Article View: comp.security.firewalls
Article #424Re: FW-1 / Nokia Password Problem - Follow-up Question
From: Mike Oxlong
Date: Mon, 05 Nov 2001 11:09
Date: Mon, 05 Nov 2001 11:09
115 lines
4251 bytes
4251 bytes
I have one more question... I have tried to interrupt the boot process by hitting every key combination that I can think of - could you please detail the process required to get me to the BOOTMGR> prompt. (I should have mentioned that I don't know my way around UNIX very well!!) Regards, Mike > > > "Greg Hennessy" <cmkrnl@cix.compulink.co.uk> wrote in message > news:2jg8utkaf2mhp798gihku3oqgb3kr0kvp5@4ax.com... > > On Sat, 03 Nov 2001 16:07:27 GMT, Jacques Bourdeau > > <J_Bourdeau@videotron.ca> wrote: > > > > >Hi, > > > > > >for a Unix system, its always possible : remove the hard disk from the > > >locked device, insert it in a Unix under your control, boot this > > >controlled > > >Unix, mount the HD containing the locked Unix and change / remove the > > >root > > >password or promote a user with a known password to UID 0. > > > > > > Its pretty obvious Jacques that you have never worked with Nokias to make > a > > statement like that. > > > > Password Recovery on an IP series is trivial once one has access to the > > console. > > > > Abridged from resolution 692 on http://support.nokia.com/ > > > > Interrupt the boot process and boot it single user by issuing "boot -s" at > > the BOOTMGR> Prompt. > > > > run /etc/overpw to blank out the old password. > > > > reboot the box et voila. IIRC 3.4 is marginally more involved as it > doesn't > > like blank passwords. But that trivial compared to ripping the hard disk > > out. > > > > Note to Mike : Get yourself access to the Nokia KB PDQ, its very > > comprehensive & will aid you in your quest. > > Whilsts you are in single user mode on the module 'rm /active/config' also > > to get rid of any existing config. > > > > > > > > > > > >For FW-1 module, it can be more difficult. Some application (like Entrust > > >and surely FW-1) do their own authentication with their own UID/PSSWD > > >database. Having full control or not on the underlaying OS is useless for > > >doing authentication on these application. > > > > Wrong! > > > > > > > > > >I do not know exactly how FW-1 do, but its can be unrecoverable. > > > > You haven't worked with FW-1 either given that its trivial to add a new > > superuser to the module using "fwm -a" from the shell as documented here > > > > http://www.phoneboy.com/faq/0099.html > > > > > > > > greg > > > > > > > > > > > > > > > > > > > > > >Jacques Bourdeau > > > > > >>>>>>>>>>>>>>>>>>> Original Message <<<<<<<<<<<<<<<<<< > > > > > >On 11/3/01, 8:23:09 AM, "Mike Oxlong" <nospam@nospam.com> wrote regarding > > >FW-1 / Nokia Password Problem: > > > > > > > > >> I have been asked to look at a repossessed Nokia IP330 running > Firewall-1 > > >> but do not have the login/passwords for the Unix Administrator and also > > >for > > >> FW-1. > > > > > >> I am a Cisco person but don't know my way around Unix or FW-1 very > well, > > >is > > >> there a password recovery process that I can use? > > > > > >> Thanks in advance, > > > > > >> Mike > > > >
Technical Details
Message-ID:
<9s5s0g$ev4$1@newsg1.svr.pol.co.uk>Path:
arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!newsfeeds.belnet.be!news.belnet.be!colt.net!diablo.theplanet.net!news.theplanet.net!not-for-mailShow Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: f922c,3a51b73dfd1fe24d,start X-Google-Attributes: gidf922c,public X-Google-Thread: fc559,3a51b73dfd1fe24d,start X-Google-Attributes: gidfc559,public X-Google-Thread: 1136e5,3a51b73dfd1fe24d,start X-Google-Attributes: gid1136e5,public X-Google-ArrivalTime: 2001-11-05 03:09:04 PST Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!newsfeeds.belnet.be!news.belnet.be!colt.net!diablo.theplanet.net!news.theplanet.net!not-for-mail From: "Mike Oxlong" <nospam@nospam.com> Newsgroups: comp.security.firewalls,cp.products.firewall-1,cp.users.discussion Subject: Re: FW-1 / Nokia Password Problem - Follow-up Question Date: Mon, 5 Nov 2001 11:09:16 -0000 Lines: 117 Message-ID: <9s5s0g$ev4$1@newsg1.svr.pol.co.uk> NNTP-Posting-Host: modem-9.arbok.dialup.pol.co.uk X-Trace: newsg1.svr.pol.co.uk 1004958544 15332 217.135.16.9 (5 Nov 2001 11:09:04 GMT) NNTP-Posting-Date: 5 Nov 2001 11:09:04 GMT X-Complaints-To: abuse@theplanet.net X-Priority: 3 X-MSMail-Priority: Normal X-Newsreader: Microsoft Outlook Express 6.00.2600.0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000