Very Computer

by **jem2..** » Tue, 04 Jul 2000 04:00:00

OK I have really gone & done it!

I was using an old Sun box we have in the office,
for which we have a root user and a root
password, but that's about it.

OK thought I, I'll just make myself a new user so
I did, I used USERADD which then told me to run a
password updating utility, I think called PASSUPD
or maybe PASSCONV but I didn't write it down. The
app ran, no problem and, with no comments
returned me to the shell prompt. So I set up my
password for my new user, crossed my fingers and
logged out.

STUPID STUPID STUPID!

Now when I try to log in as root with the root
password it won't let me in. I can get in as my
new user but with hardly any access rights.

What gives? What have I done? How on earth did
the root password change without it telling me?
What sort of an OS changes root
password "invisibly". Aargh. I need to get this
machine back and running by the end of today and
I haven't a clue how to.

Anyone, anywhere? Any ideas? Any hints? PLEASE
PLEASE PLEASE!

BTW I'm using SunOS 5.4 on a SUN Sparcstation 20

OK, laugh...go on...laugh. Damn Damn damn

Jeremy

Sent via Deja.com http://www.deja.com/
Before you buy.

by **Andy** » Tue, 04 Jul 2000 04:00:00

> OK I have really gone & done it!

> I was using an old Sun box we have in the office,
> for which we have a root user and a root
> password, but that's about it.

> OK thought I, I'll just make myself a new user so
> I did, I used USERADD which then told me to run a
> password updating utility, I think called PASSUPD
> or maybe PASSCONV but I didn't write it down. The
> app ran, no problem and, with no comments
> returned me to the shell prompt. So I set up my
> password for my new user, crossed my fingers and
> logged out.

> STUPID STUPID STUPID!

> Now when I try to log in as root with the root
> password it won't let me in. I can get in as my
> new user but with hardly any access rights.

*IF* you can shut it down, boot from cdrom and exit out of the
install at the first opportunity. Mount the old / directory
somewhere, edit the shadow file by hand. reboot.

--
-Andy M
http://synecdoche.net/~andy

Sent via Deja.com http://www.deja.com/
Before you buy.

by **Gopal** » Tue, 04 Jul 2000 04:00:00

I dont see anything really wrong in what you did :) It is very common,
even big gurus' also do that. But do realize when you touch passwd
command or file, before logging out, if you can return back or not.
Anyway, as Andy suggested, shut it down ( STOP-A, boot cdrom) and boot
from cdrom. during installation, right click on Openwindow desktop area
and open a Terminal.
Check if your root disk is mounted or not. If not ( you must know which
is your root disk, if you have more than one disk ), mount
/dev/dsk/cxtxdxsx /mnt
and vi /mnt/etc/shadow
locate the root entry and change the Seconds column to NP ( no password
). Or whatever is appropriate to SunOS5.4.
Save the file, unmount the /mnt filesystem, reboot you must be all set.
Keep backups of passwd and shadow files whenever you are doing such
changes in future.

Gopi.

> OK I have really gone & done it!

> I was using an old Sun box we have in the office,
> for which we have a root user and a root
> password, but that's about it.

> OK thought I, I'll just make myself a new user so
> I did, I used USERADD which then told me to run a
> password updating utility, I think called PASSUPD
> or maybe PASSCONV but I didn't write it down. The
> app ran, no problem and, with no comments

Sent via Deja.com http://www.deja.com/
Before you buy.

by **Jem** » Tue, 04 Jul 2000 04:00:00

Ah, but that assumes I have the CD-ROM!!! This box is so old noone knows
where the CDROM is.

I have access to another one of these boxes (if they let me touch it!!)
which apparently provides Network Information Services to the broken
box. We tried making the password files and pushing them down to the
broken box but it didn't seem to make any difference.

Is it possible to create a boot floppy on the working box that can mount
up the SCSI drives in the broken box and thus allow me to access the
pasword files??

Jeremy

says...

> > OK I have really gone & done it!

> > I was using an old Sun box we have in the office,
> > for which we have a root user and a root
> > password, but that's about it.

> > OK thought I, I'll just make myself a new user so
> > I did, I used USERADD which then told me to run a
> > password updating utility, I think called PASSUPD
> > or maybe PASSCONV but I didn't write it down. The
> > app ran, no problem and, with no comments
> > returned me to the shell prompt. So I set up my
> > password for my new user, crossed my fingers and
> > logged out.

> > STUPID STUPID STUPID!

> > Now when I try to log in as root with the root
> > password it won't let me in. I can get in as my
> > new user but with hardly any access rights.

> *IF* you can shut it down, boot from cdrom and exit out of the
> install at the first opportunity. Mount the old / directory
> somewhere, edit the shadow file by hand. reboot.

> --
> -Andy M
> http://synecdoche.net/~andy

> Sent via Deja.com http://www.deja.com/
> Before you buy.

by **arthur_..** » Tue, 04 Jul 2000 04:00:00

There is a thread in comp.unix.solaris
with title "Password Cracking in Sol 8" msg #7
=====quote===========

<< previous in thread next in thread >>

If you can do a stop-A (if you can get to the box via serial port,
through a terminal server or whatever), try this hack.

Steve

F S UID PID PPID C PRI NI ADDR SZ WCHAN TTY TIME CMD
8 S 108 4663 4658 0 51 20 f60e9b88 383 f69e8bf8 pts/10 0:00
ksh

Find the address of the "cred" structure (24 bytes from start of
process) :-

f592a908

Set the effective user found at this memory address to zero :-

ok hex 0 f592a908 4 + l!
ok go

Done, check our effective user now :-

uid=108(xxxx) gid=30(sysadmin) euid=0(root)
==========UNquote===============

Will this also work for 5.4?
He has access to the machine !
/Arthur

> I dont see anything really wrong in what you did :) It is very common,
> even big gurus' also do that. But do realize when you touch passwd
> command or file, before logging out, if you can return back or not.
> Anyway, as Andy suggested, shut it down ( STOP-A, boot cdrom) and boot
> from cdrom. during installation, right click on Openwindow desktop
area
> and open a Terminal.
> Check if your root disk is mounted or not. If not ( you must know
which
> is your root disk, if you have more than one disk ), mount
> /dev/dsk/cxtxdxsx /mnt
> and vi /mnt/etc/shadow
> locate the root entry and change the Seconds column to NP ( no
password
> ). Or whatever is appropriate to SunOS5.4.
> Save the file, unmount the /mnt filesystem, reboot you must be all
set.
> Keep backups of passwd and shadow files whenever you are doing such
> changes in future.

> Gopi.

> > OK I have really gone & done it!

> > I was using an old Sun box we have in the office,
> > for which we have a root user and a root
> > password, but that's about it.

> > OK thought I, I'll just make myself a new user so
> > I did, I used USERADD which then told me to run a
> > password updating utility, I think called PASSUPD
> > or maybe PASSCONV but I didn't write it down. The
> > app ran, no problem and, with no comments

> Sent via Deja.com http://www.deja.com/
> Before you buy.

Sent via Deja.com http://www.deja.com/
Before you buy.

by **Jayn** » Tue, 04 Jul 2000 04:00:00

> Ah, but that assumes I have the CD-ROM!!! This box is so old noone knows
> where the CDROM is.

> I have access to another one of these boxes (if they let me touch it!!)
> which apparently provides Network Information Services to the broken
> box. We tried making the password files and pushing them down to the
> broken box but it didn't seem to make any difference.

YP won't propagate the root password.

However, as a last resort, you could physically remove the hard drive,
change its ID and attach it to your other Sparc box, mount it somewhere
suitable and hand-edit the password/shadow files.

Or, if the machine is really old, try a 'L1-A' followed by 'boot -s'
which
might get you in as root in single-user mode. Again edit the password
file, then reboot.

Jayne.

by **woknes** » Wed, 05 Jul 2000 04:00:00

You you just typed passwd and put in a new password right? That means that
you changed roots password. So then all you sould have to do is login as
root, with the password you created for your new user, then type passwd
again, set it to what it was before.

hope this helps,
wokness

>OK I have really gone & done it!

>I was using an old Sun box we have in the office,
>for which we have a root user and a root
>password, but that's about it.

>OK thought I, I'll just make myself a new user so
>I did, I used USERADD which then told me to run a
>password updating utility, I think called PASSUPD
>or maybe PASSCONV but I didn't write it down. The
>app ran, no problem and, with no comments
>returned me to the shell prompt. So I set up my
>password for my new user, crossed my fingers and
>logged out.

>STUPID STUPID STUPID!

>Now when I try to log in as root with the root
>password it won't let me in. I can get in as my
>new user but with hardly any access rights.

>What gives? What have I done? How on earth did
>the root password change without it telling me?
>What sort of an OS changes root
>password "invisibly". Aargh. I need to get this
>machine back and running by the end of today and
>I haven't a clue how to.

>Anyone, anywhere? Any ideas? Any hints? PLEASE
>PLEASE PLEASE!

>BTW I'm using SunOS 5.4 on a SUN Sparcstation 20

>OK, laugh...go on...laugh. Damn Damn damn

>Jeremy

>Sent via Deja.com http://www.deja.com/
>Before you buy.

by **Lutz** » Wed, 05 Jul 2000 04:00:00

> STUPID STUPID STUPID!

> Now when I try to log in as root with the root
> password it won't let me in. I can get in as my
> new user but with hardly any access rights.

Start off booting from CD, mount that slice with
/etc/passwd on and get rid of the root PW, reboot.

else

install new

lutz

by **Andy** » Thu, 06 Jul 2000 04:00:00

> > I have access to another one of these boxes (if they let me touch
it!!)
> > which apparently provides Network Information Services to the broken
> > box. We tried making the password files and pushing them down to the
> > broken box but it didn't seem to make any difference.

> YP won't propagate the root password.

right, because the root user is a LOCAL account, but Jem could always
make a NIS account with ID == 0, push it out, then log into his messed-
up box as that user and fix the damage.

--
-Andy M
http://synecdoche.net/~andy

Sent via Deja.com http://www.deja.com/
Before you buy.

by **roo** » Sun, 09 Jul 2000 04:00:00

No CDROM? OK, then boot from the tape. hehe

>Ah, but that assumes I have the CD-ROM!!! This box is so old noone knows
>where the CDROM is.

>I have access to another one of these boxes (if they let me touch it!!)
>which apparently provides Network Information Services to the broken
>box. We tried making the password files and pushing them down to the
>broken box but it didn't seem to make any difference.

>Is it possible to create a boot floppy on the working box that can mount
>up the SCSI drives in the broken box and thus allow me to access the
>pasword files??

>Jeremy

>says...

>> > OK I have really gone & done it!

>> > I was using an old Sun box we have in the office,
>> > for which we have a root user and a root
>> > password, but that's about it.

>> > OK thought I, I'll just make myself a new user so
>> > I did, I used USERADD which then told me to run a
>> > password updating utility, I think called PASSUPD
>> > or maybe PASSCONV but I didn't write it down. The
>> > app ran, no problem and, with no comments
>> > returned me to the shell prompt. So I set up my
>> > password for my new user, crossed my fingers and
>> > logged out.

>> > STUPID STUPID STUPID!

>> > Now when I try to log in as root with the root
>> > password it won't let me in. I can get in as my
>> > new user but with hardly any access rights.

>> *IF* you can shut it down, boot from cdrom and exit out of the
>> install at the first opportunity. Mount the old / directory
>> somewhere, edit the shadow file by hand. reboot.

>> --
>> -Andy M
>> http://synecdoche.net/~andy

>> Sent via Deja.com http://www.deja.com/
>> Before you buy.

Very Computer

Forgive me Gurus but I've f**ked up big time HELP HELP HELP!

Forgive me Gurus but I've f**ked up big time HELP HELP HELP!

Forgive me Gurus but I've f**ked up big time HELP HELP HELP!

Forgive me Gurus but I've f**ked up big time HELP HELP HELP!

Forgive me Gurus but I've f**ked up big time HELP HELP HELP!

Forgive me Gurus but I've f**ked up big time HELP HELP HELP!

Forgive me Gurus but I've f**ked up big time HELP HELP HELP!

Forgive me Gurus but I've f**ked up big time HELP HELP HELP!

Forgive me Gurus but I've f**ked up big time HELP HELP HELP!

Forgive me Gurus but I've f**ked up big time HELP HELP HELP!

Forgive me Gurus but I've f**ked up big time HELP HELP HELP!