Trusted Mode HP-UX 11.23 itanium

[Jonathan Grymes]

Issue: When I put my system in Trusted Mode the user account passwords are disabled, this is expected. If Im already logged in when I switch to Trusted Mode Im able to reset the passwords on all user accounts except root.
I have tried modprpw -k root, authck -pv and I checked getprpw root to confirm the lockout value did not contain a 1.

In Trusted Mode Im not able to do anything with the root password, modify or reset in single user mode or multi user.

As soon as I unconvert the system Im able to reset the root password.

Any ideas?

[Pete Randall · Accepted solution]

How are you converting to trusted? Running tsconvert, perhaps? If you convert using SAM, it will take care of unexpiring the passwords for you.


Pete

[Jonathan Grymes]

I envoked Trusted Mode through SAM the first time and then via command line (tsconvert)the second time. Behaviour was the same.

[Pete Randall]

You may find these threads helpful:

http://forums11.itrc.hp.com/service/forums/questionanswer.do?threadId=1207112
http://forums11.itrc.hp.com/service/forums/questionanswer.do?threadId=61801


Pete

[BUPA IS]

Hello,
We had some trouble with password lengths when we first converted to trusted system. On an untrusted system the saved password is limited to 8 characters, if you type in a 9 charcater password only the first 8 are used and the rest are ignored; if you type in all 9 after conversion you get an error because only the first 8 have been converted and typing the 9th gives a different answer out the checking alogrithim. Make sure that your root password complies with all the quality rules in you have set in /etc/default/security before you trust it. Also I would stick to normal characters and numbers whilst converting to avoid subtle differences in keyboard layouts and locales .
Mike

P.S. 11.31 is supposed to be the last release that will have trusted system on it .