A***o
发帖数: 351 | 1 【 以下文字转载自 Unix 讨论区,原文如下 】
发信人: Atubo (阿土伯), 信区: Unix
标 题: SGI workstation
发信站: Unknown Space - 未名空间 (Thu Oct 30 11:10:50 2003) WWW-POST
There is a SGI O2+ workstation (IRIX6.5) in my lab. No one use it.
I plan to use it, however, the past user left and no one know the passwd.
How can I do?
Thanks |
|
L**********t
发帖数: 9 | 2
There should be original CDs in the lab or in the university IT department. If
you can boot from the CD and try to log on in rescue mode (like RedHat will do
like that), mount the etc, and find the /etc/shadow file which contains 9
fields, each separated by a ":", in the form:
login-id:password:lastchg:min:max:warn:inactive:expire:flag
find root, delete the password between ":"s. You should NOT delete ":" (By
doing this, you can login as root without a passwd), then save the changes and
reboot |
|
z*****y
发帖数: 14 | 3 From your post, it can't tell whether the hacker escalate to root succesfully.
The hacker might have sniffed your usr/passwd. Backdoor was downloaded and
installed, multiple local exploits were attempted to gain root privilege. All
the hosts running samba in your network that are vulnerable probably were
hacked already.
A thorough recovery would be reinstallation. |
|
|
l***r
发帖数: 736 | 5 【 以下文字转载自 SanDiego 讨论区 】
发信人: laser (老膺之歌), 信区: SanDiego
标 题: 装新router，被IE气个半死
发信站: BBS 未名空间站 (Thu Apr 3 00:29:14 2008)
差不多装好了，要试试router的web base service，IE居然不给机会让我输入正确的
user name和passwd来login这个新router。 pop up window 无法点击，过两秒就自认
为我按了confirm键，一次又一次login失败。
IT高手们支个招啊... |
|
f******w
发帖数: 1856 | 6 关掉ie的block popup的功能先
【 以下文字转载自 SanDiego 讨论区 】
发信人: laser (老膺之歌), 信区: SanDiego
标 题: 装新router，被IE气个半死
发信站: BBS 未名空间站 (Thu Apr 3 00:29:14 2008)
差不多装好了，要试试router的web base service，IE居然不给机会让我输入正确的
user name和passwd来login这个新router。 pop up window 无法点击，过两秒就自认
为我按了confirm键，一次又一次login失败。
IT高手们支个招啊... |
|
I*a
发帖数: 297 | 7 old trick, see if it still works under vista, it works under 2k/xp
1. boot the pc with linux or dos whatever
2. delete SAM files under windows/system32/config
u will lose all ur account information. but u can logon with a blank passwd
always backup files first before u delete them |
|
a*****1
发帖数: 11 | 8
username
no, you can NOT put user/pswd in .htaccess
If you use only basic authentication, you generally
want to use 'htpasswd' to generate user/pswd pairs and put
the user/pswd file in a safe place, like your ServerRoot.
and then write down something in .htaccess of your local
directory or the corresponding | section
in httpd.conf, like
AuthType Basic
AuthName "passwd protection"
AuthUserFile /etc/apache2/ht_user_pswd_file
Require valid-user
You can "Require |
|
s**n
发帖数: 449 | 9 is it possible to mount another domain's UFS to local disk? that domain use
NIS+. and my workstation does not.
in fact i can mount it as read only, so my question is whether it is possible
to make it read/ writable? the problem is two sides have totally different
user/passwd.
thanks in advance for any advice. |
|
t*******g
发帖数: 89 | 10 Make sure that in /etc/passwd, your shell is correct.
If your shell is correct, for instance, /bin/csh,
fsck /usr partition or check if csh is corrupt or not. |
|
c*****t
发帖数: 1879 | 11 Download htpasswd source. |
|
m*****e
发帖数: 4193 | 12 boot from CD, mount the disk, change the passwd/shadow file. |
|
|
j***y
发帖数: 87 | 14 if root was not forbidden in your system, use ftp to update your passwd. |
|
o*********l
发帖数: 17 | 15 root can change it using "vipw" which modifies the
shell definition in /etc/passwd. |
|
c*****t
发帖数: 1879 | 16 Okay, I've seen enough and got tired :)
Here is the purpose and advantage of autohome and /home directory.
That is, you can have anybody, to have a home directory under
/home/username
or
/home/dept/username
yet these users/dept expand many drives/directories.
This is not possible w/ conventional NFS mount. The advantage is
the convenience, so you one wouldn't need to modify /etc/passwd
each time one needs to expand the harddisk and change directories
(which can be a pain for NIS |
|
|
l***r
发帖数: 459 | 18 sorry, maybe my question is not clear. I check /etc/passwd
and it only
explain some about root, deamon, sys, ftp .... There is no
specific
information on user id.
I wonder how to check user id. like I know username is
woodman, I want
to know user id for it? Also, I want to know how to get
information
reversely (user id-> username )?
Thanks a lot!!! |
|
|
m*******m
发帖数: 182 | 20 login shell is the shell a user uses when she logs in as
specified in passwd file. normal shell can be started any
time.
~{!>~} ~{TZ~} skyocean (skyocean~~working) ~{5D4sWwVPLa5=~}:
~{!?~} |
|
|
c*****t
发帖数: 1879 | 22 It's a bad practice to edit /etc/passwd and /etc/shadow files.
Although different unix systems provide different user add/del/mod
commands, you can do the following:
man -k user | grep -i change
to locate the command you can use and read the man pages... |
|
o**a
发帖数: 86 | 23
#include
#include
#include
...................
struct passwd * uptr = getpwuid(uid_t uid);
struct group * gptr = getgrgid(gid_t gid);
printf("%s", uptr->pw_name );
printf("%s", gptr->gr_name); |
|
c**t
发帖数: 2744 | 24
How to mount from network and bypass the root password?
Change /etc/passwd for root, right? |
|
c**t
发帖数: 2744 | 25 Solaris SPARCStation5, SUN OS 5.6
远程的 telnet 可以,但是本地login就是黑屏.
我用的是图形界面的login.除了/etc/shadow 和 /etc/passwd
应该改哪些 file? |
|
l*l
发帖数: 225 | 26 I guess this machine is hacked.
No one will show his shadow file. If he want you crack his passwd. |
|
l*l
发帖数: 225 | 27 Are your sure you can su tty from comman user? If so, do next:
If you have backup of system dir, then check sum.
search the suid file which is made recently.
search inet.d to see if there is a backdoor in it.
search your server program to see if there are some you don't know.
search the every user to see if their passwd can crack by john.
search if their ever have any sniffer program runs in your subnet.
Best way is to back your data, reinstall your system from CD. |
|
c**t
发帖数: 2744 | 28
You may run '/bin/csh yourscriptfile', then a new child csh will be created.
I think 'awk' also works in sh or ksh. You can run 'echo $RAMDOM' to figure
out what the default shell is. ( Return something, ksh; empty BourneShell;
error prompt, csh) or 'grep blah /etc/passwd' to do the same job. |
|
u*******n
发帖数: 119 | 29
Thanks at first.
However, it seems that RAMDOM is an Undefined variable.
As to "/etc/passwd", that file is shadowed.
As I remember, there is a commond can show the password file. Who knows ? |
|
d******e
发帖数: 2265 | 30 check are you in the passwd file? |
|
l*p
发帖数: 74 | 31 情况：用任何用户登录(包括root)，在输入正确密码之后，系统回答
No Shell, 然后断线.不能Telnet, FTP, WWW...
Cause: sb把passwd文件中的root行的最末尾的sh改成了csh,然后重启，就发生了
上述情况。
how to solve the problem ?
thanks |
|
l*l
发帖数: 225 | 32 使用控制台登陆，然后用文件编辑器编辑/etc/passwd，该回去就可以了。使用CDE。 |
|
m******r
发帖数: 3 | 33 Every time when I try to login into our unix machine, it
turns out "No Shell" and fails. I check the passwd file, it
looks fine. Do somebody know what causes the problem and
how to solve it? Thanks a lot |
|
r****t
发帖数: 9 | 34 although I have not tried that, but theoretically there
should be little problem.
You will have to use a port above 1024 as the ftpd listening
port, as listening
on a port below 1024 requires root privilige. Still you'd
better set the root of
your ftpd to a sub directory of the user account home
directory, so that the ftpd
could manage its own passwd file. |
|
z*******w
发帖数: 79 | 35 /etc/group file
e.g. line:
daemon:x:2:root,bin,daemon
group_name:passwd:gid:user_1, user_2,... |
|
w*********n
发帖数: 84 | 36 Is that "telnet/Trying passwd" attack? |
|
ft
发帖数: 106 | 37 tcsh, bash, ksh......
a lot of shells do that. If you are root on your machines, edit your
/etc/passwd file. :-) |
|
m*****e
发帖数: 4193 | 38
chsh changes /etc/passwd.
Not really. You can use sth like "exec tcsh". It will replace the current
shell. If you can't use chsh or the sysadmin is not very friendly, you can
do it this way. |
|
d***c
发帖数: 13 | 39 I saw a ftp script before, which could do auto connection and fetch files
from hosts. what I'm interested in is its login part.
But I could not remember how exactly it is written now.
only remember it used something like
...
cat > ftp host << EOF
{ login part with usrname, passwd..}
EOF
....
{ getting files part }
...
does anyone how to do that login part ? thanx ! |
|
j*****o
发帖数: 320 | 40 ???
cat /etc/passwd |grep lxj
不行么？你要看谁的UID呀？ |
|
c********l
发帖数: 447 | 41 ypmatch username passwd
try this first |
|
s**n
发帖数: 449 | 42 if you are using NIS+, try:
nistbladm -e shell=/usr/local/bin/tcsh '[name=needle],passwd.org_dir'
put your login name instead of needle as name. and change path for tcsh
if necessary. |
|
t**********o
发帖数: 124 | 43
some
Yes, but how to associate users with its shell login account.
I mean, for Apache, I could config it to let a user log in using passwd and
login name(even the same pair as his unix account), but I have to create
password files sperately for each folder/files. This doesn't mean the unix
system could recognize this user, I think it simply assumes all the users(who
login from CGI webpage) have same previledges as the author(me)of Perl/CGI
program.
But I don't have previledge to run those proc |
|
p****k
发帖数: 130 | 44 If I remember correctly, at least for root, logins are logged
to LOG_AUTH at level LOG_NOTICE and multiple failures are logged
at level LOG_CRIT. Not sure if it is the same for common users.
If it bothers u for many days, why not get the source codes for
login/passwd and read them? |
|
l***y
发帖数: 11 | 45 Yes, you found the problem.
Try to write a small program to replace those newline characters. |
|
l*****n
发帖数: 12 | 46 But how? I can not access that file now.
How to access it in the first place?
Thanks very much |
|
l***y
发帖数: 11 | 47 I think you're the system administrator. Don't worry. Ask your superior to reset it. I don't know how to do it. |
|
l*****n
发帖数: 12 | 48 I do know the root password. But noweven root can not log in.
The other group memeber s will be mad at me since they can not
access also.
Who ca nsave me ? |
|
l*****n
发帖数: 12 | 49 I just ca n not log in.
Bow, bow, bow |
|
o***z
发帖数: 133 | 50 enter run level 1
at the boot prompt, type "linux 1" |
|
