Re: unable to login as root ( Account is disabled - see Account Administrator) (4653 Views)
Reply
Super Advisor
Jerry_109
Posts: 389
Registered: ‎11-05-2004
Message 1 of 14 (4,653 Views)
Accepted Solution

unable to login as root ( Account is disabled - see Account Administrator)

HP-UX fdhp31 B.11.23 U 9000/800/A500-7X
########################

$ cat /etc/passwd | grep root
root:*:0:3:root on fdhp31:/root:/sbin/sh

$ su -
Password:
Account is disabled - see Account Administrator

$ cat /etc/securetty
/dev/console
Please use plain text.
Honored Contributor
Robert-Jan Goossens
Posts: 7,384
Registered: ‎04-04-2000
Message 2 of 14 (4,653 Views)

Re: unable to login as root ( Account is disabled - see Account Administrator)

Hi Jerry,

You should be able to logon from the console, use "/usr/lbin/modprpw -k root" to unlock the root account.

Regards,
Robert-Jan
Please use plain text.
Honored Contributor
Tim Nelson
Posts: 3,723
Registered: ‎06-01-2000
Message 3 of 14 (4,653 Views)

Re: unable to login as root ( Account is disabled - see Account Administrator)

As mentioned.

You have two constraints.

1) direct login of root via telnet is restricted to the system console via the /etc/securetty file

2) account is disabled but the disable is overridden if login is from /dev/console.

modprpw -k root will remove the lock.

I personnally do not set an expire time on my root account, I diligently change it every 30 days. ( this assumes it became disabled due to expiration, not for some other reason like too many attempts ).



Please use plain text.
Super Advisor
Jerry_109
Posts: 389
Registered: ‎11-05-2004
Message 4 of 14 (4,653 Views)

Re: unable to login as root ( Account is disabled - see Account Administrator)

unable to access root via console. I can access with userid j4s9389, but cannot su - :

# telnet fdhp31c
Trying...
Connected to fdhp31c.scif.com.
Escape character is '^]'.
Local flow control off

Service Processor login: root
Service Processor password:




Hewlett-Packard Guardian Service Processor

(c) Copyright Hewlett-Packard Company 1999-2002. All Rights Reserved.

System Name: fdhp31c



[Read only - use ^Ecf for console write access.]

[bumped user - ]


GenericSysName [HP Release B.11.23] (see /etc/issue)
Console Login: root
Password:
Login incorrect

Wait for login retry: ..
login: j4s9389
RESTRICTED RIGHTS LEGEND
Use, duplication, or disclosure by the U.S. Government is subject to
restrictions as set forth in sub-paragraph (c)(1)(ii) of the Rights in
Technical Data and Computer Software clause in DFARS 252.227-7013.


Hewlett-Packard Company
3000 Hanover Street
Palo Alto, CA 94304 U.S.A.

Rights for non-DOD U.S. Government Departments and Agencies are as set
$ su -
Password:
Account is disabled - see Account Administrator
su: Sorry
$
Please use plain text.
Honored Contributor
Tim Nelson
Posts: 3,723
Registered: ‎06-01-2000
Message 5 of 14 (4,652 Views)

Re: unable to login as root ( Account is disabled - see Account Administrator)

This looks to me that after connecting to the console you have the wrong password for "root"

GenericSysName [HP Release B.11.23] (see /etc/issue)
Console Login: root
Password:
Login incorrect


After you log in as another user and try to su you are being denied because the password for root is disabled.

Please use plain text.
Super Advisor
Jerry_109
Posts: 389
Registered: ‎11-05-2004
Message 6 of 14 (4,652 Views)

Re: unable to login as root ( Account is disabled - see Account Administrator)

Yes, I think you are correct. Now how do I correct the problem ?
Please use plain text.
Honored Contributor
OldSchool
Posts: 3,373
Registered: ‎09-09-2004
Message 7 of 14 (4,652 Views)

Re: unable to login as root ( Account is disabled - see Account Administrator)

you're probably going to have to boot into single user mode...once there you should be able to access the root account

site search is having problems, but you should find some help via google. search

root locked site:itrc.hp.com
Please use plain text.
Acclaimed Contributor
Dennis Handly
Posts: 24,380
Registered: ‎03-06-2006
Message 8 of 14 (4,652 Views)

Re: unable to login as root ( Account is disabled - see Account Administrator)

>unable to access root via console.

You're accessing the machine through the GSP, not the console. I assume they are different.
Please use plain text.
Honored Contributor
Tim Nelson
Posts: 3,723
Registered: ‎06-01-2000
Message 9 of 14 (4,652 Views)

Re: unable to login as root ( Account is disabled - see Account Administrator)

If you do not have access to the root password then one of two things.

1) if you have delgated shutdown privelages (someplaces do this for their operations staff ) then reboot the system nicely to single user mode and reset root's password.

2) if no abitlity to shutdown nicely then you will have to crash the server via the MP TOC or reset options (or power on/off ), then interupt the boot process and boot to single user and fix the password. Shutting down any and all applications first will reduce the risk of data loss.



Please use plain text.
Honored Contributor
Norman_21
Posts: 2,116
Registered: ‎09-26-2002
Message 10 of 14 (4,652 Views)

Re: unable to login as root ( Account is disabled - see Account Administrator)

The /dev/console means that you won't be able to telnet as root but it's funny this file doesn't apply to SSH so if you have SSH you should be able to login as root assuming the account is not disabled.

About the locked account. Is this a trusted system?
You should create additional rootxx as a duplicate root account level for backup or setup sudo to save you from such situations in the future.

You don't have many options my friend. Since this an A-Class 500 System, just go to the Console and hit CTRL+B and then from the GSP prompt type "rs" and say "y".

Interrupt the system during the boot process, then boot your system into single user mode, mount the file systems and edit the password file or if this is trusted system edit the /tcb/files/auth/r/root file to remove the lock. You could also run the commands instead of editing the files manually.

Hope this help
"Attitudes are contagious, is yours worth catching"/ My first point was given by SEP on January 31, 2003
Please use plain text.
Super Advisor
Jerry_109
Posts: 389
Registered: ‎11-05-2004
Message 11 of 14 (4,652 Views)

Re: unable to login as root ( Account is disabled - see Account Administrator)

Hope everyone received their points? I've been having problems accessing the itrc.
I did reset the system from the GSP, boot the system into single user mode, and reset root password along with modprpw -k root.
All is fine now. I used sam to change failed logins from default "3".
Please use plain text.
Honored Contributor
Norman_21
Posts: 2,116
Registered: ‎09-26-2002
Message 12 of 14 (4,652 Views)

Re: unable to login as root ( Account is disabled - see Account Administrator)

I didn't receive mine but I'm happy to be here again! ;o)

"Attitudes are contagious, is yours worth catching"/ My first point was given by SEP on January 31, 2003
Please use plain text.
Valued Contributor
Roberto Arias
Posts: 151
Registered: ‎10-08-2000
Message 13 of 14 (4,652 Views)

Re: unable to login as root ( Account is disabled - see Account Administrator)

Jerry, please, check security polity of root and disable restriccions of password for it

best regards
The man is your friend
Please use plain text.
Occasional Collector
rshardha
Posts: 1
Registered: ‎12-12-2012
Message 14 of 14 (3,756 Views)

Re: unable to login as root ( Account is disabled - see Account Administrator)

Great Help, it worked thanks a lot.

 

rshardha

Please use plain text.
The opinions expressed above are the personal opinions of the authors, not of HP. By using this site, you accept the Terms of Use and Rules of Participation