Great Circle Associates Firewalls
(July 1996)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: RE: [HELP] I lost root password! (from Digest)
From: "Joseph S. D. Yao" <jsdy @ cospo . osis . gov>
Date: Fri, 19 Jul 1996 14:51:51 -0400
To: Firewalls @ GreatCircle . COM
Cc: jypark @ comsun . chungnam . ac . kr

> Date: Thu, 18 Jul 1996 13:20:24 +0100
> From: P=?iso-8859-1?Q?=E4r Ahr=E9?=n <pera @
 medcom .
 se>
> Subject: RE: [HELP] I lost root password!
>
> >Date: Wed, 17 Jul 1996 18:10:22 +1000
> >From: Juyoung Park <jypark @
 comsun .
 chungnam .
 ac .
 kr>
> >Subject: [HELP] I lost root password!
> >This is an very emergency state to me!
> >Someone broken my root password!  ...
>
> disconnect the machine from the net!

...

> c) boot from the install CD (or tape) and press ctrl+c to get a shell

Do an 'fsck' on the root partition, to make sure that any garbage left
from the unscheduled power-down is cleaned up.  I believe that you
won't be allowed to mount it otherwise; but why take chances?

> d) mount the disk to (the one in _a_) /tmp or some other directory thas
> empty

Do NOT mount it to /tmp.  Too many things write to /tmp without telling
you.  Mount it to /mnt, or some other directory that is otherwise
unused.  If there is no unused directory on the file system, and you
can't create one, then find a directory that only contains stuff needed
to install SunOS/Solaris (which you aren't going to be doing), and
mount it there.

> e) edit to /etc/passwd file and remove the root password

I would get a "known" password, rather than just removing the password.
But I'm notoriously paranoid about these things.

If you have shadow passwords turned on, change the shadow password
file, rather than the /etc/passwd file.

Do NOT replace the current file(s) with old versions; other users may
have made changes.  Only change the passwd field of the appropriate
file.

Once you have changed the file system, remember to 'sync' and unmount
the file system; otherwise, your file system state may not be clean,
and you will have to 'fsck' and possibly do this all over again.

> f) turn off the power or halt

--
Joe Yao				jsdy @
 cospo .
 osis .
 gov - Joseph S. D. Yao
COSPO Computer Support						EMT-A/B
-----------------------------------------------------------------------
	PLEASE ... send or Cc: all "COSPO Computer Support" mail to
			sys-adm @
 cospo .
 osis .
 gov

Indexed By Date Previous: Re: Network Security Magazines?
From: bobk @ manzanita . DEV . 3Com . COM (Bob Konigsberg)
Next: Workstation
From: "Raboch Walter" <bytevampy @ relay4 . l . netwing . at>
Indexed By Thread Previous: UDP Broadcast
From: Darwin Martinez <Darwin_Martinez @ INS . COM>
Next: Workstation
From: "Raboch Walter" <bytevampy @ relay4 . l . netwing . at>

Google
 
Search Internet Search www.greatcircle.com