Root password changed

Hi.. the root password of my server is changed without anybody's knowlegde.
I'm now not able to login to this server. however i'm able to login to the sc> prompt.
Is there any way to reset the root password from sc> prompt ?
what would be the best way to recover the root password?
Regards
Nirvana

You should be able to get to ok prompt after sending a break from the sc> prompt.
Your zones should not be impacted except to be shutdown when the system is shutdown.
Find out who changed the root password and why so that you can prevent
this problem in the future.
You have a couple of recovery options:
1. Boot failsafe mode to either boot from a BE with a known, good root password or reset
the unknown root password by copying and pasting a known, good root password
into the /etc/shadow file. You can't reset the root passwd by using the passwd
command from failsafe mode. At least, I couldn't.
ok boot -F failsafe
You are prompted to mount the BE.
# export TERM
# vi /a/etc/shadow
# reboot
2. Boot this system from media or from the network, import the root pool and mount
the BE (if this a ZFS BE) and carefully remove the unknown root password entry
in the shadow file.
ok boot net -s
# zpool import -R /a rpool
# zfs mount rpool/ROOT/s10BE
# TERM=vt100
# export TERM
# vi /a/etc/shadow
3. Whether you boot failsafe (#1) or boot from media (#2), you should be
able to log back into the CONSOLE as root and reset the root password if you weren't
able to paste in a known, good password.
# passwd -r files root

Similar Messages

[SOLVED] Need to change root password - current one doesn't work

Hey everybody,
Not sure where to put this, so I apologize if it's in the wrong forum.
I just installed Arch on my Dell netbook and all is well, except for issues with the root password. I am having a great deal of difficulty getting it to work. I know for a fact that I am typing it correctly. However, I did have trouble getting it set during the installation. When I try several times, I have gotten it to work, but I am getting tired of having to do that, and now I can't seem to get it to work at all. I have even tried a different keyboard, but with no luck.
Is there any way to change the root password short of a reinstall?
Thanks in advance for any help, but please keep in mind that I am relatively new to Linux and would greatly appreciate detailed instructions.
Jeff
Last edited by jlr1701 (2010-08-12 04:10:50)

Solved. Should anyone else have this issue, I solved it by entering this command:
sudo passwd root
I set a new password and it seems to work fine.
Didn't know if it was possible to change the root password that way, but glad it worked!

Apple tv 2 - root password has been changed to non default. I need to access apple tv 2. how do i get access with a forgotten password

apple tv 2 - root password has been changed to non default. I need to access apple tv 2. how do i get access with a forgotten password

Welcome to the Apple Community.
It depends on which password you are referring to, but generally speaking you can always restore the Apple TV.

I need to change values in a file owned by root (root password is constant)

The file is parameter file has below contents. The file is owned by root. My script is run by normal user and root password is constant and we can hardcode it.
ABCLimit: 90
SpoolLimit: 200
TimeLimit: 345
I need to change the value of SpooLimit from 200 to 400.
Can anybody please give code for this?

Your application needs to be running as root, or the user that started the application needs to have root level permissions for at least specific funtions (i.e. /etc/group, RBAC, sudo, etc).
Java cannot change the users permission level in anyway that the user cannot already do himself.
If you wish to find out how to use the /etc/group file, RBAC, sudo, etc, find your local System Administrator and explain your intentions to him/her (yeah, now that's a conversation I want to hear).

Changing Root password in HP-UNIX will affect any R/3 servers

Hi,
we are running R/3 on HP-Unix with Oracle as database and we would like to change the Root Password of UNIX for security reasons and would like to confirm changing the ROOT password will affect any SAP R/3 servers or will it change any of the parameters at OS level that will have affect on R/3.
Please do let me know what are the changes that will take place once we change the root password at OS level and R?3 level.
Regds,
Satyanarayana N.

Hi,
Hardcoded passwords into the scripts isn't a good practice, but if you're not sure about yours, go to the directory(es) where you have them (p.e. /usr/local/bin) and run
<i># grep <b>your_pwd</b> *.sh</i>
It must show you if there's this word into one of the shell scripts.
Best Regards,
JC Llanes.

How do I change the Linux based LMS 4.2 root password

How do I change the Linux based LMS 4.2 root password? I tried "passwd" and "passwd root" while in shell mode and it said "passwd: all authenticaiton tokens updated successfully." However it makes me use the old password to get into the shell.

Hi,
Did you saved the config after updating the password ?
try this command " copy run start" after changing the password.
Thanks-
Afroz
****Ratings Encourages Contributors ***

Preventing local admin from changing root password

Is it possible to prevent a local admin from changing the root password? I would like to set up a computer so that the user has admin rights, but cannot change the root password via a terminal shell to gain root access.

I can't provide you with details, but I'm sure that all you need to do is to edit the sudoers file. It needs to be edited with <visudo> when logged in as root in a Terminal. The location is </private/etc/sudoers>, but you don't need to know that when using <visudo>. From a first look I'd suppose you only have to uncomment the %admin line, but better get some more information. I never did this myself.

Can not change root password for WCS

Need to change the root password for the web gui.
WCS is running on linux, i have tried to do the passwd user-root but it cames back saying it can not find the username.

Alex
You could use the recovering password procedure for wcs as a workaround (chapter 14 of the following link http://www.cisco.com/en/US/docs/wireless/wcs/7.0/configuration/guide/WCS70cg.html )
Recovering the WCS Password
You can change the WCS application root user or FTP user password. This option provides a safeguard if you lose the root password. An executable was added to the installer /bin directory (passwd.bat for Windows and passwd.sh for Linux). Follow these steps to recover the passwords and regain access to WCS. For password recovery on a wireless location device, refer to chapters 8 or 9 of the Cisco 2700 Series Location Appliance Configuration Guide.
Note If you are a Linux user, you must be the root user to run the command.
Step 1 Change to the WCS bin folder.
Step 2 Perform one of the following:
Enter passwd root-user newpassword to change the WCS root password. The newpassword is the root login password you choose.
or
Enter passwd location-ftp-user newuser newpassword to change the FTP user and password. The newuser and newpassword are the FTP user and password you choose.
Step 3 The following options are available with these commands:
•-q — to quiet the output
•-pause — to pause before exiting
•-gui — to switch to the graphical user interface
•-force — to skip prompting for configuration
Step 4 Start WCS.

Can local admin change the root password in Mavericks

One of my people and I keep going back and forth with this question. I remember reading somewhere (cannot find it now) that in 10.9 Apple changed it, so a local admin could not longer change the root password if it has been enabled by the IT group.

AFAIK, any admin account user can set/change the root password. See OS X Mavericks: Enable and disable the root user for details. If you or IT don't trust your people, don't give them admin privileges.
iMac refurb (27-inch Mid 2011), OS X Mavericks (10.9.4), SL & ML, G4 450 MP w/Leopard, 9.2.2

How to change the "root" password ?

How can i change the root password on solaris 11. i tried it with "sudo passwd root ". and everthing should be ok, but i can´t login over ssh with the user "root " and the new password .
Thank Chris

Under Solaris 11 root is a role, not an account. This means that you cannot log into the machine as root. You have to log in using a different account and then gain privileges using su, sudo or pfexec. You can convert root to a normal account using the command:
rolemod -K type=normal root
however, root was made a role for legitimate security reasons. If you can avoid changing root to a normal account you should probably do so because it provides an additional layer of security for the rather overpowered root account.
If you want ssh access to the converted root account, you also need to configure the ssh server to allow root logins by enabling the PermitRootLogins statement in the /etc/ssh/sshd_config file. Again, remember that doing this is loosening security on the root account.

Changing diradmin and/or root password

I was curious if there was anything that one has to do in order to change the diradmin or root password. I had tried changing them both via the Workgroup Administrator and they took. But once I did, no one was able to log on to the Windows domain. (This server is an OD Master and PDC.) Once I changed the passwords back to the originals, users were able to log in on the Windows domain.
Xserve Mac OS X (10.4.9)

Change the clients? I don't understand how that would affect anything.
Maybe I didn't explain clearly enough. Here's what happened:
1. Changed root and diradmin password on existing OD Master/PDC through Workgroup Administrator.
2. Regular users suddenly couldn't log on to the Samba domain at their Windows workstations after I had changed both passwords.
3. Changed passwords for both root and diradmin back to the original passwords.
4. Regular Windows users could log in as normal.
I'm assuming that either the root or diradmin user is somehow tied to one of Samba's TDB databases and that by changing either password somehow breaks Samba's PDC thereby not allowing any user with domain admin privileges to administer the domain. True?
If that's the case, how would one safely change the root or diradmin password?

How to Delete and Reset a Lost Root Password on a System With a Mirrored ??

hi All,
we are experiencing problem,lost root password on Solaris 10 Sparc T5120, with mirror root,
and we found the solution from Metalink.oracle.com, has anyone have try this??
here list capture the file system :
Filesystem size used avail capacity Mounted on
*/dev/md/dsk/d10 2.0G 349M 1.6G 18% /*
*/dev/md/dsk/d40 9.8G 563M 9.2G 6% /usr*
*/dev/md/dsk/d30 9.8G 1.4G 8.4G 15% /var*
*/dev/md/dsk/d50 7.9G 310M 7.5G 4% /opt*
*/dev/md/dsk/d600 3.8G 4.3M 3.8G 1% /home*
*/dev/md/dsk/d602 471M 20M 404M 5% /app/controlm*
*/dev/md/dsk/d601 471M 251M 173M 60% /app/ctsa*
*/dev/md/dsk/d604 4.9G 1.1G 3.8G 23% /app/oramon*
*/dev/md/dsk/d603 20G 11G 8.2G 58% /app/oracle*
*/dev/md/dsk/d606 39G 10.0G 29G 26% /proj/iprdb01/orafra/iprod01p*
here the step :
Solstice DiskSuite[TM] Software: How to Delete and Reset a Lost Root Password on a System With a Mirrored Root Disk [ID 1010755.1]
Solution
Steps to Follow
How to delete and reset a lost root password on a system with a mirrored root disk.
1) Insert the Solaris[TM] Operating System CD-ROM into the CD-ROM drive.
2) Once the CD-ROM is in the drive, perform a stop-a. This brings the system down to the "ok" prompt.
3) From the "ok" prompt, perform a single-user boot from the Solaris OS CD-ROM.
ok boot cdrom -s4) At the "#" prompt, determine which disk is the system's boot disk (containing the root file system). There are several Oracle architectures and various configurations of systems when it concerns a boot disk. As a general rule, most boot disks are attached to controller 0 (c0). Usually, their SCSI target is
either 3 (t3) or 0 (t0). However, Oracle machines are very flexible, and the boot disk could be at a different location. If you are not sure which disk is your boot disk, perform the following steps to determine the location of the boot device:
a) # eeprom boot-device
The output might appear to be simple, such as "disk" or "disk1" or more complicated, such as a pathname "/iommu/sbus/espdma@4,8400000/...../sd@3,0:a".
b) Make note of the boot-device. If the boot-device is a pathname, it is beyond the scope of this information to provide the location of the customized boot disk. However, for most configurations,
finding the customized boot disk is an easy task. The "Format" command shows all available disks:
#format
Searching for disks...done
AVAILABLE DISK SELECTIONS:
(enter its number): c) Enter d to exit format.
Now, you will have an idea what disks are on the system. Therefore, if the boot-device is "disk" and format shows "c0t0d0" (on some systems "c0t3d0") then that is the boot device. If boot-device
shows "disk1" and format shows "c0t1d0," then that is the boot device. If format shows multiple disks, then based on what the "eeprom boot-device" command shows, the system's boot disk would be:
boot-device format
disk c0t0d0 or c0t3d0 (machine dependent)
disk1 c1t0d0
disk2 c0t2d0
disk3 c0t3d0 or c0t0d0 (machine dependent)
and so on ....
5) Because the system was not brought down gracefully (no root password means having to use the Stop-a keystroke to "crash" the system), you need to run "fsck" to clean the root partition (slice). The fsckalso confirms that you selected the proper slice.
# fsck /dev/rdsk/c1t0d0s0
where the X and Y are determined by the previous procedure. It is also possible to have a root partition which is not on slice 0 (s0), but, again, that is not a standard configuration.
The output of "fsck" looks like this:
** /dev/rdsk/c1t0d0s0
** last mounted on /
** Phase 1 .....
The second line in the output of "fsck" ("** Last mounted on /") confirms that this is the correct root filesystem partition. Answer "y" to any questions fsck asks. There shouldn't be too many items
needing repair. If there are, there is a possibility of a corrupted root filesystem. After fsck is finished, mount the root partition:
# mount /dev/dsk/c1t0d0s0 /a
Again, X and Y are the same as for the fsck command.
For example:
# mount /dev/dsk/c1t0d0s0 /a
6) From the root prompt, set the proper TERM type command (such as vt100, dtterm, sun, and so on)
by entering this command:
# TERM=sun; export TERM
7) Use the VI text editor to edit the /etc/shadow file:
# vi /a/etc/shadow
8) The first line of the /etc/shadow file is the one you want to modify.
It looks like this:
root:c3.yAVmYodWsc:6445::::::
9) Delete every character between the first and second colons in the first line of the file. When you finish deleting the characters, the line should look like this:
root::6445::::::
10) Press the Escape key, then enter the following to save the file and exit vi:
:wq!
11) Use the VI text editor to edit the /etc/system file andremove the "rootdev" line shown below:
# vi /a/etc/system
*rootdev:/pseudo/md@0:0,0,blk
Don't comment out the "rootdev" line. Actually remove it.
12) In the /a/etc/vfstab file, replace the lines for the system filesystem meta-devices with their underlying partitions. For example, change lines from
/dev/md/dsk/d0 /dev/md/rdsk/d0 / ufs 1 no -
to
/dev/dsk/c1t0d0s0 /dev/rdsk/c1t0d0s0 / ufs 1 no -
ONLY change the lines for root (/) and the filesystems that were affected by the actions you took in step 1 of this procedure. All other metadevices may stay as is in this file.
13) Unmount root, check the root filesystem, and then stop the system:
# cd /
# umount /a
# fsck /dev/rdsk/c1t0d0s0
# stop-a
14) Boot to single-user mode:
ok boot -swTHIS STEP IS VERY IMPORTANT; YOU MUST BOOT TO SINGLE-USER MODE TO AVOID FILESYSTEM CORRUPTION.
If the system does not boot to single user mode, you might have made a mistake in the previous steps.
15) Because the root password was cleared in an earlier step, press Return when prompted for the the root password. Once you are in single-user mode, you must clear the metamirrors and all the sub-mirrors for the root filesystem. For example, if root (/) is d0, run the following command:
# metaclear -f -r d0
Running the metaclear command not only clears the metamirror but also clears the submirrors that are part of this mirror.
16) When the metamirror is cleared, continue the boot up to multiuser mode by either pressing CTRL-D or by entering the following:
# exit
Now everything should be as it was, except that the system partition is on the underlying partition and isn't mirrored. You will simply need to re-create the metadevices for the root mirror as you had originally.
many thanks

Hi,
Halt your machine.
Boot with fail-safe mode.
format and list out the disks. (You can get the root & mirror disk (c#t#d#) details from /etc/lvm/md.tab of your root or mirror disk. Earlier explorer output may help)
Mount the root disk and remove the password entry in /etc/shadow
umount it.
Mount the mirror disk and remove the password entry in /etc/shadow
umount it.
reboot the server.
Hope this helps!

Reset lost root password and now have read only filesystem

Hello,
I have recently had to reset a locked root password by booting from cdrom, mounting the first boot disk, editing the shadow file to remove root's password and rebooting the system.
The system has booted OK but, I now have a read only filesystem - everything in / cannot be edited, passwd doesnt work etc.
df -k shows the root (/) filesystem has been mounted on the physical disk I edited:
Filesystem kbytes used avail capacity Mounted on
/pci@83,4000/FJSV,ulsa@2,1/disk@0,0:a 10085836 185862 9799116 2% /
but in the vfstab it still references the disksuite metadevice:
#device device mount FS fsck mount mount
#to mount to fsck point type pass at boot options
/dev/md/dsk/d30 /dev/md/rdsk/d30 / ufs 1 no -
So, can I simply boot from CDROM again, amend the vfstab to be /dev/dsk/c0t0d0s0 (instead of /dev/md/dsk/d03) and reboot?
Any help with this is appreciated!
Thanks,
Emma

df -k should have shown root mounted on md0
e.g. on my machine
# df -k
Filesystem kbytes used avail capacity Mounted on
/dev/md/dsk/d0 8260691 4366317 3811768 54% /
what does /etc/system show for rootdev?
# grep rootdev /etc/system
* rootdev: Set the root device. This should be a fully
* rootdev:/sbus@1,f8000000/esp@0,800000/sd@3,0:a
rootdev:/pseudo/md@0:0,0,blk
Remember if this is a mirrored drive, when you boot from CD you may need to mount both sides of the mirror and make changes on both sides- otherwise the replication may not goes as expected.
Actually, I have run into problems with the modifying one side of a mirror this way. In the past Sun tech support would recommend that I break the mirror and then rebuild it once the system is up and running. So in your case you may want to boot from CD, mount the 1st disk slice, edit /etc/vfstab AND /etc/system, boot into the OS and use the various meta commands to delete and rebuild the mirror- or at least maybe to drop and reattach the 2nd 1/2 of the mirror.

Root password fails on auth to Solaris Management Console Server

I've setup Solaris 10 x86 on a VA linux 1220 server, all is good so far except when I try to create additional users. I am logged in as root, and the root password logs in to the CDE, but fails on authentication to Solaris Management Console Server when I try to use any of the management apps like computers and networks or Users. So I'm stalled at the point where I should be configuring the system. I have been very careful about typing in the password exactly as I use it in the login screen, but it never works in the System Management tools for This Computer. The password I'm using is 26 characters long, is it too long? Or is there a step I'm missing?
Thanks,
Brian

One of my famous guesses, but unless you changed the default password algorithm the maximum length of your password is 8 characters, when logging in on the console or desktop, anything typed after those eight characters will be ignored (unless this behaviour changed very recently).
Its possibly that SMC, and its server component WBEM does not ignore the extra characters, which could cause this behavior.
What happens if you try and login to SMC with the root user and only the first eight characters of your password?
Btw, if this was the problem i think there is a way to change the default crypto algorithm to something that supports more characters.
.7/M.

Root password not being saved

When I enable the root user it asks me for the password, then password verification. Then when I leave terminal I disable the root user. Next time I enable it, it again asks for the password and to verify it, but I can enter ANY password and get into SU in terminal. So anyone that can get to enable the root user and set a password. This is dumb or I am not understanding something here. The computer should remember the last password and use that password and not allow just ANY password to give super user access???
Rachael

I would be uncomfortable leaving the root user enabled. Frankly speaking the root password should be saved once I set it then disable the root user, saving that password for the next time I enable the root user it. Why is there even an option to change the password if it is not saved. Stupidity. Even setting the password in terminal with the passwd command will not save it. Stupidity. This is not how it worked in Snow Leopard. You set a password and it stuck. What is the point of having a password for root, it anyone can enter anything to reach it. Stupidity
But thanks for the suggestion
Rachael

Root password changed

Similar Messages

Maybe you are looking for