user passwd on hpux 11.11-tcb

[vaman]

one user is not able to login to a system, he is getting access denied message. its a tcb system, yesterday I changed his passwd, & also as his account got deactivated, activated. If i compair passwd againg policies & general user account policies with other user , they are same. Today again same user I need to change his passwd as he started getting same message.

[Sridhar Bhaskarla]

Vaman,

Run '/usr/lbin/modprpw -k ' and see if the user can login. If it doesn't work, then post the output of 'getprpw '.

-Sri

[Steven E. Protter]

Might want to delete the user and re-add.

There also could be some policy set up for that user that causes this situation. I've poked into this and found out via SAM that I had a user that was being deactivated after 1 day of inactivity.

This was done by some genious in operations I guess.

Most of the time deleting and re-adding the user clears this up.

Also make sure /etc/default/security is right.

SEP

[vaman]

Hello Sri,

Currently the passwd is changed, & user is working but I am sure he would not able to login tomorrow. I will try /usr/lbin/modprpw -k tomorrow, but can you see why this is happening

[Sridhar Bhaskarla]

Vaman,

Post your 'getprpw ' and "getprdef -m' and we will be able to find the issue.

-Sri

[vaman]

Hello Sri
Here is the o/p
getprpw usename
uid=7883, bootpw=NO, audid=448, audflg=1, mintm=-1, maxpwln=-1, exptm=-1, lftm=-1, spwchg=Thu Nov 11 15:29:39 2004, upwchg=Mon Sep 27 16:12:38 2004, acctexp=-1, llog=-1, expwarn=-1, usrpick=DFT, syspnpw=DFT, rstrpw=DFT, nullpw=DFT, admnum=-1, syschpw=DFT, sysltpw=DFT, timeod=-1, slogint=Thu Nov 11 15:34:46 2004, ulogint=Thu Nov 11 15:28:42 2004, sloginy=pts/tg, culogin=-1, uloginy=-1, umaxlntr=-1, alock=NO, lockout=0000000

Can u tell me what getprdef -m does?

[Ermin Borovac]

getprdef displays system-wide TCB defaults.

# /usr/lbin/getprdef -b -p -t