system trusted

[Clodoaldo João Rodrigue]

Hello All

I have one problem with my Server (Hp-UX 10:10). When I try add one user on system, it is succefull, but when I try change the passwor his, the system display the follow message:

#passwd uroclodo

#Password cannot be changed. Reason: Cannot access protected password entry.

I have a trusted system actived in our system Operation.
Do you have some idea about it problem ???
thanks for all.

[Roger Baptiste]

hi,

Is the password command working for changing other user passwords?? i.e , is the problem for every user on the system or only for this user. Do a #ll `which passwd` to make sure the passwd command permissions are ok. Try the change as root user id.

tcb is in /tcb and its permission is:
dr-xr-x--x 3 root root 96 Jun 6 2001 /tcb

The password file for user(s) will be under /tcb/files/auth//userid

-raj

[Uday_S_Ankolekar]

Try untrust the system and change the password and then convert back as trusted. This problem could be due to password length.

to unconvert the system
/usr/lbin/tsconvert -r

change the passwword

then convert back as trusted by

/usr/lbin/tsconvert -c

Goodluck
-USA..

[Darren Prior]

Hi,

What method did you use to add this user? If you just edited the /etc/passwd it could cause this error as that would not add the relevant tcb entry. SAM and useradd are better ways to add users for trusted systems.

I'd suggest that you run authck -pv to check out your tcb files and /etc/passwd. Feel free to post the output here for people to help you analyze it. This should then help you solve your problem, probably by carefully removing the user and re-adding correctly.

In addition I recommend that you check that you have the latest patches related to trusted systems, login and passwd. Later versions of HP-UX have these patches incorporated, but 10.10 requires patching. PLEASE read the patch texts - some of these patches have very important fixes.

regards,

Darren.

[James Beamish-White]

Run the pwck and/or pwconv commands to clean up your protected password entry.

Cheers!
James

[Geetha Alagappan]

Try a
pwconv
This will update the secure password facility and you should not have problems.

Geetha.

[Wodisch_1]

Hi,

HOW did you actually *add* that user? SAM or "useradd" or did you do something *manually*?
Then maybe you don't have the file describing that user below "/tcb/files/auth/FIRST_LETTER_OF_USERNAMER/USERNAME"...
"pwvonc" should help, but if it doesn't work, just delete the line from "/etc/passwd" and try adding it again, but this time using "useradd" (with options).

Just my $0.02,
Wodisch

[Michael Tully]

I've just tested this on my test system, by just editing the /etc/passwd file, and this exact message will be produced. This was on a HPUX 11.0 system.

To add a user properly, either use the 'useradd' command in conjunction with the man page, or use 'sam'