System Trusted

[castro_2]

I have System Trusted but when a user expired the password, the owner (user) can not change the own passord, "audswitch: Not owner".
Thanks

[Alex Glennie]

can you check the permissions on /bin/login
mines currently set to :

-r-sr-xr-x 1 root bin 57344 Jun 14 2001 /bin/login ?

[Martin Johnson]

Have you run pwck on your password file to check for problems with the password file?

HTH
Marty

[S.K. Chan]

The error you're getting "audswitch not owner" might not be related to the trusted system at all. This usually means there is a permission or ownership problem with files in /usr/bin or /bin. The immediate culprit could be /usr/bin/login. Check if the suid is set. If not change it to permission 4555. It should be owned by root:bin.

[Jean-Louis Phelix · Accepted solution]

Hi,

In fact, if you can login I would rather check permissions on /usr/bin/passwd which should also be -r-sr-xr-x 1 root bin

Regards

[castro_2]

The file /usr/bin/login and /bin/login
-r-sr-xr-x 1 root bin login

The permissions in file passwd was
-r-xr-xr-x 5 root bin passwd and changed a
-r-sr-xr-x 5 root bin passwd and It's working.
Thanks

[castro_2]

Anoteher question, what files must be have the setuid??
Thanks

[S.K. Chan]

This is what's on my system (11.i in /bin or /usr/bin)
-r-sr-xr-x 1 root bin 45056 Nov 14 2000 at
-r-sr-xr-x 1 root bin 20480 Nov 14 2000 bdf
-r-sr-xr-x 1 lp bin 36864 Jul 29 09:33 cancel
-r-sr-xr-x 5 root bin 45056 Nov 14 2000 chfn
-r-sr-xr-x 1 root bin 36864 Nov 14 2000 chkey
-r-sr-xr-x 5 root bin 45056 Nov 14 2000 chsh
-r-sr-xr-x 1 root bin 24576 Nov 14 2000 crontab
-r-sr-xr-x 1 root bin 45056 Nov 14 2000 ct
-r-sr-xr-x 1 root bin 36864 Apr 19 2001 cu
-r-sr-xr-x 1 root bin 73728 Nov 14 2000 df
-r-sr-xr-x 1 lp bin 24576 Jul 29 09:33 disable
-r-sr-xr-x 1 lp bin 20480 Jul 29 09:33 enable
-r-sr-sr-x 1 bin daemon1699840 Nov 14 2000 kermit
-r-sr-xr-x 1 root bin 53248 Nov 21 2001 login
-r-sr-xr-x 1 root bin 40960 Jul 29 09:33 lp
-r-sr-xr-x 1 root bin 36864 Jul 29 09:33 lpalt
-r-sr-xr-x 1 lp bin 45056 Jul 29 09:33 lpstat
-r-sr-sr-x 2 root mail 45056 Nov 14 2000 mail
-r-sr-xr-x 1 root bin 2768 Nov 9 2000 mediainit
-r-sr-xr-x 1 root bin 16384 Feb 20 2001 newgrp
-r-sr-xr-x 1 root bin 24576 Nov 14 2000 nfsstat
-r-sr-xr-x 5 root bin 45056 Nov 14 2000 nispasswd
-r-sr-xr-x 5 root bin 45056 Nov 14 2000 passwd
-r-sr-xr-x 1 root bin 344064 Nov 14 2000 pppd
-r-sr-xr-x 1 root bin 45056 Nov 14 2000 rcp
-r-sr-xr-x 1 root bin 69632 Nov 14 2000 rdist
-r-sr-xr-x 1 root bin 28672 Nov 14 2000 remsh
-r-sr-xr-x 1 root bin 20480 Nov 14 2000 rexec
-r-sr-xr-x 1 root bin 36864 Nov 14 2000 rlogin
-r-sr-sr-x 2 root mail 45056 Nov 14 2000 rmail
-r-sr-xr-x 1 lp bin 16384 Nov 14 2000 slp
-r-sr-xr-x 1 root bin 24576 Nov 14 2000 su
-r-sr-xr-x 1 uucp bin 57344 Nov 14 2000 uucp
-r-sr-xr-x 1 uucp bin 20480 Nov 14 2000 uuls
-r-sr-xr-x 1 uucp bin 16384 Nov 14 2000 uuname
-r-sr-xr-x 1 uucp bin 16384 Nov 14 2000 uusnap
-r-sr-xr-x 1 uucp bin 36864 Nov 14 2000 uustat
-r-sr-xr-x 1 uucp bin 53248 Nov 14 2000 uux
-r-sr-xr-x 5 root bin 45056 Nov 14 2000 yppasswd

[Keith Buck]

You can also use the command 'swverify' to see if permissions match the Internal Products Database. That database is updated by swinstall/swremove/etc. independently of the file system permissions.