[exppi]

I found this forum searching a solution for my issue. I have an old server that need to be reactived, but cannot remember the root password. I have direct access to the console and a boot floppy that I made right after the OS installation. I saw other threads like this closed by the moderators thinking about an illegal operation. Well why we cannot talk about this issue? Post your suggestions and maybe all the other administrators can understand what to do to prevent the forced password change and why is so important to keep a server out of public access. Waiting for replies I'll continue to search and try ... cheers

PS the server got Debian Sergeant installed

[MikeTbob]

Hi exppi, welcome to the forums.
Sometimes the mods get a little antsy and their panties get all wadded up (Just Joking Ladies!), but they mostly do a very good job. It can't be easy to be a mod, in my opinion.

Anyhoo
Check this link on password resetting, since it was posted by a mod, it isn't locked/condemned.
http://www.linuxforums.org/forum/lin...-password.html

[exppi]

Originally Posted by MikeTbob

Hi exppi, welcome to the forums.
Check this link on password resetting, since it was posted by a mod, it isn't locked/condemned.
http://www.linuxforums.org/forum/lin...-password.html

Tnx for your welcome and for your answer. Reading some posts I tryed the new Debian netinst CD with the rescue mode. It let me choose my old / partition and logging without password I was able to change it simply using the passwd command. Well, very powerfull and dangerous. Anyone with a little acknowledge of linux and an installation CD can get an access as root if he will be able to restart the server from the internal CDROM.

[ozar]

Originally Posted by exppi

Anyone with a little acknowledge of linux and an installation CD can get an access as root if he will be able to restart the server from the internal CDROM.

Exactly... never walk away from your machine thinking it is totally safe if left in the hands of others.

[exppi]

Originally Posted by ozar

Exactly... never walk away from your machine thinking it is totally safe if left in the hands of others.

So after an installation we should set a password also to access the BIOS removing floppy and CDROM from the boot sequence. Password different from the root one. Who want to force the access to your server needs to reset the BIOS and than use the rescue mode. Just a bit more complicated, but easy if you have the server in your hands.

[ozar]

Originally Posted by MikeTbob

Check this link on password resetting, since it was posted by a mod, it isn't locked/condemned.
http://www.linuxforums.org/forum/lin...-password.html

Hi, MikeTbob!

Actually, the thread is locked, meaning that nobody can post to it. It isn't condemned because there is nothing wrong with someone resetting the password on their own machine, and doing so is a legitimate concern for anyone that has lost or forgotten their root password.