root passwd on trusted system

[system administrator_15]

Hi guys
i have a problem in that the root passwd was changed last week while i was at home enjoying the weather and know i cant access it as the person who changed it must be dislexic as the spelling he used obviosly isn't in any dictionary.
my question is, i can't change the root passwd without knowing the old one and it is a production server so shutdown not possible.
if i delete the entry below in /tcb/files/auth/r/root to make it look like this
:u_pwd=:will that remove passwd on root and thus allow me to reset.

[Uday_S_Ankolekar]

Your try changing root file should do the trick but be careful while modifying this file. make a copy of that file before editing

make :u_pwd=bNY5dfu7LKRDW:\ look like :u_pwd=:
Then change the root password.

Or you can try this
2. un-trust the system.

# /usr/lbin/tsconvert -r
Change the passwd and re-trust the system
# passwd root
# /usr/lbin/tsconvert

Take backup of password file and tcb dirctory before doing this.

Goodluck,
-USA..

[Michael Steele_2]

To null root's password:

/usr/sam/lbin/usermod.sam -F -p "" root

-to unconvert-

/usr/lbin/tsconvert -r

[Kevin Wright]

Isn't that file owned by root??

Safest bet is if you need to reset a root password, you need to boot to single user.

[Darren Prior]

Hi Andy,

Firstly choosing a password that doesn't exist in a dictionary is a good idea for a trusted system :-)) Maybe your colleague was being extra secure?

If you've still got a terminal logged in as root then editing the root tcb file will work. Be careful - if you damage the file then you will be looking at a reboot into single user to replace the file.

regards,

Darren.

[blal]

Hi

This problem I have faced once.But after doing unconvert using tsconvert problem is that you may have to change the passwords for other users also.

so take care in issuing tsconvert command.

best is boot in sigle user mode.

baiju.

[Martin Johnson]

I've had this problem several times. Editing /tcb/files/auth/r/root has always worked for me.

BTW, Since then, I have a pseudo root account (UID = 0) set up on my systems so I can just login and do "passwd root" to change the root passwd. It is easier and safer than editing files.

HTH
Marty

[system administrator_15]

Thanks for the reply's, but won't i still need to know the existing password to change it even in single user mode.
i thought the first thing it asked for when changing is the old password.
hence the file change.
regards

[Michael Steele_2]

No, you don't need to know the root password. Just use this:

/usr/sam/lbin/usermod.sam -F -p "" root

This command will reset your password to null.

Try this from run level 3 first.

[Caesar_3]

Hello!

edit the /tcb/files/auth/r/root
so you could enter.

Caesar