hp-unix操作系统root账号被锁定的两种解决方法：

hp-unix操作系统root账号被锁定的两种解决方法：

由于将HP-UNIX（HP-UX smsdb02 B.11.31 U ia64）小型机修改为：trusted system模式后，导致用户登录操作系统时，报错如下：

 login: sms

 Password:

 Account is disabled - see Account Administrator

Wait for login exit: ..

 经上网查询是用户锁死，但现在是root用户也锁死了！！提示如下：

 login: root

 Password:

 Account is disabled - see Account Administrator

Wait for login exit: ..

解决方法如下:

方法一：到单用户取消trusted system, 重新激活账户

a、重起机器，自检完成后，会出现这一行“To discontinue, press any key in 10 seconds ”，这时你按任意键，系统会中止启动，进入 Main Menu. 

b、键入“  bo ”, 在系统询问“  Interact with IPL (Y or N?)?”,输入 “y”。

c、在提示符ISL> 后， 输入“  hpux  -  is ”, 系统进入单用户状态。

d、sam，给root解锁

 如果还忘记了密码，取消trusted system

 #/usr/lbin/tsconvert -r

e、键入“  passwd ”,   然后输入新的密码。

f、键入“  reboot ”, 恢复系统正常运行。

方法二：（无需重启服务器）

可以在console用root登录的，无论如何，console上root不会被disable。 

以下为登录console，解决用户锁死的操作命令：

#  telnet 192.168.2.106

OA-9C8E99295CED> connect bay 4

Connecting to bay 4 ...

         Hewlett-Packard Integrated Lights-Out 3 for Integrity

  (C) Copyright 1999-2011 Hewlett-Packard Development Company, L.P.

                    MP Host Name: mp-smsdb02

                 iLO MP Firmware Revision 01.41.01

 *************************************************************************

                       MP ACCESS IS NOT SECURE

  A default MP user Admin/Admin is currently configured

  with the default password and remote access is enabled. Modify the

  default password or delete the default user (see UC command)

                                    OR

            Disable all types of remote access (see SA command)

 *************************************************************************

 *************************************************************************

                        Your Certificate has expired.

               Use the SO command to generate a new certificate.

 *************************************************************************

   MP MAIN MENU:

         CO: Console

        VFP: Virtual Front Panel

         CM: Command Menu

         CL: Console Log

         SL: Show Event Logs

         HE: Main Help Menu

          X: Exit Connection

[mp-smsdb02]</> hpiLO-> 

[mp-smsdb02]</> hpiLO-> CO

        [Use Ctrl-B or ESC-( to return to MP main menu.]

- - - - - - - - - - Prior Console Output - - - - - - - - - -

     Start LVM daemon ............................................. OK

     Start CDE login server ....................................... OK

     Starting the amgrd subsystem ................................. N/A 

     Starting PRNGD (Pseudo Random Number Generator Daemon) ....... N/A 

     Starting Control Daemon ...................................... OK

The system is ready.

GenericSysName [HP Release B.11.31] (see /etc/issue)

Console Login: 

- - - - - - - - - - - - Live Console - - - - - - - - - - - -

[Read only - use Ctrl-Ecf for console write access.]

[Read only - use Ctrl-Ecf for console write access.]

[bumped user -  Admin]

GenericSysName [HP Release B.11.31] (see /etc/issue)

Console Login: root

Password:               //此处无需输入密码，直接回车即可

Account is disabled but console login is allowed.

Last   successful login for root: Thu Feb  4 20:00:54 EAT-8 2021 on pts/ta 

Last unsuccessful login for root: Sun Feb  7 09:34:56 EAT-8 2021      

Please wait...checking for disk quotas

(c)Copyright 1983-2006 Hewlett-Packard Development Company, L.P.

(c)Copyright 1979, 1980, 1983, 1985-1993 The Regents of the Univ. of California

(c)Copyright 1980, 1984, 1986 Novell, Inc.

(c)Copyright 1986-2000 Sun Microsystems, Inc.

(c)Copyright 1985, 1986, 1988 Massachusetts Institute of Technology

(c)Copyright 1989-1993  The Open Software Foundation, Inc.

(c)Copyright 1990 Motorola, Inc.

(c)Copyright 1990, 1991, 1992 Cornell University

(c)Copyright 1989-1991 The University of Maryland

(c)Copyright 1988 Carnegie Mellon University

(c)Copyright 1991-2006 Mentat Inc.

(c)Copyright 1996 Morning Star Technologies, Inc.

(c)Copyright 1996 Progressive Systems, Inc.

Confidential computer software. Valid license from HP required for

possession, use or copying.  Consistent with FAR 12.211 and 12.212,

Commercial Computer Software, Computer Software Documentation, and

Technical Data for Commercial Items are licensed to the U.S. Government

under vendor's standard commercial license.

You have mail.

Value of TERM has been set to "vt100". 

WARNING:  YOU ARE SUPERUSER !!

smsdb02[/]#/usr/lbin/tsconvert -r

Restoring /etc/passwd...

/etc/passwd restored.

Deleting at and crontab audit ID files...

At and crontab audit ID files deleted.

至此为止，取消trusted system模式后，用户解锁操作成功。再去使用任意合法用户登录操作系统时，均可以正常登录了。

©著作权归作者所有：来自51CTO博客作者vcdog的原创作品，如需转载，请注明出处，否则将追究法律责任

hp-unixlinux运维