Root account is disabled in HP-UX

Today i addressed an issue about root account is disabled in HP-UX system.

Cause:Users tried many times(more than 3 times) to login with wrong password.

Symptom:

When you login on the console,it will return to the login screen after you type even correct password without any errors.

When you try to login through  SSH or Telnet，it will return with

"Account is disabled- see Account Administrator"

Many SAs have provided some solutions on this issue,but their solutions are not preferred at the first time. 

'cause they request to reboot the system for single user mode which means you have to interrupt the business. Of couse this is the solution, but not the first one we should try.

Workaround:

1、Try the MP card,not to first reboot the system in the CM mode,but try to enter the Console,if you exit the Console last time with "Ctrl + B",well,lucky guy,this time you can solve this problem without reboot your system,all you have yo do is just use the following commands:

 

# /usr/lbin/getprpw root

then,it'll throw out some lines about your sysetem,if your system is a trusted system,then it will come out with your account informations,such as useris,userpwd.....

in this situation,you should use this command first to enable your account:

# /usr/lbin/modprpw -k root

Then u can change the password.

# /sbin/passwd root

If your system is not trusted,the it will appear such information

System is not trusted

if you see this,then you can change your password :

# sbin/passwd

Ok,i have to say something about TRUSTED and NOT TRUSTED system.

In TRUSTED system,taht means the password of the account must be complex ,such as you should at least create the password for 8 characters with digitals and letters etc.And when a user failed to login for several times,the account would be disabled or locked.

In NOT TRUSTED system,there's no such restrictions.

however,we can convert the system from TRUST into NOT TRUST system,but not recommend.

# /usr/lbin/tsconvert -r

2、If we can't even enter the CO mode,then we have to reboot the system, if it's a cluster with MC/SG,we'd better run the packages on the other system first.

Reboot: 

In the CM mode,type "rs" with confirmaion of "y" to reboot the system.

Single Mode：

When system is rebooting ,with the appearance of this messages,press any key to interrupt:

Autoboot from primary boot path enabled.
To override, press any key within 10 seconds.

then type:

ISL> hpux -is

or

HPUX> hpux -is

> System Memory = 1004 MB

loading section 0

............................................................. (complete)

loading section 1

.............. (complete)

loading symbol table

loading System Directory (boot.sys) to MFS

....

loading MFSFILES directory (bootfs) to MFS

................

Launching /stand/vmunix

SIZE: Text:30839K + Data:7145K + BSS:5302K = Total:43287K



Console is on a Serial Device

Booting kernel...

then it's single user mode,after all the configuration,just type:

# init 3

to enter the runlevel 3 for multiuser mode system.

 

For my own reference only.