hp-unix作業系統root賬號被鎖定的兩種解決方法：

hp-unix作業系統root賬號被鎖定的兩種解決方法：

由於將HP-UNIX（HP-UX smsdb02 B.11.31 U ia64）小型機修改為：trusted system模式後，導致使用者登入作業系統時，報錯如下：

 login: sms

 Password:

 Account is disabled - see Account Administrator

Wait for login exit: ..

 經上網查詢是使用者鎖死，但現在是root使用者也鎖死了！！提示如下：

 login: root

 Password:

 Account is disabled - see Account Administrator

Wait for login exit: ..

解決方法如下:

方法一：到單使用者取消trusted system, 重新啟用賬戶

a、重起機器，自檢完成後，會出現這一行“To discontinue, press any key in 10 seconds ”，這時你按任意鍵，系統會中止啟動，進入 Main Menu. 

b、鍵入“  bo ”, 在系統詢問“  Interact with IPL (Y or N?)?”,輸入 “y”。

c、在提示符ISL> 後， 輸入“  hpux  -  is ”, 系統進入單使用者狀態。

d、sam，給root解鎖

 如果還忘記了密碼，取消trusted system

 #/usr/lbin/tsconvert -r

e、鍵入“  passwd ”,   然後輸入新的密碼。

f、鍵入“  reboot ”, 恢復系統正常執行。

方法二：（無需重啟伺服器）

可以在console用root登入的，無論如何，console上root不會被disable。 

以下為登入console，解決使用者鎖死的操作命令：

#  telnet 192.168.2.106

OA-9C8E99295CED> connect bay 4

Connecting to bay 4 ...

         Hewlett-Packard Integrated Lights-Out 3 for Integrity

  (C) Copyright 1999-2011 Hewlett-Packard Development Company, L.P.

                    MP Host Name: mp-smsdb02

                 iLO MP Firmware Revision 01.41.01

 *************************************************************************

                       MP ACCESS IS NOT SECURE

  A default MP user Admin/Admin is currently configured

  with the default password and remote access is enabled. Modify the

  default password or delete the default user (see UC command)

                                    OR

            Disable all types of remote access (see SA command)

 *************************************************************************

 *************************************************************************

                        Your Certificate has expired.

               Use the SO command to generate a new certificate.

 *************************************************************************

   MP MAIN MENU:

         CO: Console

        VFP: Virtual Front Panel

         CM: Command Menu

         CL: Console Log

         SL: Show Event Logs

         HE: Main Help Menu

          X: Exit Connection

[mp-smsdb02]</> hpiLO-> 

[mp-smsdb02]</> hpiLO-> CO

        [Use Ctrl-B or ESC-( to return to MP main menu.]

- - - - - - - - - - Prior Console Output - - - - - - - - - -

     Start LVM daemon ............................................. OK

     Start CDE login server ....................................... OK

     Starting the amgrd subsystem ................................. N/A 

     Starting PRNGD (Pseudo Random Number Generator Daemon) ....... N/A 

     Starting Control Daemon ...................................... OK

The system is ready.

GenericSysName [HP Release B.11.31] (see /etc/issue)

Console Login: 

- - - - - - - - - - - - Live Console - - - - - - - - - - - -

[Read only - use Ctrl-Ecf for console write access.]

[Read only - use Ctrl-Ecf for console write access.]

[bumped user -  Admin]

GenericSysName [HP Release B.11.31] (see /etc/issue)

Console Login: root

Password:               //此處無需輸入密碼，直接回車即可

Account is disabled but console login is allowed.

Last   successful login for root: Thu Feb  4 20:00:54 EAT-8 2021 on pts/ta 

Last unsuccessful login for root: Sun Feb  7 09:34:56 EAT-8 2021      

Please wait...checking for disk quotas

(c)Copyright 1983-2006 Hewlett-Packard Development Company, L.P.

(c)Copyright 1979, 1980, 1983, 1985-1993 The Regents of the Univ. of California

(c)Copyright 1980, 1984, 1986 Novell, Inc.

(c)Copyright 1986-2000 Sun Microsystems, Inc.

(c)Copyright 1985, 1986, 1988 Massachusetts Institute of Technology

(c)Copyright 1989-1993  The Open Software Foundation, Inc.

(c)Copyright 1990 Motorola, Inc.

(c)Copyright 1990, 1991, 1992 Cornell University

(c)Copyright 1989-1991 The University of Maryland

(c)Copyright 1988 Carnegie Mellon University

(c)Copyright 1991-2006 Mentat Inc.

(c)Copyright 1996 Morning Star Technologies, Inc.

(c)Copyright 1996 Progressive Systems, Inc.

Confidential computer software. Valid license from HP required for

possession, use or copying.  Consistent with FAR 12.211 and 12.212,

Commercial Computer Software, Computer Software Documentation, and

Technical Data for Commercial Items are licensed to the U.S. Government

under vendor's standard commercial license.

You have mail.

Value of TERM has been set to "vt100". 

WARNING:  YOU ARE SUPERUSER !!

smsdb02[/]#/usr/lbin/tsconvert -r

Restoring /etc/passwd...

/etc/passwd restored.

Deleting at and crontab audit ID files...

At and crontab audit ID files deleted.

至此為止，取消trusted system模式後，使用者解鎖操作成功。再去使用任意合法使用者登入作業系統時，均可以正常登入了。

©著作權歸作者所有：來自51CTO部落格作者vcdog的原創作品，如需轉載，請註明出處，否則將追究法律責任

hp-unixlinux運維