User changing own password HP-UX 11.23

[Dave Andrew]

An attempt to change a non-privileged users' password returns the message: "audswitch: Not owner". Any suggestion on what to check?

File permissions set as follows:


-r-sr-xr-x 1 root bin /usr/bin/login
-r-sr-xr-x 1 root bin /usr/bin/passwd

Any Thoughts

[T G Manikandan]

what are the permissions for /sbin/passwd

[James R. Ferguson]

Hi Dave:

See:

http://forums.itrc.hp.com/service/forums/questionanswer.do?threadId=574947

Regards!

...JRF...

[Steven E. Protter]

Shalom,

I think the permissions on /etc/password have been "frakked" to use the sci-fi term for it.

This file is one of those files that is owned by super user, only can be written to by super user, but regular users can use the passwd command which has the super user bit set to update it.

compare /etc/passwd to a working system and make it the same. See that it has content in it as well.

SEP

[Yashwant]

compare and Change the 'login' and 'passwd' file permissions:


-r-sr-xr-x 1 root bin /usr/bin/login
-r-sr-xr-x 1 root bin /usr/bin/passwd

[Dave Andrew]

JRF - I have looked at the mentioned forum and the settings look to be OK hence the confusion

the settings for the sbin version of the passwd file are as follwos:

-r-s------ 1 root bin 788596 Apr 1 2005 passwd

[Dave Andrew]

SEP I have looked at the file permissions and they are set to -r-xr-xr-x in /etc for the passwd file. The one thing i did notice was that the group associated with the file was other and not bin.

Would this have bearing?

[James R. Ferguson]

Hi (again) Dave:

# ls -l /etc/passwd /sbin/passwd /usr/bin/passwd
-r--r--r-- 1 root other 1452 Feb 17 08:09 /etc/passwd
-r-s------ 1 root bin 299008 Apr 28 2005 /sbin/passwd
-r-sr-xr-x 5 root bin 53248 Apr 27 2007 /usr/bin/passwd

Regards!

...JRF...

[Avinash20]

Try:
/sbin/passwd

[Dave Andrew]

Avinash comes back as not superuser.

[Avinash20]

1. Is this a trusted server(check for /tcb directory)

2. Are you able to change the password of the users via root

[Dave Andrew]

Avinash

Server was not buiklt as trusted and yes you can change if logged in as root