Lewis Lampkin, III]

David:

Thanks for your help.

When I attempt that command, I get no result at the command prompt.