Re: No Root password

From: Bigi Brada (bigibrada_at_hotmail.com)
Date: 10/24/03


Date: Fri, 24 Oct 2003 01:57:45 +0200

Ulrich--nO--(dot)-sPAM--Link <"Ulrich--nO--(dot)-sPAM--Link"@Epost.de> wrote
in message news:bn75pq$e2e$05$1@news.t-online.com...

> What a mistake is, is that you nee dthe same OSlevel bootmedia. This is
not
> true. If the box runs AIX4.3.3 and you have a CD from AIX 4.2.0, you can
> still
> boot from this CD, go into maintenance mode, import rootvg and all that
> stuff
> acces the root volume group and just simply change the root password by
>
entering....................................................................
> ....passwd!

Not my expirience. My AIX 5.1 ML5 didn't get a shell booted from the AIX
5.1 ML2 media due an unresolved symbol in libc.a :-(
I forgot to call bosboot after mirroring hd5 before rebooting, ouuchh.

A volumegroup with tfactor > 1 cannot be imported into earlier than AIX 4.3

You can use the import vg and start a shell before mounting.
Then mount hd4 and ...

> If that will not succeed for one reason than edit the /mnt/etc/passwd file
> and

Is vi part of the tapeinstl image of an mksysb tape or installation CD?
I think you'll have to pax it out on floppy and back it in after editing
on another machine.

> remove the encrypted password part by simply making it :: .
> Best thing is to copy the /etc/passwd first to /etc/passwd.new,
> then vi it while the system is still running and remove the encrypted root
> passwd part. When you boot form the CDmedia you usually have no vi
> possibilites so you can then move the /etc/passwd to /etc/passwd.org
> and the copy the /etc/passwd.new to /etc/passwd.
> The system needs a /etc/passwd or it will not boot completely.
> I've written a complete procedure for this so if you want this mail me.
> I know this is a big security leak but as long as no one has access to the
> box i see no harm in it.

This was the reason, why older machines had a keylock.
So you have first to find the right key before or use some physical harm.

Perhaps I should build a generic mksysb-CD with no backup but with vi
and sell the ISO :-)

---
Uli
Uhhhhhhhhh........a long abandoned RS6000 AIX machine running
AIX5.1?????????
Don't think so, so his problem will be solved with my solution.
Tested it myself on a model 250 running AIX4.3 and booted from a
AIX 4.2 CD, no problem.
After booting from a CD you have no vi correct but you have AIX so
if you have the file ready set somewhere on your system or floppy
you can just copy over it. Another way, some extra work is to
echo it all from the shell, ie. echo root:0.0::me >/mnt/etc/passwd
next line >>/mnt/etc/passwd
Believe me, i have tried all options.
If you loose the key from your system, i think you are not the
authorised person to work on it or else brake open the box.
Not such a big deal too with this old machines.
Emergency brakes rules and btw i have not heard Steve mentioning
that he has no key of the system. Just no CD so he needs to get
himself an AIX boot CD from whatever version > 3.2.5.
Marc


Relevant Pages

  • Re: lost root password in pseries AIX 5.1
    ... chuck in your AIX cd, boot into service mode (keep hitting 5 when you ... thingy, from there go to advanced options or maintenance, in ... Once the root filesystem is mounted, you are root on your box, so then ...
    (comp.unix.aix)
  • RE: Linux hacked
    ... Subject: Linux hacked ... After you boot up into the OS running from CD, ... >> First let me say I'm a security novice. ... >> been unsuccessful in getting root back. ...
    (Security-Basics)
  • SUMMARY: Re: Moving a boot disc from SunFire v120 to SunFire v210 [Our NIS+ RMS has failed]
    ... "You will not need to rewrite any boot block info. ... This document can be used with root under Veritas ... or is just a simple slice. ... If the root filesystem is under either VxVM control or SDS/SVM Control, ...
    (SunManagers)
  • Re: How do I solve this boot.ini problem with WinXP?
    ... This is the current state of my boot.ini file in Win2K's Root: ... In a Microsoft dual boot ... or Multiple Hard Disk only one can be set as a "Active Partition". ...
    (microsoft.public.windowsxp.newusers)
  • Re: Linux hacked
    ... is to boot your system with a separate ... You can't trust the logs, ... >> First let me say I'm a security novice. ... >> been unsuccessful in getting root back. ...
    (Security-Basics)