🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.security.firewalls
Article #424

Re: FW-1 / Nokia Password Problem - Follow-up Question

#424
From: Mike Oxlong
Date: Mon, 05 Nov 2001 11:09
115 lines
4251 bytes
I have one more question...

I have tried to interrupt the boot process by hitting every key combination
that I can think of - could you please detail the process required to get me
to the BOOTMGR> prompt. (I should have mentioned that I don't know my way
around UNIX very well!!)

Regards,

Mike

>
>
> "Greg Hennessy" <cmkrnl@cix.compulink.co.uk> wrote in message
> news:2jg8utkaf2mhp798gihku3oqgb3kr0kvp5@4ax.com...
> > On Sat, 03 Nov 2001 16:07:27 GMT, Jacques Bourdeau
> > <J_Bourdeau@videotron.ca> wrote:
> >
> > >Hi,
> > >
> > >for a Unix system, its always possible : remove the hard disk from the
> > >locked device, insert it in a Unix under your control, boot this
> > >controlled
> > >Unix, mount the HD containing the locked Unix and change / remove the
> > >root
> > >password or promote a user with a known password to UID 0.
> >
> >
> > Its pretty obvious Jacques that you have never worked with Nokias to
make
> a
> > statement like that.
> >
> > Password Recovery on an IP series is trivial once one has access to the
> > console.
> >
> > Abridged from resolution 692 on http://support.nokia.com/
> >
> > Interrupt the boot process and boot it single user by issuing "boot -s"
at
> > the BOOTMGR> Prompt.
> >
> > run /etc/overpw to blank out the old password.
> >
> > reboot the box et voila. IIRC 3.4 is marginally more involved as it
> doesn't
> > like blank passwords. But that trivial compared to ripping the hard disk
> > out.
> >
> > Note to Mike : Get yourself access to the Nokia KB PDQ, its very
> > comprehensive & will aid you in your quest.
> > Whilsts you are in single user mode on the module 'rm /active/config'
also
> > to get rid of any existing config.
> >
> >
> >
> > >
> > >For FW-1 module, it can be more difficult. Some application (like
Entrust
> > >and surely FW-1) do their own authentication with their own UID/PSSWD
> > >database. Having full control or not on the underlaying OS is useless
for
> > >doing authentication on these application.
> >
> > Wrong!
> >
> >
> > >
> > >I do not know exactly how FW-1 do, but its can be unrecoverable.
> >
> > You haven't worked with FW-1 either given that its trivial to add a new
> > superuser to the module using "fwm -a" from the shell as documented here
> >
> > http://www.phoneboy.com/faq/0099.html
> >
> >
> >
> > greg
> >
> >
> >
> >
> >
> >
> >
> >
> > >
> > >Jacques Bourdeau
> > >
> > >>>>>>>>>>>>>>>>>>> Original Message <<<<<<<<<<<<<<<<<<
> > >
> > >On 11/3/01, 8:23:09 AM, "Mike Oxlong" <nospam@nospam.com> wrote
regarding
> > >FW-1 / Nokia Password Problem:
> > >
> > >
> > >> I have been asked to look at a repossessed Nokia IP330 running
> Firewall-1
> > >> but do not have the login/passwords for the Unix Administrator and
also
> > >for
> > >> FW-1.
> > >
> > >> I am a Cisco person but don't know my way around Unix or FW-1 very
> well,
> > >is
> > >> there a password recovery process that I can use?
> > >
> > >> Thanks in advance,
> > >
> > >> Mike
> >
>
>
Technical Details
Message-ID: <9s5s0g$ev4$1@newsg1.svr.pol.co.uk>
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!newsfeeds.belnet.be!news.belnet.be!colt.net!diablo.theplanet.net!news.theplanet.net!not-for-mail

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f922c,3a51b73dfd1fe24d,start
X-Google-Attributes: gidf922c,public
X-Google-Thread: fc559,3a51b73dfd1fe24d,start
X-Google-Attributes: gidfc559,public
X-Google-Thread: 1136e5,3a51b73dfd1fe24d,start
X-Google-Attributes: gid1136e5,public
X-Google-ArrivalTime: 2001-11-05 03:09:04 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!newsfeeds.belnet.be!news.belnet.be!colt.net!diablo.theplanet.net!news.theplanet.net!not-for-mail
From: "Mike Oxlong" <nospam@nospam.com>
Newsgroups: comp.security.firewalls,cp.products.firewall-1,cp.users.discussion
Subject: Re: FW-1 / Nokia Password Problem - Follow-up Question
Date: Mon, 5 Nov 2001 11:09:16 -0000
Lines: 117
Message-ID: <9s5s0g$ev4$1@newsg1.svr.pol.co.uk>
NNTP-Posting-Host: modem-9.arbok.dialup.pol.co.uk
X-Trace: newsg1.svr.pol.co.uk 1004958544 15332 217.135.16.9 (5 Nov 2001 11:09:04 GMT)
NNTP-Posting-Date: 5 Nov 2001 11:09:04 GMT
X-Complaints-To: abuse@theplanet.net
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000