mkuser fails 2

[RBOLLEN]

Hello,

When I want to create a user with the mkuser command or with smitty user it fails, I get the following message:

root@tstontw:/users/ontw# mkuser test
3004-721 Could not create user.
3004-703 Check "/usr/lib/security/mkuser.sys" file.
3004-687 User "test" does not exist.
root@tstontw:/users/ontw#

There is enough room in the filesystems, There is an entry made in the /etc/passwd file, but not in the /etc/security/passwd. I have tried almost everything but I cant create a user, Who can help me?

Thanks,
Rudy

 

[PSD]

Rudy,

"/usr/lib/security/mkuser.sys"

The above script is called by mkuser, I suggest it has either been nulled or deleted, does it exist? and if not is it corrupted when you pg it ? if so you will need to restore it from a mksysb. Or re-install or upgrade the following fileset, this will recreate a new mkuser.sys file:

bos.rte.security

Cheers PSD
IBM Certified Specialist - AIX V4.3 Systems Support
IBM Certified Specialist - AIX V4 HACMP

 

[RBOLLEN]

Hello PSD,

Thanks for your quick response, The /usr/lib/security/mkuser.sys is not corrupted and I can pg the file. It even has the same size on other systems that we have. Can I also just copy this file from another system or is it better to install the fileset bos.rte.security again?


Rudy

 

[PSD]

Rudy,

I would copy the existing file away to .old and copy one from another system. Also check permissions on the script, perhaps do a diff. with the new file.

If this does not work I would be inclined to re-install the fileset.

Any problems re-post

Cheers PSD
IBM Certified Specialist - AIX V4.3 Systems Support
IBM Certified Specialist - AIX V4 HACMP

 

[RBOLLEN]

Hi,

I have renamed and copied file from another system, there was no difference between files, so I got the same error. Then I reinstalled the fileset but it didnt worked either, It looks like its a bigger problem, what can I do more? I have also tried to delete one user which we didnt use anymore and then create the same user again but that didnt work either.


Greets,

Rudy

 

[PSD]

Rudy,

hmm so you say you can remove a user o.k.

What about you mkuser.default file in the same directory is that the same size as another machine? and does is pg o.k ?

If that is o.k. I would check the permissions of the following compared to a machine which works:

/etc/passwd
/etc/group
/etc/security - directory
all files in /etc/security
/usr/lib/security - directory

Cheers




PSD
IBM Certified Specialist - AIX V4.3 Systems Support
IBM Certified Specialist - AIX V4 HACMP

 

[PSD]

Rudy,

hmm so you say you can remove a user o.k.

What about you mkuser.default file in the same directory is that the same size as another machine? and does is pg o.k ?

If that is o.k. I would check the permissions of the following compared to a machine which works:

/etc/passwd
/etc/group
/etc/security - directory
all files in /etc/security
/usr/lib/security - directory

Cheers




PSD
IBM Certified Specialist - AIX V4.3 Systems Support
IBM Certified Specialist - AIX V4 HACMP

 

[RBOLLEN]

PSD,

Everything looks the same as on a system where it works fine, even all the file permissions of the files you wrote down. Should I contact Ibm for this? I tried almost everything and have searched on the internet for this problem but nothing seems to work. I have read somewhere about a maximum record length in the /etc/group file of 2048 bytes, but that is also not the problem.

Greetings,
Rudy

 

[PSD]

Rudy,

Well it does sound strange. Is it AIX 4.3.3?? it so I would be inclined to install a patch 4.3.3.10 bos.rte.security as there are no other pre-reqs. from :

http://techsupport.services.ibm.com/rs6k/fixdb.html

select fileset name and pick 4.3.3.10 from the list then put it into a directory, cd into the directory and do an update_all, input device=.

Remember select commit=no and save replaced files=yes so you can roll it off.

Any problems let me know. The other thing other than checking permissions is, is there something missing in /etc/security.....?? Here are the files mkuser accesses:

rw /etc/passwd

rw /etc/security/user

rw /etc/security/user.roles

rw /etc/security/limits

rw /etc/security/environ

rw /etc/group

rw /etc/security/group

r /usr/lib/security/mkuser.default

x /usr/lib/security/mkuser.sys



Otherwise you could try logging it with IBM.

I would install the patch though.

Cheers
PSD
IBM Certified Specialist - AIX V4.3 Systems Support
IBM Certified Specialist - AIX V4 HACMP

 

[RBOLLEN]

PSD,

yes it is 4.3.3, I have already installed the fileset 4.3.3.10 bos.rte.security. I have already tried almost everything and nothing works, I'm going to contact IBM for this problem and I let you know what it was.
Thanks for all your help!


Greetings,
Rudy

 

[RBOLLEN]

I have contacted IBM, they said I had to run usrck -y ALL and then pwdck -y all, so when I did, the problems were solved.

Greetings,
Rudy

 

[PSD]

Rudy,

Excellent, do you know what the commands fixed?

Cheers

PSD
IBM Certified Specialist - AIX V4.3 Systems Support
IBM Certified Specialist - AIX V4 HACMP

 

[RBOLLEN]

Yes, there were some entries from a userid in the /etc/security/passwd which were not in the /etc/passwd. The guy from IBM told me that when you want to create a user, the system first checks this files and when they are not ok, then you cant define another user.

Greets,
Rudy