Unable to Change User or Root password on trusted system

[patrick coutinho]

Hi,

i am having a problem with an HP UX 11i server. Tried to login with a username and it popped up a message (attached below)
*********************************************
HP-UX dove B.11.11 U 9000/800 (tb)

login: ipatrick
Password:
Last successful login for ipatrick: Sun Jun 20 11:16:56 WAT-3 2004 on pts/ta
Last unsuccessful login for ipatrick: Sun Jun 20 12:13:45 WAT-3 2004 on pts/tb
Your password has expired.
Choose a new password.
Changing password for ipatrick
Old password:
Sorry.
Login aborted due to no password.

Wait for login exit: .
****************************************

Am having the same problem even when i try to login a root from the console. This system is trusted.

How do i get out of this. If possible i would like to do this without booting the server.

Please help.

Thanks in advance.

Patrick

[Geoff Wild]

Check out this thread:

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=34362

Rgds...Geoff

[Steven E. Protter · Accepted solution]

You must boot. There is no back door.

Boot the machine if it doesn't have gsp you will need to use the power switch

At console:

GSP

ctrl-b

log into gsp enter twice if you have never configured it.

rs

answer the question yes.

interupt boot at the 10 second prompt.


hpux -is

mount /usr

cd /tcb/auth/files/r
vi root

null out the root password entry u_passwd

save the file

shutdown -ry now

# boots

passwd to set the root password immediately.

SEP

[Ashwani Kashyap]

if you are not able to change even roots password then the only wat to do id to boot the machine in single user mode and follow stepen's way .

[patrick coutinho]

Thanks everyone. The last resort is to boot to single user.

Geoff, your thread is really interesting. Will try the first 8 characters of the password. If that works u deserve 1000 points.

Many thanks to all.

Rgds

Pat

[Sridhar Bhaskarla]

Hi Patrick,

Looks like you just converted your system to trusted. If so, Geoff deserves atleast '8' points.

This is one issue most commonly everyone would run into after converting the systems to trusted.

Non-trusted systems can recognize only upto 8 characters. So, a user with more than 8 chars will effectively have only 8 character encrypted password. On the other hand, trusted systems can handle more than 8 chars, hence the full password supplied by the user will not work. Hence the user will have to supply only first 8 characters in order to match the encrypted password in the /tcb structure. Once the password is changed, then the user can continue to have 'real' more than 8 char passwords.


-Sri

[patrick coutinho]

It worked Geoff. Fantastic. Thanks you very much. Don't know how to edit the points table. someone kindly tell me so i can up the points to at least 10.

rgds

Pat

[Ashish Jain]

Hi All

In my case, I was getting the error " Password cannot be changed. Reason: Not allowed to execute passwd for the given user " .
I simply copied the /tcb/files/auth/system/default file from a working system to this one and it started working !!

Ashish Jain