HP SMH retrieve password

[Naj]

Hello expert,

Is there has any way to retrieve back username & password via console for HP SMH?

I've root access into server but for HP SMH hold by some one and he left from organization

Any idea on this?

Thanks

BR

Naj

[Stephan.]

Hi Naj,

you can run a trace while authenticating from SMH. You need tusc installed for it, use the following script to enable the trace.

#!/usr/bin/sh
CIMSERVER_PID=$(UNIX95=1 ps -C cimserver -opid=)
CIMSERVERMAIN_PID=$(UNIX95=1 ps -C cimservermain -opid=)
OUTPUTDIR=/var/tmp
 
# echo $CIMSERVER_PID $CIMSERVERMAIN_PID
 
/usr/local/bin/tusc -fune -r all -w all -T "" -o $OUTPUTDIR/cimserver_$$.tusc -p $CIMSERVER_PID &
/usr/local/bin/tusc -fune -r all -w all -T "" -o $OUTPUTDIR/cimservermain_$$.tusc -p $CIMSERVERMAIN_PID &
 
echo
echo "Trace active - reproduce whatever is needed"
echo "Press enter to shutdown trace"
echo
read DUMMY
 
kill $(UNIX95=1 ps -C tusc -opid=)
echo "Check the generated traces:"
echo "$OUTPUTDIR/cimserver_$$.tusc"
echo "$OUTPUTDIR/cimservermain_$$.tusc"
echo

 Authenticate via the SMH, in the file cimserver_$$.tusc you will find at the beginning a section like this:

1302679014.008394 [/opt/wbem/lb][3100] #1 read(6, 0x9fffffffffff73e0, 4096) ........................................................... = 4096
r o o t \0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0
\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0
\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0
\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0
\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0
\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0
\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0
\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0
\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0

 Obviously root is your user and a little bit below you find the password (take out the blanks).

hth,

Stephan

[Naj]

Hi,

Thanks for the reply, but could you please give me step to perform this..

Thnks in advanced

BR
Naj

[Stephan.]

Hi Naj,

which step is not clear?

tusc can be found here: http://hpux.connect.org.uk/hppd/hpux/Sysadmin/tusc-8.0/

Best,

Stephan