How to unlock expired/locked root account on Exadata Compute nodes and Storag...

liuxj

From step 2 below all commands have to be executed on System Console (either directly sitting in front of the physical system with console screen attached, via SSH remote SP console or Web Based ILOM remote console option.

• Reboot via the ILOM web interface either:
  
  • via the web interface:
    
    • For current ILOM versions:
      
      • go to "Host Management", at "Power Control" choose 'Power Cycle" for "Settings"
        
    • For older ILOM versions:
      
      • go to "System Overview",  at "Host Power" choose 'Power Cycle"
      • From ILOM web interface start remote console by going to Remote Control -> Launch Remote Console
        
  • via ssh remote SP console:
    
    • reset /SYS
    • start /SP/console
      
• On the ILOM web console or ssh remote SP console: when the Grub Menu screen appears, immediately hit the arrow down key. Please note, here is a short window for this , so carefully watch the screen.
• Select the proper line to boot from and press "p" to supply the GRUB password <get password from support by filing an SR>.
  
  • On the storage servers use the "default" entry, which is usually the first entry in the grub boot menu
    
• Press the "e" key to edit the boot entry
• Using the down arrow, select the line that starts with "kernel", then press the "e" key to edit
• At the grub line starting with "kernel" add at the end the following string: single init=/bin/bash
• Hit "Enter" key (will save changes ) - or - Ctrl-X to ensure the changes are saved in the boot entry
• Hit "b" key (to boot)
  
  • With later diagnostic.iso images, if you execute this procedure, looking at the Web Ilom, the server may appear to hang at this step after the message "EXT3-FS: mounted filesystem with ordered data_mode". This is because the ILOM Remote Console has been redirected to tty1. If you want to see the shell prompt SSH to the ILOM and start the serial console via 'start /SP/console', you will then be presented  the shell prompt there. To avoid this, in step 6, delete the "console=vty1" phrase before hitting enter (you do still want to add "single init=/bin/bash", but you also want to delete the second console phrase. Leave the first "console=<something>" intact. The system will now redirect the console to the SP session.
    
• On the command line: mount -o remount,rw / (mount / in read/write mode)
• On the command line: passwd (change the password)
• On the command line: Use the following utility to avoid the requirement to reset password expiration:  
  
  • # /opt/oracle.cellos/host_access_control pam-auth --defaults
    
    
• On the command line: mount -o remount,ro / (mount / in read-only mode, as expected by the fsck init script)
• On the command line: exec /sbin/init (to spawn init in it's default runlevel and resume the boot)
  
  • 
    
• If steps 12 or 13 above fail, then run on the command line "sync" and reboot or power cycle the system.