sudo help

[Donny Jekels]

After I installed sudo 1.6.6 on a HP-UX 11.0 trusted system. I can't login as root from console.

It tells me roots password is incorrect.
this is not the case.

[John Dvorchak]

Can you login as a normal user and su to root? Perhaps /etc/securetty got mangled?

[Michael Tully · Accepted solution]

Not sure what has happened. (hopefully you still have a root session)
You didn't change to trusted at the same time?

1) Remove /etc/securetty
2) run '/usr/lbin/modprpw -k root'
3) change the root password
4) reinstate /etc/securetty file with only 'console'
5) test as root from console
6) test as sudo 'command' from another session
7) su -

[Donny Jekels]

yes, I can. but even from the console
it fails.

when I log in from the console, it tells me incorrect password try again.

I can login as myself, tehn I use sudo su and I am in as root.

[Donny Jekels]

I will give it a try.

thanx for the advise. is there anything that you know if sudo will affect this or cause this behavior?

[John Dvorchak]

I am curious if you have an @ in the password? The ampersand (@) is a throw back to the days of tty's, real tty's and it means EOL, erase to end of line. It will work everywhere but on the console. If that is the case try changing the password to something without a @ in it and give it a try.

[John Dvorchak]

Sorry I called the @ (at symbol) an ampersand. Must be having a senior moment.

[Donny Jekels]

okay, can't get to datacenter. no I don't have webconsole. I will check on monday again. And try all your tricks. let me know if you think of anything else in the meanwhile. have a great weekend.

[Michael Tully]

Donny,

I've used 'sudo' for years, never seen this. 'sudo' does not make any changes to either the trusted database (/tcb), password file etc. It uses the /etc/sudoers file as a reference point to who can do what, and utilises the users own password. It all presumes that 'root' has set it up.

Michael

[CCIL]

Try to reboot the system , in single user mode , then unconvert the system using the command tsconvert -r , & then change the runlevel to 3 . then check for the root login .

one more thing , whethere your root password is more than 8 charcters , if yes then key in only first eight characters of the root password

[Michael Tully]

If this is a production server, beware that making your system un-trusted and then trusted again afterwards *will* reset all passwords and make users change their passwords at the next login attempt, unless the proper precautions are taken. Have a look at the 'modprpw/getprpw' man pages. (A good way to start a mutiny ...)

[Rick Garland]

Is it possible that you came out of trusted for the sudo install then went back in to trusted?

If this is the case your passwds would have changed for all accts.

[Donny Jekels]

turning into an interresting thread.

it was just conincidance that I installed sudo 1.6.6 on 2 servers that had problem with their root password.

As it tunred out it had nothing to do wiht sudo. Still investigating the root cause of this problem.

Have anyone experienced something similar, where root's password became 'corrupted/lost' and required a reset? as described by Michael Tully.

Does HP know of this issue, and what have they done about it? Is there a patch available to prevent this flaw?