LinuxQuestions.org
Go Job Hunting at the LQ Job Marketplace
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
Search this Thread
Old 12-23-2002, 10:12 PM   #1
ElZora
LQ Newbie
 
Registered: Dec 2002
Location: Huntsville, AL
Posts: 3

Rep: Reputation: 0
Unhappy Mandrake Linux Root Pswd/Login HELP


My father set up my personal domains on our home computer Mandrake Linux server.

He died November 19, 2002 without ever giving the password to anyone. Our backdoor took an exit stage left.

I've tried sever Lilo root password hacks, but it still will not let me login for it still requires a login username AND password. What either are, I don't know.

From the little hastened research I've done I think I've come to the conclusion that this is a "shadow" password.

Unfortunately, I am a Windows user and know jack about Linux... yet. This was no issue until I discovered that my domains are unviewable.

http://www.elzora.com
http://www.laghalda.com

If anyone can help me, please, I'd most appreciate it!

Signed,
Totally Lost and Helpless Windows User


P.S. Almost forgot... Spot (the server) routes our DSL with a timer somehow as well and it needs to be corrected...

Last edited by ElZora; 12-23-2002 at 10:14 PM.
 
Old 12-24-2002, 09:04 AM   #2
iocain
LQ Newbie
 
Registered: Dec 2002
Location: Canada
Distribution: Debian, BSD, IRIX, MacOS, Solaris, AIX, HP-UX, other Unix, other Linux, other, windos (declining...)
Posts: 25

Rep: Reputation: 15
You need to get either a Linux 'rescue floppy' or bootable CD such as Knoppix. Once you boot from the floppy or CD, you can use the command line to check where the 'root' partition is located on your hard drive. You would then mount that and edit the file '/etc/shadow' to remove the password from the 'root' account. Obviously, there are a couple tools you need to become familiar with before jumping in to this if you don't want to risk trashing the system you're trying to recover!

Burn yourself a Knoppix CD. That's an excellent tool to start with.
 
Old 12-25-2002, 10:17 AM   #3
ElZora
LQ Newbie
 
Registered: Dec 2002
Location: Huntsville, AL
Posts: 3

Original Poster
Rep: Reputation: 0
Thanks, I'll give that a try.

Not sure what most of it means or how to do it... but I'll give it a shot! What are the chances I'll lose all or any data? Would I be better off unplugging Spot and hosting my domains somewhere?

Thanks for your help,
Zora
 
Old 12-25-2002, 12:11 PM   #4
iocain
LQ Newbie
 
Registered: Dec 2002
Location: Canada
Distribution: Debian, BSD, IRIX, MacOS, Solaris, AIX, HP-UX, other Unix, other Linux, other, windos (declining...)
Posts: 25

Rep: Reputation: 15
I'd say it entirely depends how willing you are to learn how to administrate the Linux box. Once you get used to the Unix-like approach to things, I think you'll see why so many of us appreciate it. Unless your sites get a lot of traffic, hosting them on your existing high-speed connection is a much cheaper way to go than paying a hosting provider.

It should be pretty apparent which things could damage your data: Don't let anything re-write your partition tables; don't let anything delete files. Just find a way to get in and blank the passwd field for root in /etc/shadow. Then set a new password for root with the 'passwd' command.

The line in /etc/shadow you need to change will look something like this:

root:$1$gmbyRbTU$SR.9MaRs6Mhj2NSDrHVpm.:11596:0:99999:7:::

Where you need to delete the '$1$gmbyRbTU$SR.9MaRs6Mhj2NSDrHVpm.' part (which is and md5 hash, but yours may use des, and will be a different string in any case), so it winds up looking like:

root::11596:0:99999:7:::

Which means root has no password. Then run 'shutdown -r now' to reboot, and you can log in as root to run 'passwd' and set a new password and fix whatever else is wrong.

Sympathies too, by the way!
 
Old 12-26-2002, 08:54 AM   #5
magyartoth
Member
 
Registered: Feb 2002
Location: Pittsburgh, PA, USA
Posts: 73

Rep: Reputation: 15
I use Redhat linux, and whenever I forget the root password, I just login in single user mode and change it that way. Very easy to do if you have physical access to the machine.

Just do a search on here or google for 'lost root password linux' or 'single user mode linux' and you should find more answers.

M
 
Old 12-26-2002, 01:47 PM   #6
ElZora
LQ Newbie
 
Registered: Dec 2002
Location: Huntsville, AL
Posts: 3

Original Poster
Rep: Reputation: 0
I tried all of this, and I still can't get in, lol.

I think my best route is going to be starting from scratch and building up everything.

My dad was a computer pro and did his best to lock me out of the server... he certainly succeeded.

Thank you all for your help!
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
how to login as root in MAndrake 10.1 gjo Linux - General 6 06-12-2005 01:45 PM
Slackware 10.1 setup freezes when selecting root pswd Add1Sun Slackware 3 04-10-2005 07:57 AM
Login as root Mandrake 9.1? Coolrunr Linux - Distributions 7 11-25-2004 11:05 PM
How to Login as Root (Mandrake 10) Almazick Linux - Newbie 2 09-03-2004 02:47 AM
root login for mandrake 9.1 bigjohn Linux - Newbie 3 06-17-2003 07:41 AM


All times are GMT -5. The time now is 02:38 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration