Trusted Mode

[Jonathan Grymes]

I have an hp rx2620, HP-UX 11i V2. I put the server in Trusted Mode today and now all accounts are locked, including root. I get permission denied trying to log in via ssh and telnet. Any ideas?

[Tim Nelson · Accepted solution]

root is always allowed via the console whether disabled or not. ( this is ASSUMING the message during login failure states that the account is "disabled")

If somehow all users ended up with an "*" in their password field just prior to the conversion then the only way to get in is to crash the server and boot to single user so you can set the root password. Try the console first.

Once you get on you can run the usernames through a loop to unlock.

cat user.list|while read list
do
modprpw -k $list
done


getprpw username to list the status' of the user.

[Andres_13]

When system is on trusted mode you must define a how many times the users are allowed to try log on the system and once you reach it the only way to unlock accounts is via sam with the user root.

If root is locked then you must login from the console and this will unlock the root account.

Regards!

[Bill Hassell]

This is normal if you use the un-recommended method to convert: tsconvert. The recommended method is to use SAM which will run tsconvert and also modprpw -V which resets the access times of all the user accounts. Just connect to the console (required) and login. Then run modprpw -V. If root's PATH is incorrect, you'll have to use the fullpath:

/usr/lbin/modprpw -V