From owner-freebsd-stable@FreeBSD.ORG Tue Jul 1 09:50:47 2003 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 4C43337B401 for ; Tue, 1 Jul 2003 09:50:47 -0700 (PDT) Received: from mailscan1.is.depaul.edu (mailscan1.is.depaul.edu [140.192.20.70]) by mx1.FreeBSD.org (Postfix) with SMTP id 5C7F843FE0 for ; Tue, 1 Jul 2003 09:50:46 -0700 (PDT) (envelope-from rflosi@shrike.depaul.edu) Received: From students.depaul.edu ([140.192.1.100]) by mailscan1.is.depaul.edu (WebShield SMTP v4.5 MR1a); id 1057078244577; Tue, 1 Jul 2003 11:50:44 -0500 Date: Tue, 1 Jul 2003 11:50:44 -0500 (CDT) From: Rick Flosi X-X-Sender: rflosi@students.depaul.edu To: freebsd-stable@freebsd.org Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Subject: kde KUser - expires accounts X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 01 Jul 2003 16:50:47 -0000 I used KUser to add a user to my system and after saving the changes I made KUser expired all user accounts except the newly created one. This meant I could only login as that new user and I could get root access. To fix this I rebooted the computer. When it gives you 10 seconds [or hit enter] I pressed any key but enter to get a prompt like this: ok Then at the prompt I booted into single user mode like this: ok boot -s Then it boots up and asks which shell to use and I just used the default of /bin/sh. Now I have a prompt like this: # Now you can mount your filesystem and fix the expired accounts. Mount the files with: # mount -t ufs -a Then edit the /etc/master.passwd file. It is a good idea to make a backup of the file before editing. I used the vi editor, but use what you like. # vi /etc/master.passwd You will notice that each line has a part with a '-1' in it (without quotes). Change the '-1' to a '0' (zero) for each record that should not be expired. In my case this was I had to do this for everyline except the new user because that account was not expired. Save the file and exit your editor. Now I had to run /usr/sbin/pwd_mkdb /etc/master.passwd like this: # /usr/sbin/pwd_mkdb /etc/master.passwd That should restore your expired accounts. Does anyone know if there is a patch for KUser to fix this problem. I found some discussion about this but it was from Feb. 2003 and I was unable to find a patch. Hope this helps anyone that made the same mistake I did.