背景:

近日,本人由于做系统安全加固,编辑/etc/security/user加密码策略时,不小心将root与daemon之间的空行删除,

用普通用户su - root时报错:

$>su -

root's Password:

3004-302 Your account has expired:please see the system administrator.

3004-501 Cannot su to "root":Account has expired.

$

无耐之中,搜解决办法。最终的确定以下解决步骤........


注:

(1)如果是HA环境,则只需要将其中一个node的资源组切换到另一个node上,这样做以下步骤是风险最小的。将重启的node root解救后,

   再通过HA,可以将另一个node的root解决。

(2)如果是单机环境 ,那只能按照以下步骤一台一台的解决了。


准备工作:

1.首先要知道自已的AIX操作系统是什么版本,然后准备相应的安装光盘(只需主要版本一致即可,次要版本和维护级可以忽略)。

 如果你有OS备份磁带,那就用磁带也可以。由于本人没有OS备份,所以只能用光盘。

oslevel -s

2.USB转串口线(如果有HMC,那是最优选择)。

具体操作:

(1)重启小机(如果能用ASMI进行重启当然最好),进入以下界面,选1,进SMS。

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM


         1 = SMS Menu                          5 = Default Boot List

         8 = Open Firmware Prompt              6 = Stored Boot List



    Memory      Keyboard     Network     SCSI     Speaker


(2)进入以下界面---语言修改。

PowerPC Firmware

Version AL740_088

LKM 1.6 (c) Copyright IBM Corp. 2000,2005 All rights reserved.

-------------------------------------------------------------------------------

Language Selection Menu


Current Language :  ISO8859-1 English (United States)


1.   Change Language

2.   Continue to Password Entry










-------------------------------------------------------------------------------




-------------------------------------------------------------------------------

Type menu item number and press Enter:1

(3)我选择11(UTF-8     English (United States))。

PowerPC Firmware

Version AL740_088

LKM 1.6 (c) Copyright IBM Corp. 2000,2005 All rights reserved.

-------------------------------------------------------------------------------

Select Language

1.   ISO8859-1 English (United States)

2.   ISO8859-1 French

3.   ISO8859-1 German

4.   ISO8859-1 Italian

5.   ISO8859-1 Spanish

6.   ISO8859-1 Portuguese (Brazil)

7.   BIG5      Chinese (Traditional)

8.   GB2312    Chinese (Simplified)

9.   EUC-JP    Japanese

10.   EUC-KR    Korean

11.   UTF-8     English (United States)

12.   UTF-8     Spanish

13.   UTF-8     French

14.   UTF-8     German

-------------------------------------------------------------------------------

Navigation keys:

                             N = Next page of list

ESC key = return to previous screen                                            

-------------------------------------------------------------------------------

Type menu item number and press Enter or select Navigation key:11

(4)要求输入密码,默认admin

PowerPC Firmware

Version AL740_088

LKM 1.6 (c) Copyright IBM Corp. 2000,2005 All rights reserved.

-------------------------------------------------------------------------------

Language Selection Menu


Current Language :  UTF-8     English (United States)


1.   Change Language

2.   Continue to Password Entry










-------------------------------------------------------------------------------




-------------------------------------------------------------------------------

Type menu item number and press Enter:2










      .---------------------------------------------------------------.

      |  Please enter the Service Processor 'admin' account password. |

      `---------------------------------------------------------------'













*****

(5) 选择启动项 5(Select Boot Options)


PowerPC Firmware

Version AL740_088

SMS 1.7 (c) Copyright IBM Corp. 2000,2008 All rights reserved.

-------------------------------------------------------------------------------

Main Menu

1.   Select Language

2.   Setup Remote IPL (Initial Program Load)

3.   Change SCSI Settings

4.   Select Console

5.   Select Boot Options










-------------------------------------------------------------------------------

Navigation Keys:


                                            X = eXit System Management Services

-------------------------------------------------------------------------------

Type menu item number and press Enter or select Navigation key:5

(6)选择安装/启动设备(Select Install/Boot Device)

PowerPC Firmware

Version AL740_088

SMS 1.7 (c) Copyright IBM Corp. 2000,2008 All rights reserved.

-------------------------------------------------------------------------------

Multiboot

1.   Select Install/Boot Device

2.   Configure Boot Device Order

3.   Multiboot Startup <OFF>

4.   SAN Zoning Support











-------------------------------------------------------------------------------

Navigation keys:

M = return to Main Menu

ESC key = return to previous screen         X = eXit System Management Services

-------------------------------------------------------------------------------

Type menu item number and press Enter or select Navigation key:1










                             .------------------.

                             |  PLEASE WAIT.... |

                             `------------------'













(7)选择安装设备3(CD/DVD)


PowerPC Firmware

Version AL740_088

SMS 1.7 (c) Copyright IBM Corp. 2000,2008 All rights reserved.

-------------------------------------------------------------------------------

Select Device Type

1.   Diskette

2.   Tape

3.   CD/DVD

4.   IDE

5.   Hard Drive

6.   Network

7.   List all Devices








-------------------------------------------------------------------------------

Navigation keys:

M = return to Main Menu

ESC key = return to previous screen         X = eXit System Management Services

-------------------------------------------------------------------------------

Type menu item number and press Enter or select Navigation key:3

(8)选择安装介质类型(如果你的CD-ROM是内置的IDE设备,就选IDE;如果你的CD-ROM是SCSI,则选SCSI;如果你不知道

设备介质类型,那么只好按9࿰