Mailing Lists: Apple Mailing Lists
Image of Mac OS face in stamp
Re: Lost root password
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Lost root password



on 11/10/06 2:10 AM, liyas mamat at email@hidden wrote:

> The bad news is I have misplaced the CD. Any command from single-mode to reset

As mentioned in this thread you can easily do the from the WGM and passwd if
you have admin access but just to answer your question yes, top of my
head...
>From the SUM prompt:

% mount -uw /
% nicl -raw /var/db/netinfo/local.nidb create /users/root passwd  `openssl
passwd newr00tpass`
% reboot
"create" should destroy the existing key/value pair and nicl and openssl work
in SUM,this leaves an old style crypt password and should be reset using the
tools to a shadow for better security but that would get you in to client or
server in about 20 seconds or so.

>>
>> (I have a feeling you're trying to use something you don't actually
>> need the root account for, so I'll ask: "What do you need the root
>> account, specifically, for?")
>
> My question as well...
Root must be there for Open Directory replica creation but that's just a one
time example. Other then that I like sudo -s for day to day like most
people.I normally set my root password to something complex and then use
id_dsa ssh private keys to log in worst case senerios as a type of back
door,though there is something to be said from having a back door account in
/etc/master.passwd (Minus the obvious crypt password security concerns) as
even if Netinfo was hosed you could still get in if DirectoryService was
auth'ing to the flat files ,which wouldn't be true for root account in the
NIDB.Just my 2 cents.
-Z
 _______________________________________________
Do not post admin requests to the list. They will be ignored.
Macos-x-server mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:

This email sent to email@hidden



Visit the Apple Store online or at retail locations.
1-800-MY-APPLE

Contact Apple | Terms of Use | Privacy Policy

Copyright © 2011 Apple Inc. All rights reserved.