change of root password in trusted mode

[Frantisek Merka_1]

Hi,
I have converted HP-UX 11.11 in trusted system,
after that I try to change password for root.
Passwd ask for old password, I fill it correct, but passwd answer Sorry.

Thanks for advantages.
Regards
Frantisek.

[Ken Hubnik_2 · Accepted solution]

try this

/usr/lbin/modprpw -k root

[Robert-Jan Goossens]

Hi,

# cd /tcb/files/auth/r/

and then delete the actual encrypted password from the root file.

Robert-Jan.

[Stefan Farrelly]

cd /tcb/files/auth/r and vi the root file and remove the old password, save it, and now you can set a new one.

[Rainer von Bongartz]

try using /sbin/passwd instead of using /usr/bin/passwd

Regards
Rainer

[Tom Danzig]

If the old root password is more than 8 characters long, type in only the first 8.

[Frantisek Merka_1]

Thats the point,
Thanks for help.
Frantisek.

[Jeff Schussele]

Tom has nailed it - ONLY type in the first 8 chars - that's all that was transferred to /tcb....

Moral - ALWAYS keep TWO windows for root when converting. Then you have a window to reset root PW.

Rgds,
Jeff

[Steven E. Protter]

I had this earlier THIS week.

1) If it lets you log on the console, issue the passwd command there.

2) Follow this procedure to null out the root password and then issue the command.

HP: Do we have a bug here. My keystroke law shows NOBODY ran the passwd command on root.


Solution:
http://search.hp.com/redirect.html?url=http%3A//forums.itrc.hp.com/cm/QuestionAnswer/1,,0x751fb941255cd71190080090279cd0f9,00.html&qt=null+%2Bpassword+%2Btrusted+%2Bsystem+%2Broot&hit=1

[Moderator edit: The above link is no longer valid.]
SEP

[Jeff Schussele]

Hi SEP,

No I wouldn't call it a bug.
It's more of a senselessly rigid rule.
M$ would call it a "feature".
ONLY the first 8 chars are converted & xferred to /tcb...
BUT the login binary WILL eval ALL chars typed in the PW field & that will NOT match the actual PW field post-conversion. But the first 8 chars WILL.

Rgds,
Jeff