Article View: comp.security.firewalls
Article #422Re: FW-1 / Nokia Password Problem
From: Mike Oxlong
Date: Sat, 03 Nov 2001 22:31
Date: Sat, 03 Nov 2001 22:31
102 lines
3917 bytes
3917 bytes
Hi Greg, Thank you for your help, I will give it a go in the morning! Regards, Mike "Greg Hennessy" <cmkrnl@cix.compulink.co.uk> wrote in message news:2jg8utkaf2mhp798gihku3oqgb3kr0kvp5@4ax.com... > On Sat, 03 Nov 2001 16:07:27 GMT, Jacques Bourdeau > <J_Bourdeau@videotron.ca> wrote: > > >Hi, > > > >for a Unix system, its always possible : remove the hard disk from the > >locked device, insert it in a Unix under your control, boot this > >controlled > >Unix, mount the HD containing the locked Unix and change / remove the > >root > >password or promote a user with a known password to UID 0. > > > Its pretty obvious Jacques that you have never worked with Nokias to make a > statement like that. > > Password Recovery on an IP series is trivial once one has access to the > console. > > Abridged from resolution 692 on http://support.nokia.com/ > > Interrupt the boot process and boot it single user by issuing "boot -s" at > the BOOTMGR> Prompt. > > run /etc/overpw to blank out the old password. > > reboot the box et voila. IIRC 3.4 is marginally more involved as it doesn't > like blank passwords. But that trivial compared to ripping the hard disk > out. > > Note to Mike : Get yourself access to the Nokia KB PDQ, its very > comprehensive & will aid you in your quest. > Whilsts you are in single user mode on the module 'rm /active/config' also > to get rid of any existing config. > > > > > > >For FW-1 module, it can be more difficult. Some application (like Entrust > >and surely FW-1) do their own authentication with their own UID/PSSWD > >database. Having full control or not on the underlaying OS is useless for > >doing authentication on these application. > > Wrong! > > > > > >I do not know exactly how FW-1 do, but its can be unrecoverable. > > You haven't worked with FW-1 either given that its trivial to add a new > superuser to the module using "fwm -a" from the shell as documented here > > http://www.phoneboy.com/faq/0099.html > > > > greg > > > > > > > > > > > >Jacques Bourdeau > > > >>>>>>>>>>>>>>>>>>> Original Message <<<<<<<<<<<<<<<<<< > > > >On 11/3/01, 8:23:09 AM, "Mike Oxlong" <nospam@nospam.com> wrote regarding > >FW-1 / Nokia Password Problem: > > > > > >> I have been asked to look at a repossessed Nokia IP330 running Firewall-1 > >> but do not have the login/passwords for the Unix Administrator and also > >for > >> FW-1. > > > >> I am a Cisco person but don't know my way around Unix or FW-1 very well, > >is > >> there a password recovery process that I can use? > > > >> Thanks in advance, > > > >> Mike >
Technical Details
Message-ID:
<9s1r7g$rev$1@newsg4.svr.pol.co.uk>Path:
arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!newsfeeds.belnet.be!news.belnet.be!colt.net!diablo.theplanet.net!news.theplanet.net!not-for-mailReferences:
<9s0r3s$763$1@newsg4.svr.pol.co.uk> <20011103.16072700@E2.> <2jg8utkaf2mhp798gihku3oqgb3kr0kvp5@4ax.com>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: f922c,910cbdc6b677c933 X-Google-Attributes: gidf922c,public X-Google-Thread: 1136e5,910cbdc6b677c933 X-Google-Attributes: gid1136e5,public X-Google-Thread: fc559,910cbdc6b677c933 X-Google-Attributes: gidfc559,public X-Google-ArrivalTime: 2001-11-03 14:31:13 PST Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!newsfeeds.belnet.be!news.belnet.be!colt.net!diablo.theplanet.net!news.theplanet.net!not-for-mail From: "Mike Oxlong" <nospam@nospam.com> Newsgroups: comp.security.firewalls,cp.products.firewall-1,cp.users.discussion Subject: Re: FW-1 / Nokia Password Problem Date: Sat, 3 Nov 2001 22:31:12 -0000 Lines: 104 Message-ID: <9s1r7g$rev$1@newsg4.svr.pol.co.uk> References: <9s0r3s$763$1@newsg4.svr.pol.co.uk> <20011103.16072700@E2.> <2jg8utkaf2mhp798gihku3oqgb3kr0kvp5@4ax.com> NNTP-Posting-Host: modem-2.articuno.dialup.pol.co.uk X-Trace: newsg4.svr.pol.co.uk 1004826672 28127 217.135.26.2 (3 Nov 2001 22:31:12 GMT) NNTP-Posting-Date: 3 Nov 2001 22:31:12 GMT X-Complaints-To: abuse@theplanet.net X-Priority: 3 X-MSMail-Priority: Normal X-Newsreader: Microsoft Outlook Express 6.00.2600.0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000