set a root password

[nani3456]

Hi Guys,

Can any body help me to set two passwords for root in AIX 5.3.

Please give me step by step procedure.

Help appreciated.

Thanks
Nani

 

[DukeSSD]

Two passwords for root?
I think you can only have one password for each user.

http://publib.boulder.ibm.com/infoc...pic=/com.ibm.aix.cmds/doc/aixcmds4/passwd.htm

 

[sbrews]

You can set up a secondary authentication method - such as your own password management software. Take a look at the user (or is it users???) file in /etc/security. Look specifically at the comments in the top that refer to auth1 and auth2 authentication methods.

 

[khalidaaa]

Yeah sbrews is right.

I remember you have to create a method for that in (maybe /usr/lib/security/methods.cfg)

I have the steps with me in the manual but i don't have the manual right now! I will guide you through this once i get the manual later today.

Regards,
Khalid

 

[khalidaaa]

As I promised to look the manual for you:

There are two ways mentioned:

The first on is to use Customized Authentication

vi /usr/lib/security/methods.cfg

Then write the following:

secondPassword:
program=/usr/local/bin/getSecondPassword

Then do this

vi /etc/security/user

inside write this:

root:
auth1 = SYSTEM,secondPassword

Now you will have to define your getSecondPassword script. For example:

vi /usr/local/bin/getSecondPassword

print "Please enter the second Password: "

stty -echo
read PASSWORD
stty echo

if [[ $PASSWORD = "d1f2g3" ]]
then
  exit 0
else
  exit 255
fi

The second way is to use Two-Key Authentication:

vi /etc/security/user

then write the following:

root:
auth1 = SYSTEM;deputy1,SYSTEM;deputy2

Then when you login you should get something like this:

login: root
deputy1's Password:
deputy2's Password:

both passwords must be entered correctly before root can login.

I never tried the above to be honest. That's as per the manual

Regards,
Khalid

 

[nani3456]

Hi Kkalid,

Thanks for the information.

I had done the same way without missing any step in the morning and it was not working for me.
I followed all the steps ( offcouse refering the maually PD) but no luck ....

I appreciate your help.

I will update you once iam sucessfully

Thanks again

 

[khalidaaa]

I guess you are right nani!

I just tried it my self and it doesn't work for some reason as well!

I will dig into that with you

I will keep you posted

Regards,
Khalid