🚀 go-pugleaf

On Mon, 5 Nov 2001 11:09:16 -0000, "Mike Oxlong" <nospam@nospam.com> wrote:

>I have one more question...

Drop me a mail m8. 


greg




>
>I have tried to interrupt the boot process by hitting every key combination
>that I can think of - could you please detail the process required to get me
>to the BOOTMGR> prompt. (I should have mentioned that I don't know my way
>around UNIX very well!!)
>
>Regards,
>
>Mike
>
>>
>>
>> "Greg Hennessy" <cmkrnl@cix.compulink.co.uk> wrote in message
>> news:2jg8utkaf2mhp798gihku3oqgb3kr0kvp5@4ax.com...
>> > On Sat, 03 Nov 2001 16:07:27 GMT, Jacques Bourdeau
>> > <J_Bourdeau@videotron.ca> wrote:
>> >
>> > >Hi,
>> > >
>> > >for a Unix system, its always possible : remove the hard disk from the
>> > >locked device, insert it in a Unix under your control, boot this
>> > >controlled
>> > >Unix, mount the HD containing the locked Unix and change / remove the
>> > >root
>> > >password or promote a user with a known password to UID 0.
>> >
>> >
>> > Its pretty obvious Jacques that you have never worked with Nokias to
>make
>> a
>> > statement like that.
>> >
>> > Password Recovery on an IP series is trivial once one has access to the
>> > console.
>> >
>> > Abridged from resolution 692 on http://support.nokia.com/
>> >
>> > Interrupt the boot process and boot it single user by issuing "boot -s"
>at
>> > the BOOTMGR> Prompt.
>> >
>> > run /etc/overpw to blank out the old password.
>> >
>> > reboot the box et voila. IIRC 3.4 is marginally more involved as it
>> doesn't
>> > like blank passwords. But that trivial compared to ripping the hard disk
>> > out.
>> >
>> > Note to Mike : Get yourself access to the Nokia KB PDQ, its very
>> > comprehensive & will aid you in your quest.
>> > Whilsts you are in single user mode on the module 'rm /active/config'
>also
>> > to get rid of any existing config.
>> >
>> >
>> >
>> > >
>> > >For FW-1 module, it can be more difficult. Some application (like
>Entrust
>> > >and surely FW-1) do their own authentication with their own UID/PSSWD
>> > >database. Having full control or not on the underlaying OS is useless
>for
>> > >doing authentication on these application.
>> >
>> > Wrong!
>> >
>> >
>> > >
>> > >I do not know exactly how FW-1 do, but its can be unrecoverable.
>> >
>> > You haven't worked with FW-1 either given that its trivial to add a new
>> > superuser to the module using "fwm -a" from the shell as documented here
>> >
>> > http://www.phoneboy.com/faq/0099.html
>> >
>> >
>> >
>> > greg
>> >
>> >
>> >
>> >
>> >
>> >
>> >
>> >
>> > >
>> > >Jacques Bourdeau
>> > >
>> > >>>>>>>>>>>>>>>>>>> Original Message <<<<<<<<<<<<<<<<<<
>> > >
>> > >On 11/3/01, 8:23:09 AM, "Mike Oxlong" <nospam@nospam.com> wrote
>regarding
>> > >FW-1 / Nokia Password Problem:
>> > >
>> > >
>> > >> I have been asked to look at a repossessed Nokia IP330 running
>> Firewall-1
>> > >> but do not have the login/passwords for the Unix Administrator and
>also
>> > >for
>> > >> FW-1.
>> > >
>> > >> I am a Cisco person but don't know my way around Unix or FW-1 very
>> well,
>> > >is
>> > >> there a password recovery process that I can use?
>> > >
>> > >> Thanks in advance,
>> > >
>> > >> Mike
>> >
>>
>>
>