Trusted System !

[Ivan Azuara]

Hi !

I??m experimenting a strange event on my HPUX 11i server. I converted that server in a Trusted System, but something rare happen when i want to change the password for the user "root".

# passwd
Changing password for root
Old password:
Sorry.

After put the actual password that corresponds to the old password in this case, i receive the "sorry" message.

I have others serves on HPUX 11.0 with Trusted Systems, and don??t receive the same message, when i try to change the password's root. Both systems (11i, 11.0) have applied the same security policies.

Somebody know??s if the problem has relation about the OS version ?.


Thank??s in advance !

[Ross Zubritski]

Are you sure you are typing the old password correctly?

Regards,

RZ

[Jeff Schussele · Accepted solution]

Hi Ivan,

This can occur IF your original root PW was greater than 8 chars. Before the chars >8 were just ignored, now they come into play.
Try entering JUST the first 8 chars of the old root PW & see if that works.
The cause is that when you converted, they system only converted the first 8 chars.

Rgds,
Jeff

[Michael Steele_2]

Try nulling out the password for root and also checking the protected password file:

authck -p (* verifies *)

/usr/sam/lbin/usermod.sam -F -p "" root (* null password *)

Also good to know:

getprpw

alock=yes then account is disabled. Remember, three strkes and out!

[Martin Johnson]

Edit the file /tcb/files/auth/r/root.
Look for a line with something like this:

:u_pwd=UNpk1V5S4Kt.:
Edit it to look like this:

:u_pwd=:
That will remove the encrypted password for root. Use passwd to set a new password.

HTH
Marty

[Sridhar Bhaskarla]

Hi Ivan,

Jeff had the answer. Try the first 8 chars of the password. This is only the case if you had a password of more than 8 chars and converted the system.

Once the system is converted, subsequent password changes will not be affected though only first 8 chars are significant.

-Sri