AIX进维护模式的详细步骤暨3004-302 Cannot su to rootAccount has expired.解决办法


背景:

近日,本人由于做系统安全加固,编辑/etc/security/user加密码策略时,不小心将root与daemon之间的空行删除,

用普通用户su - root时报错:

$>su -

root's Password:

3004-302 Your account has expired:please see the system administrator.

3004-501 Cannot su to "root":Account has expired.

$

无耐之中,搜解决办法。最终的确定以下解决步骤........


注:

(1)如果是HA环境,则只需要将其中一个node的资源组切换到另一个node上,这样做以下步骤是风险最小的。将重启的node root解救后,

   再通过HA,可以将另一个node的root解决。

(2)如果是单机环境 ,那只能按照以下步骤一台一台的解决了。


准备工作:

1.首先要知道自已的AIX操作系统是什么版本,然后准备相应的安装光盘(只需主要版本一致即可,次要版本和维护级可以忽略)。

 如果你有OS备份磁带,那就用磁带也可以。由于本人没有OS备份,所以只能用光盘。

oslevel -s

2.USB转串口线(如果有HMC,那是最优选择)。

具体操作:

(1)重启小机(如果能用ASMI进行重启当然最好),进入以下界面,选1,进SMS。

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM


         1 = SMS Menu                          5 = Default Boot List

         8 = Open Firmware Prompt              6 = Stored Boot List



    Memory      Keyboard     Network     SCSI     Speaker


(2)进入以下界面---语言修改。

PowerPC Firmware

Version AL740_088

LKM 1.6 (c) Copyright IBM Corp. 2000,2005 All rights reserved.

-------------------------------------------------------------------------------

Language Selection Menu


Current Language :  ISO8859-1 English (United States)


1.   Change Language

2.   Continue to Password Entry










-------------------------------------------------------------------------------




-------------------------------------------------------------------------------

Type menu item number and press Enter:1

(3)我选择11(UTF-8     English (United States))。

PowerPC Firmware

Version AL740_088

LKM 1.6 (c) Copyright IBM Corp. 2000,2005 All rights reserved.

-------------------------------------------------------------------------------

Select Language

1.   ISO8859-1 English (United States)

2.   ISO8859-1 French

3.   ISO8859-1 German

4.   ISO8859-1 Italian

5.   ISO8859-1 Spanish

6.   ISO8859-1 Portuguese (Brazil)

7.   BIG5      Chinese (Traditional)

8.   GB2312    Chinese (Simplified)

9.   EUC-JP    Japanese

10.   EUC-KR    Korean

11.   UTF-8     English (United States)

12.   UTF-8     Spanish

13.   UTF-8     French

14.   UTF-8     German

-------------------------------------------------------------------------------

Navigation keys:

                             N = Next page of list

ESC key = return to previous screen                                            

-------------------------------------------------------------------------------

Type menu item number and press Enter or select Navigation key:11

(4)要求输入密码,默认admin

PowerPC Firmware

Version AL740_088

LKM 1.6 (c) Copyright IBM Corp. 2000,2005 All rights reserved.

-------------------------------------------------------------------------------

Language Selection Menu


Current Language :  UTF-8     English (United States)


1.   Change Language

2.   Continue to Password Entry










-------------------------------------------------------------------------------




-------------------------------------------------------------------------------

Type menu item number and press Enter:2










      .---------------------------------------------------------------.

      |  Please enter the Service Processor 'admin' account password. |

      `---------------------------------------------------------------'













*****

(5) 选择启动项 5(Select Boot Options)


PowerPC Firmware

Version AL740_088

SMS 1.7 (c) Copyright IBM Corp. 2000,2008 All rights reserved.

-------------------------------------------------------------------------------

Main Menu

1.   Select Language

2.   Setup Remote IPL (Initial Program Load)

3.   Change SCSI Settings

4.   Select Console

5.   Select Boot Options










-------------------------------------------------------------------------------

Navigation Keys:


                                            X = eXit System Management Services

-------------------------------------------------------------------------------

Type menu item number and press Enter or select Navigation key:5

(6)选择安装/启动设备(Select Install/Boot Device)

PowerPC Firmware

Version AL740_088

SMS 1.7 (c) Copyright IBM Corp. 2000,2008 All rights reserved.

-------------------------------------------------------------------------------

Multiboot

1.   Select Install/Boot Device

2.   Configure Boot Device Order

3.   Multiboot Startup <OFF>

4.   SAN Zoning Support











-------------------------------------------------------------------------------

Navigation keys:

M = return to Main Menu

ESC key = return to previous screen         X = eXit System Management Services

-------------------------------------------------------------------------------

Type menu item number and press Enter or select Navigation key:1










                             .------------------.

                             |  PLEASE WAIT.... |

                             `------------------'













(7)选择安装设备3(CD/DVD)


PowerPC Firmware

Version AL740_088

SMS 1.7 (c) Copyright IBM Corp. 2000,2008 All rights reserved.

-------------------------------------------------------------------------------

Select Device Type

1.   Diskette

2.   Tape

3.   CD/DVD

4.   IDE

5.   Hard Drive

6.   Network

7.   List all Devices








-------------------------------------------------------------------------------

Navigation keys:

M = return to Main Menu

ESC key = return to previous screen         X = eXit System Management Services

-------------------------------------------------------------------------------

Type menu item number and press Enter or select Navigation key:3

(8)选择安装介质类型(如果你的CD-ROM是内置的IDE设备,就选IDE;如果你的CD-ROM是SCSI,则选SCSI;如果你不知道

设备介质类型,那么只好按9,列出所有设备去找咯。

PowerPC Firmware

Version AL740_088

SMS 1.7 (c) Copyright IBM Corp. 2000,2008 All rights reserved.

-------------------------------------------------------------------------------

Select Media Type

1.   SCSI

2.   SSA

3.   SAN

4.   SAS

5.   SATA

6.   USB

7.   IDE

8.   ISA

9.   List All Devices






-------------------------------------------------------------------------------

Navigation keys:

M = return to Main Menu

ESC key = return to previous screen         X = eXit System Management Services

-------------------------------------------------------------------------------

Type menu item number and press Enter or select Navigation key:9










                             .------------------.

                             |  PLEASE WAIT.... |

                             `------------------'













scan /pci@800000020000201/fibre-channel@0/diskCannot Init Link.                

scan /pci@800000020000202/fibre-channel@0/diskCannot Init Link.                 0

check /pci@800000020000202/fibre-channel@0,1/disk@202b00a0b86e9d96,1f000000000000

(8.1)以下是通过系统扫描后的介质列表,从中选择相应的设备。

PowerPC Firmware

Version AL740_088

SMS 1.7 (c) Copyright IBM Corp. 2000,2008 All rights reserved.

-------------------------------------------------------------------------------

Select Device

Device  Current  Device

Number  Position  Name

1.        -      PCIe2 4-port 1GbE Adapter

       ( loc=U78AA.001.WZSH6KL-P1-C7-T1 )

2.        -      PCIe2 4-port 1GbE Adapter

       ( loc=U78AA.001.WZSH6KL-P1-C7-T2 )

3.        -      PCIe2 4-port 1GbE Adapter

       ( loc=U78AA.001.WZSH6KL-P1-C7-T3 )

4.        -      PCIe2 4-port 1GbE Adapter

       ( loc=U78AA.001.WZSH6KL-P1-C7-T4 )

5.        -      Port 1 - IBM 4 PORT PCIe 10/100/1000 Base-TX Adapter

       ( loc=U78AA.001.WZSH6KL-P1-C5-T1 )

6.        -      Port 2 - IBM 4 PORT PCIe 10/100/1000 Base-TX Adapter

       ( loc=U78AA.001.WZSH6KL-P1-C5-T2 )

-------------------------------------------------------------------------------

Navigation keys:

M = return to Main Menu      N = Next page of list

ESC key = return to previous screen         X = eXit System Management Services

-------------------------------------------------------------------------------

Type menu item number and press Enter or select Navigation key:N

(8.2)第一页没有,按n,下一页继续找

PowerPC Firmware

Version AL740_088

SMS 1.7 (c) Copyright IBM Corp. 2000,2008 All rights reserved.

-------------------------------------------------------------------------------

Select Device

7.        -      Port 3 - IBM 4 PORT PCIe 10/100/1000 Base-TX Adapter

       ( loc=U78AA.001.WZSH6KL-P1-C5-T3 )

8.        -      Port 4 - IBM 4 PORT PCIe 10/100/1000 Base-TX Adapter

       ( loc=U78AA.001.WZSH6KL-P1-C5-T4 )

9.        -      Port 1 - IBM 4 PORT PCIe 10/100/1000 Base-TX Adapter

       ( loc=U78AA.001.WZSH6KL-P1-C6-T1 )

10.        -      Port 2 - IBM 4 PORT PCIe 10/100/1000 Base-TX Adapter

       ( loc=U78AA.001.WZSH6KL-P1-C6-T2 )

11.        -      Port 3 - IBM 4 PORT PCIe 10/100/1000 Base-TX Adapter

       ( loc=U78AA.001.WZSH6KL-P1-C6-T3 )

12.        -      Port 4 - IBM 4 PORT PCIe 10/100/1000 Base-TX Adapter

       ( loc=U78AA.001.WZSH6KL-P1-C6-T4 )

13.        2      SAS 279 GB Harddisk, part=2 (AIX 6.1.0)

       ( loc=U78AA.001.WZSH6KL-P2-D2 )

-------------------------------------------------------------------------------

Navigation keys:

M = return to Main Menu     N = Next page of list     P = Previous page of list

ESC key = return to previous screen         X = eXit System Management Services

-------------------------------------------------------------------------------

Type menu item number and press Enter or select Navigation key:N

(8.3)终于在第三页找到,介质类型为SATA,果断选择16.

PowerPC Firmware

Version AL740_088

SMS 1.7 (c) Copyright IBM Corp. 2000,2008 All rights reserved.

-------------------------------------------------------------------------------

Select Device

14.        1      SAS 279 GB Harddisk, part=2 (AIX 6.1.0)

       ( loc=U78AA.001.WZSH6KL-P2-D1 )

15.        -      SAS Tape

       ( loc=U78AA.001.WZSH6KL-P1-D1 )

16.        3      SATA CD-ROM

       ( loc=U78AA.001.WZSH6KL-P2-D9 )









-------------------------------------------------------------------------------

Navigation keys:

M = return to Main Menu                               P = Previous page of list

ESC key = return to previous screen         X = eXit System Management Services

-------------------------------------------------------------------------------

Type menu item number and press Enter or select Navigation key:16

(9)选择维护模式启动3(Service Mode Boot)。

PowerPC Firmware

Version AL740_088

SMS 1.7 (c) Copyright IBM Corp. 2000,2008 All rights reserved.

-------------------------------------------------------------------------------

Select Task


SAS Tape

   ( loc=U78AA.001.WZSH6KL-P1-D1 )


1.   Information

2.   Normal Mode Boot

3.   Service Mode Boot









-------------------------------------------------------------------------------

Navigation keys:

M = return to Main Menu

ESC key = return to previous screen         X = eXit System Management Services

-------------------------------------------------------------------------------

Type menu item number and press Enter or select Navigation key:3

(10)SMS操作即将结束,选择1(Yes),退出SMS。

PowerPC Firmware

Version AL740_088

SMS 1.7 (c) Copyright IBM Corp. 2000,2008 All rights reserved.

-------------------------------------------------------------------------------

Are you sure you want to exit System Management Services?

1.   Yes

2.   No













-------------------------------------------------------------------------------

Navigation Keys:


                                            X = eXit System Management Services

-------------------------------------------------------------------------------

Type menu item number and press Enter or select Navigation key:1

(11)系统开始从光盘读取数据到内存,维护模式启动中.................


IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM                             IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM     STARTING SOFTWARE       IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM        PLEASE WAIT...       IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM                             IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

/

Elapsed time since release of system processors: 11 mins 57 secs








-------------------------------------------------------------------------------

                               Welcome to AIX.

                  boot image timestamp: 01:57:33 04/19/2012

                The current time and date: 16:00:15 02/26/2014

      processor count: 8;  memory size: 63488MB;  kernel size: 28433996

boot device: /pci@80000002000000a/pci1014,0339@0/sata/disk@60000:\ppc\chrp\bootfile.exe

                      kernel debugger setting: enabled

-------------------------------------------------------------------------------


AIX Version 6.1

Starting NODE#000 physical CPU#001 as logical CPU#001... done.

Starting NODE#000 physical CPU#002 as logical CPU#002... done.

Starting NODE#000 physical CPU#003 as logical CPU#003... done.

Starting NODE#000 physical CPU#004 as logical CPU#004... done.

Starting NODE#000 physical CPU#005 as logical CPU#005... done.

Starting NODE#000 physical CPU#006 as logical CPU#006... done.

Starting NODE#000 physical CPU#007 as logical CPU#007... done.

Starting NODE#000 physical CPU#008 as logical CPU#008... done.

Starting NODE#000 physical CPU#009 as logical CPU#009... done.

Starting NODE#000 physical CPU#010 as logical CPU#010... done.

Starting NODE#000 physical CPU#011 as logical CPU#011... done.

Starting NODE#000 physical CPU#012 as logical CPU#012... done.

Starting NODE#000 physical CPU#013 as logical CPU#013... done.

Starting NODE#000 physical CPU#014 as logical CPU#014... done.

Starting NODE#000 physical CPU#015 as logical CPU#015... done.

Starting NODE#000 physical CPU#016 as logical CPU#016... done.

Starting NODE#000 physical CPU#017 as logical CPU#017... done.

Starting NODE#000 physical CPU#018 as logical CPU#018... done.

Starting NODE#000 physical CPU#019 as logical CPU#019... done.

Starting NODE#000 physical CPU#020 as logical CPU#020... done.

Starting NODE#000 physical CPU#021 as logical CPU#021... done.

Starting NODE#000 physical CPU#022 as logical CPU#022... done.

Starting NODE#000 physical CPU#023 as logical CPU#023... done.

Starting NODE#000 physical CPU#024 as logical CPU#024... done.

Starting NODE#000 physical CPU#025 as logical CPU#025... done.

Starting NODE#000 physical CPU#026 as logical CPU#026... done.

Starting NODE#000 physical CPU#027 as logical CPU#027... done.

Starting NODE#000 physical CPU#028 as logical CPU#028... done.

Starting NODE#000 physical CPU#029 as logical CPU#029... done.

Starting NODE#000 physical CPU#030 as logical CPU#030... done.

Starting NODE#000 physical CPU#031 as logical CPU#031... done.

Preserving 17840 bytes of symbol table [/usr/lib/drivers/pci/efcdd]

Preserving 41616 bytes of symbol table [/etc/drivers/pci/efcddpin]

Preserving 28479 bytes of symbol table [/usr/lib/drivers/scsidisk]

Preserving 40179 bytes of symbol table [/etc/drivers/scsidiskpin]

Preserving 28018 bytes of symbol table [/usr/lib/drivers/pci/goentdd]

Preserving 28833 bytes of symbol table [/usr/lib/drivers/efscsidd]

Preserving 44033 bytes of symbol table [/etc/drivers/efscsiddpin]

Preserving 14945 bytes of symbol table [/usr/lib/drivers/sctape]

Preserving 28399 bytes of symbol table [/etc/drivers/sctapepin]

Preserving 158666 bytes of symbol table [/usr/lib/drivers/hd_pin]

Preserving 261918 bytes of symbol table [/usr/lib/drivers/hd_pin_bot]

Preserving 14945 bytes of symbol table [/usr/lib/drivers/sctape]

Preserving 28399 bytes of symbol table [/etc/drivers/sctapepin]


(12)选择系统控制台,按2。

******* Please define the System Console. *******


Type a 2 and press Enter to use this terminal as the

 system console.

Pour definir ce terminal comme console systeme, appuyez

 sur 2 puis sur Entree.

Taste 2 und anschliessend die Eingabetaste druecken, um

 diese Datenstation als Systemkonsole zu verwenden.

Premere il tasto 2 ed Invio per usare questo terminal

 come console.

Escriba 2 y pulse Intro para utilizar esta terminal como

 consola del sistema.

Escriviu 1 2 i premeu Intro per utilitzar aquest

 terminal com a consola del sistema.

Digite um 2 e pressione Enter para utilizar este terminal

 como console do sistema.



HARDWARE SYSTEM MICROCODE

Licensed Internal Code - Property of IBM

(C) Copyright IBM Corp. 1990, 1994.

All rights reserved.


US Government Users Restricted Rights -

Use, duplication or disclosure restricted

by GSA ADP Schedule Contract with IBM Corp.



-

 耐心等待中..................



(13)选择安装过程中的语言,好像只懂点英语,只有按1略。


>>>  1 Type 1 and press Enter to have English during install.

    2 Entreu 2 i premeu Intro per veure la instal・laciatal?

    3 Entrez 3 pour effectuer l'installation en fran�s.

    4 Ftallation in deutscher Sprache 4 eingebenund die Eingabetaste dr


    5 Immettere 5 e premere Invio per l'installazione in Italiano.

    6 Digite 6 e pressione Enter para usar Portugu?na instala�.

    7 Escriba 7 y pulse Intro para la instalaciespa



   88  Help ?



>>> Choice [1]: 1  


(14)进入BOS安装与维护主菜单,千万别手拌(咱是来解决问题的,不是安装系统来了)。所以选择3!!!!




                     Welcome to Base Operating System

                     Installation and Maintenance


Type the number of your choice and press Enter.  Choice is indicated by >>>.


>>> 1 Start Install Now with Default Settings


   2 Change/Show Installation Settings and Install


   3 Start Maintenance Mode for System Recovery


   4 Configure Network Disks (iSCSI)


   5 Select Storage Adapters



   88  Help ?

   99  Previous Menu


>>> Choice [1]: 3  


(15)进入维护菜单,这个就找它1,默认的。

                   Maintenance


Type the number of your choice and press Enter.


>>> 1 Access a Root Volume Group

   2 Copy a System Dump to Removable Media

   3 Access Advanced Maintenance Functions

   4 Erase Disks

   5 Configure Network Disks (iSCSI)

   6 Select Storage Adapters

   7 Install from a System Backup





   88  Help ?

   99  Previous Menu


>>> Choice [1]: 1  


(16)一个小小警告,按0继续


                 Warning:


If you choose to access a root volume group, you will not be able to return

to the Base Operating System Installation menus without rebooting.



Type the number of your choice and press Enter.


   0 Continue




   88  Help ?

>>> 99  Previous Menu


>>> Choice [99]: 0  


(17)选择rootVG的(hdisk0 and hdisk1)



                          Access a Root Volume Group


Type the number for a volume group to display the logical volume information

and press Enter.


  1)   Volume Group 00f7c49b00004c000000013bf41b4548 contains these disks:

        hdisk2 512000     04-01-01 201a00a0b86e9d96//0000000000000000 00010000

       hdisk11 512000     04-01-01 201a00a0b86e9d96//0009000000000000 00010000

  2)   Volume Group 00f7c49b00004c000000013bf41dc574 contains these disks:

        hdisk4  51200     04-01-01 201a00a0b86e9d96//0002000000000000 00010000

       hdisk10 102400     04-01-01 201a00a0b86e9d96//0008000000000000 00010000

  3)   Volume Group 00f7c49300004c000000013b312ab698 contains these disks:

         hdisk1 286102     00-00-00          hdisk0 286102     00-00-00

  4)   Volume Group 00f7c49b00004c000000013bf41e3411 contains these disks:

        hdisk5  51200     04-01-01 201a00a0b86e9d96//0003000000000000 00010000





  Choice: 3



                          Volume Group Information


------------------------------------------------------------------------------

   Volume Group ID 00f7c49300004c000000013b312ab698 includes the following

   logical volumes:


        hd5         hd6         hd8         hd4         hd2      hd9var

        hd3         hd1     hd10opt   hd11admin      fwdump   lg_dumplv

   livedump   oracle_lv   orabak_lv

------------------------------------------------------------------------------



(18)选择1即可。(选择2,进入单用户模式很多命令不能用,包括ls。不过打一个exit,那些命令又能用了。无解.......)

Type the number of your choice and press Enter.


  1) Access this Volume Group and start a shell

  2) Access this Volume Group and start a shell before mounting filesystems


 99) Previous Menu


   Choice [99]: 2

Importing Volume Group...

rootvg

Checking the / filesystem.




The current volume is: /dev/hd4

Primary superblock is valid.

J2_LOGREDO:log redo processing for /dev/hd4                        

Primary superblock is valid.

Checking the /usr filesystem.


(19)以下是选择2,进入后的操作,很显然不如选择1直接了当。


The current volume is: /dev/hd2

Primary superblock is valid.

Exit from this shell to continue the process of accessing the root

volume group.

# lsuser "ALL"

/usr/bin/ksh: lsuser:  not found

# more /etc/security/user

/usr/bin/ksh: more:  not found

# cd /etc/security

/usr/bin/ksh: /etc/security:  not found

# ls

/usr/bin/ksh: ls:  not found

# chuser      

/usr/bin/ksh: chuser:  not found

# cd /

# ls

/usr/bin/ksh: ls:  not found

# dir

/usr/bin/ksh: dir:  not found

(20)如(18)所述,执行exit后的效果.............求解

# exit

Saving special files and device configuration information.

Unable to stat /dev directory on disk

Recreating /dev directory on disk

Changed: console

Changed: error

Changed: errorctl

Changed: kmem

Changed: mem

Changed: pmem

Changed: null

Changed: nvram

Changed: sysdump

Changed: sysdumpctl

Changed: sysdumpfile

Changed: sysdumpnull

Changed: tty

Changed: pci0

Changed: pci5

Changed: vio0

Changed: pci7

Changed: pci8

Changed: pci6

Changed: pci4

Changed: pci3

Changed: pci2

Changed: pci1

Changed: pci9

Changed: pci10

Changed: pci11

Changed: pci12

Changed: pci13

Changed: pci14

Changed: pci15

Changed: pci16

Changed: sissas0

Changed: usbhc0

Changed: usbhc1

Changed: usbhc2

Changed: sas0

Changed: sata0

Changed: rcd0

Changed: cd0

Changed: usb0

Changed: clone

Changed: sad

Changed: slog

Changed: ses0

Changed: ses1

Changed: hdisk0

Changed: hdisk1

Changed: rhdisk0

Changed: rhdisk1

Changed: vty0

Changed: vty1

Changed: fscsi0

Changed: fscsi2

Changed: fscsi3

Changed: fscsi1

Changed: rmt0

Changed: rmt0.1

Changed: rmt0.2

Changed: rmt0.3

Changed: rmt0.4

Changed: rmt0.5

Changed: rmt0.6

Changed: rmt0.7

Changed: hdisk15

Changed: hdisk13

Changed: hdisk14

Changed: hdisk12

Changed: rhdisk15

Changed: rhdisk14

Changed: rhdisk13

Changed: rhdisk12

Changed: hdisk6

Changed: hdisk10

Changed: rhdisk6

Changed: hdisk4

Changed: hdisk8

Changed: rhdisk10

Changed: hdisk11

Changed: hdisk9

Changed: hdisk3

Changed: hdisk7

Changed: rhdisk4

Changed: hdisk5

Changed: hdisk2

Changed: rhdisk7

Changed: rhdisk3

Changed: rhdisk11

Changed: rhdisk5

Changed: rhdisk2

Changed: rhdisk8

Changed: rhdisk9

Changed: tty0

Changed: rootvg

Changed: IPL_rootvg

Changed: __vg10

Changed: rhd5

Changed: hd5

Changed: rhd6

Changed: hd6

Changed: rhd8

Changed: hd8

Changed: rhd4

Changed: hd4

Changed: rhd2

Changed: hd2

Changed: rhd9var

Changed: hd9var

Changed: rhd3

Changed: hd3

Changed: rhd1

Changed: hd1

Changed: rhd10opt

Changed: hd10opt

Changed: rhd11admin

Changed: hd11admin

Changed: rfwdump

Changed: fwdump

Changed: rlg_dumplv

Changed: lg_dumplv

Changed: rlivedump

Changed: livedump

Changed: roracle_lv

Changed: oracle_lv

Changed: rorabak_lv

Changed: orabak_lv

Changed: ipl_blv

Changed: ipldevice

mergedev replaced 127 files in the hardfile /dev directory

Checking and mounting the /tmp filesystem.




The current volume is: /dev/hd3

Primary superblock is valid.

Checking and mounting the /var filesystem.




The current volume is: /dev/hd9var

Primary superblock is valid.

Checking and mounting the /opt filesystem.




The current volume is: /dev/hd10opt

Primary superblock is valid.

Filesystems mounted for maintenance work.

# ls

.InstallAnywhere              fix

.TTauthority                  home

.Xauthority                   lib

.dt                           lobsdata

.dtprofile                    lost+found

.java                         lpp

.sh_history                   mnt

.ssh                          mount.a17498302

.topasrecrc                   nrgl

.vi_history                   opt

.wmrc                         orabak

FileStorage                   oracle_sunecm_actlog

admin                         oracle_sunecm_data

audit                         oracle_sunecm_tbs

bin                           pconsole

ceclient_install_log_5.0.txt  proc

configmgr0.log                sbin

configmgr1.log                smit.log

configmgr2.log                smit.script

configmgr3.log                smit.transaction

configmgr4.log                tftpboot

configmgr_workspace           tmp

dev                           tmp.txt

dev.org                       u

ecmdata                       u01

esa                           unix

etc                           updilogs

filenet                       usr

filenetdblog                  var

filenetdbts                   was

filestorage

# cd /etc

# ls

.init.state         gfsinstall          ntp.conf            rc.stopaacct

.trcfmt.lock        group               objrepos            rc.tcpip

3270.keys           gxsetup_guid        opt                 rc.tcptr

3270_arab_kyb.map   ha                  options.file        rc.teboot

3270keys.dtterm     hba.conf            oraInst.loc         rc.trustedboot

3270keys.hft        hostmibd.conf       oratab              rc.wpars

CommVaultRegistry   hosts               pam.conf            rmtab

LUMls.rc            hosts.equiv         pam.conf.websm.bak  rmtab_bak

TIVGUID             hosts.lpd           passwd              route

X11                 i4ls.rc             pegasus             rpc

acct                ibm                 perf                rpc.pcnfsd

aixmibd.conf        ifconfig            ping                rpm

aliases             inetd.conf          policyd.conf        rsvpd.conf

atm.defs            inetd.pid           ppp                 securetcpip

atmsvcd.pid         info-dir            preserve.list       security

binld.cnf           init                profile             sendmail.cf

bootptab            inittab             project             services

bosboot.sum         inittab.orig        protocols           shells

cdrecord.conf       ipsec               prtglobalconfig     slip.hosts

cdromd.conf         isakmpd.conf        pse.conf            slip.login

check_config.files  iscsi               pse_tune.conf       slip.logout

cifs_fs             isoaliases          publickey           slp.conf

cit                 isobjects           pxed.cnf            snmpd.boots

clsnmp.conf         isoentities         qconfig             snmpd.conf

cluster             isomacros           qconfig.bin         snmpd.peers

consdef             isoservices         rc                  snmpdv3.conf

corrals             java5               rc.C2               snmpinterfaces

cronlog.conf        java5_64            rc.CC               snmpmibd.conf

csh.cshrc           java6               rc.bootc            ssh

csh.login           java6_64            rc.bsdnet           swapspaces

ct_node_id          libibverbs.d        rc.corrals          syslog.conf

cxbfdd.conf         locks               rc.cxbf             syslog.pid

dfpd.conf           lpp                 rc.d                tcp.clean

dhcpcd.ini          magic               rc.dacinet          telnet.conf

dhcprd.cnf          mail                rc.dt               tivoli

dhcpsd.cnf          map3270             rc.galaxy           tnc_config

dhcpv6              methods             rc.ha_star          trcfmt

dlpi.conf           methods.cfg         rc.ike              tsh_profile

drivers             mh                  rc.mobip6           tunables

dt                  mib.defs            rc.net              utmp

dtappintegrate      microcode           rc.net.serial       uucp

dumpdates           mkcifs_fs           rc.netwlm           uucpd

environment         monitor_disk        rc.nfs              vfs

es                  motd                rc.nfs4ss           vg

ewlm                motd_bak            rc.powerfail        wlm

exports             mrouted.conf        rc.qos              wpars

fb_02_04_11_24      ncs                 rc.security.boot    xtab

filesystems         netsvc.conf         rc.shutdown         xtabdup

galaxy              nfs.clean           rc.shutdown.saved   xtiso.conf

gated.conf          nscontrol.conf      rc.startaacct

# cd security

(21)解决问题的时候到了,但是只用户模式下,只能more、cat。

# more user

*******************************************************************************

* VALID USER ATTRIBUTES FOR /ETC/SECURITY/USER:

*

* account_locked Defines whether the account is locked.  Locked accounts can

*               not be used for login.  Possible values: true or false.

*

* admin         Defines the administrative status of the user.

*               Possible values: true or false.

*

* admgroups     Lists the groups that the user administrates.  The value

*               is a comma-separated list of valid group names.

*

* auth1         Defines primary authentication methods for a user.  This

*               attribute describes Version 3 style authentication methods.  

*               Commands login, telnet, rlogin, and su support these

*               authentication methods.

*

*               Possible values: SYSTEM,NONE,token;username.

*

*                       SYSTEM  : Describes normal password authentication in

*                                 Version 3.  Version 4 has extended this

*                                 definition to include loadable modules and

*                                 an authentication grammar.  See SYSTEM

*                                 attribute description below.

*

*                       NONE    : No authentication.

*

*                       token;username  : A generic name for a custom

*                                         authentication method defined in

*                                         /etc/security/login.cfg.

*                      

*               Example:

*                       If auth1 is:

*                               auth1 = SYSTEM,mylogin;mary

*

*                       And the stanza in /etc/security/login.cfg is:

*                               mylogin:

*                                       program = /etc/myprogram

*

*                       This will do password authentication, and then

*                       invoke the program /etc/myprogram with "mary"

*                       as the first parameter.

*                      

* auth2         Defines the secondary authentication methods for a user.

*               It is not a requirement to pass this method to login.

*               See auth1 description above for examples.

*ser (13%)

* SYSTEM        Describes Version 4 authentication requirements.  This

*               attribute can be used to describe multiple or alternate

*               authentication methods.  See authenticate() routine and

*               SYSTEM grammar manual pages.

*

*               Possible tokens:

*

*                       files   : local only authentication.

*                       compat  : local plus NIS authentication.  

*                                 Version 3 behavior.

*                       DCE     : Distributed Computing Environment

*                                 authentication.

*              

*               Example:

*                       SYSTEM = "DCE OR DCE[UNAVAIL] AND compat"

*

* daemon        Defines whether the user can execute programs using the system

*               resource controller (SRC). Possible values: true or false.

*

* default_roles Defines a user's default roles. If set to ALL, the users

*               role attribute will be used as its default roles.

*

* dictionlist   Defines the password dictionaries used when checking new

*               passwords.  The format is a comma-separated list of absolute

*               path names to dictionary files.  A dictionary file contains

*               one word per line where each word has no leading or trailing

*               white space.  Words should only contain 7 bit ASCII characters.

*               All dictionary files and directories should be write protected

*               from everyone except root.  The default is valueless, which is

*               equivalent to no dictionary checking.

*

*               Example dictionary:  /usr/share/dict/words

*                       (Only available if text processing is installed.)

*

* expires       Defines the expiration time for the user account.

*               Possible values: a valid date in the form MMDDHHMMYY or 0.

*               If 0 the account does not expire.  If 0101000070 the account

*               is disabled.  The range for YY is:

*                       00 - 38    years 2000 thru 2038

*                       39 - 99    years 1939 thru 1999

*

* histexpire    Defines the period of time in weeks that a user

*               will not be able to reuse a password.

*               Possible values: an integer value between 0 and 260.

*               26 (approximately 6 months) is the recommended value.

*ser (31%)

* histsize      Defines the number of previous passwords which cannot be

*               reused.

*               Possible values:  an integer value between 0 and 50.

*

* login         Defines whether the user can login.

*               Possible values : true or false.

*

* logintimes    Defines the times a user can login.  The value is a comma

*               separated list of items as follows:

*                       [!][MMdd[-MMdd]]:hhmm-hhmm

*                               or

*                       [!]MMdd[-MMdd][:hhmm-hhmm]

*                               or

*                       [!][w[-w]]:hhmm-hhmm

*                               or

*                       [!]w[-w][:hhmm-hhmm]

*               where MM is a month number (00=January, 11=December), dd is

*               the day of the month, hh is the hour of the day (00 - 23), mm

*               is the minute of the hour, and w is a weekday (0=Sunday, 6=

*               Saturday).

*

* loginretries  The number of invalid login attempts before a user is not

*               allowed to login.  Possible values: a positive integer or 0

*               to disable this feature.

*

* maxage        Defines the maximum number of weeks a password is valid.  The

*               default is 0, which is equivalent to unlimited. Range: 0 to 52.

*

* maxexpired    Defines the maximum number of weeks after maxage that an expired

*               password can be changed by a user.  The default is -1, which

*               is equivalent to unlimited.  Range: -1 to 52.  maxage must

*               be greater than 0 for maxexpired to be enforced.  (root is

*               exempt from maxexpired.)

*

* maxrepeats    Defines the maximum number of times a given character can

*               appear in a password. The default is 8. Range: 0 to PW_PASSLEN.

*

* minage        Defines the minimum number of weeks between password changes.

*               The default is 0.  Range: 0 to 52.

*

* minalpha      Defines the minimum number of alphabetic characters in a

*               password. The default is 0.  Range: 0 to PW_PASSLEN.

*

* mindiff       Defines the minimum number of characters in the new password

*               that were not in the old password.  The default is 0.

*               Range: 0 to PW_PASSLEN.

# er (49%)

#

#

# chuser expires=0 root

#

(22)试着vi, 不好使哦。

# vi user

unknown: Unknown terminal type

[Hit return to continue]


[Using open mode]

"user" 368 lines, 11350 characters

                                  *******************************************************************************

                                                                                                                 :q

(23)既然不能vi,那只有使用命令搞定了

#lsuser "ALL"       ------------找到root的expires参数                                                                                                               #

#chuser expires=0 root

#

(24)OK,大功告成,启动系统。

# reboot

Rebooting . . .


!!! 00E0806 Fcode, Copyright (c) 2000-2008 Emulex !!!  Version 3.10a3



!!! 00E0806 Fcode, Copyright (c) 2000-2008 Emulex !!!  Version 3.10a3



!!! 00E0806 Fcode, Copyright (c) 2000-2008 Emulex !!!  Version 3.10a3



!!! 00E0806 Fcode, Copyright (c) 2000-2008 Emulex !!!  Version 3.10a3






你可能感兴趣的:(AIX,解决办法,维护模式)