Submitting forms on the support site are temporary unavailable for schedule maintenance. If you need immediate assistance please contact technical support. We apologize for the inconvenience.
2.5.915 included BFER 5193 "For the HP-UX platform, locked accounts will be unlocked during a password change". When the functional account does not have permissions to /usr/lbin/modprpw the password reset works, but TPAM believes it has failed..
Resolution
WORKAROUND 1
Add rights to the functional account to run modprpw.
For example, add the below to the sudoers file funcacct ALL=(root) NOPASSWD: /usr/lbin/modprpw
WORKAROUND 2
Install Hotfix_8168
Hotfix_8168.zip
v2.5.904-2.5.915
Update HP Trusted Platform to not fail password change when unlock fails.
Key:Xpce8w1ock
Option/genkey
STATUS
Issue fixed in version 2.5.916. The latest version of TPAM can be downloaded here
Change Request
BFER 8168
Additional Information
Unlock Locked Accounts
For the HP-UX (trsuted) platform, locked accounts will be unlocked by TPAM when making a password change. To unlock an HP-UX account (during a password reset) TPAM has the functional account issue the command /usr/lbin/modprpw. If using delegation prefix the functional account must have permissions to execute the command, otherwise the password reset will fail.
Your Request will be reviewed by our technical reviewer team and, if approved, will be added as a Topic in our Knowledgebase.
Recommended Content
Product(s):
TPAM
2.5.916, 2.5.915, 2.5.914
Topic(s):
Best Practices
Article History:
Created on: 3/11/2016 Last Update on: 5/7/2023
Thank you for your feedback for Topic Request
Your Request will be reviewed by our technical reviewer team and, if approved, will be added as a Topic in our Knowledgebase.
Welcome to One Identity Support
You can find online support help for*product* on an affiliate support site. Click continue to be directed to the correct support content and assistance for *product*.
The One Identity Portal no longer supports IE8, 9, & 10 and it is recommended to upgrade your browser to the latest version of Internet Explorer or Chrome.