🚀 go-pugleaf

On Sat, 03 Nov 2001 16:07:27 GMT, Jacques Bourdeau
<J_Bourdeau@videotron.ca> wrote:

>Hi,
>
>for a Unix system, its always possible : remove the hard disk from the 
>locked device, insert it in a Unix under your control, boot this 
>controlled 
>Unix, mount the HD containing the locked Unix and change / remove the 
>root 
>password or promote a user with a known password to UID 0.


Its pretty obvious Jacques that you have never worked with Nokias to make a
statement like that. 

Password Recovery on an IP series is trivial once one has access to the
console. 

Abridged from resolution 692 on http://support.nokia.com/

Interrupt the boot process and boot it single user by issuing "boot -s" at
the BOOTMGR> Prompt. 

run /etc/overpw to blank out the old password. 

reboot the box et voila. IIRC 3.4 is marginally more involved as it doesn't
like blank passwords. But that trivial compared to ripping the hard disk
out. 

Note to Mike : Get yourself access to the Nokia KB PDQ, its very
comprehensive & will aid you in your quest. 
Whilsts you are in single user mode on the module 'rm /active/config' also
to get rid of any existing config. 



>
>For FW-1 module, it can be more difficult. Some application (like Entrust 
>and surely FW-1) do their own authentication with their own UID/PSSWD 
>database. Having full control or not on the underlaying OS is useless for 
>doing authentication on these application.

Wrong!


>
>I do not know exactly how FW-1 do, but its can be unrecoverable.

You haven't worked with FW-1 either given that its trivial to add a new
superuser to the module using "fwm -a" from the shell as documented here

http://www.phoneboy.com/faq/0099.html



greg








>
>Jacques Bourdeau
>
>>>>>>>>>>>>>>>>>>> Original Message <<<<<<<<<<<<<<<<<<
>
>On 11/3/01, 8:23:09 AM, "Mike Oxlong" <nospam@nospam.com> wrote regarding 
>FW-1 / Nokia Password Problem:
>
>
>> I have been asked to look at a repossessed Nokia IP330 running Firewall-1
>> but do not have the login/passwords for the Unix Administrator and also 
>for
>> FW-1.
>
>> I am a Cisco person but don't know my way around Unix or FW-1 very well, 
>is
>> there a password recovery process that I can use?
>
>> Thanks in advance,
>
>> Mike