is it possible to break passwords of su and swinst?

User avatar
frank
Alcatel Unleashed Certified Guru
Alcatel Unleashed Certified Guru
Posts: 12673
Joined: 06 Jul 2004 00:18
Location: New York
Contact:

Post by frank » 31 May 2006 15:36

Go to swinst menu
2) Expert Menu
6) System Management
5) User account management
1) Change account password

When it ask for a user, enter 'root' (without the ' ' )

that's it !
Code Free Or Die

User avatar
la_toupie
Alcatel Unleashed Certified Guru
Alcatel Unleashed Certified Guru
Posts: 124
Joined: 23 Aug 2004 05:21
Location: Paris

Post by la_toupie » 01 Jun 2006 06:04

In which version ?

I've that in R6.1.1

2) Expert Menu
6) System Management
5) User account management
1) Change all passwords at next login
What I seek in the word, it is the response of the other...

User avatar
frank
Alcatel Unleashed Certified Guru
Alcatel Unleashed Certified Guru
Posts: 12673
Joined: 06 Jul 2004 00:18
Location: New York
Contact:

Post by frank » 01 Jun 2006 07:53

OOpps, I did not notice that.. :-)

I am using R7.0 (f4.401.3.b), with swinst 2.34.0
If you can't find this menu, then swinst cannot change the root password (until you are in release 7.0) and you would need to use my documentation :-)
Code Free Or Die

User avatar
la_toupie
Alcatel Unleashed Certified Guru
Alcatel Unleashed Certified Guru
Posts: 124
Joined: 23 Aug 2004 05:21
Location: Paris

Post by la_toupie » 02 Jun 2006 08:19

So since R7.0, you can change root's password by swinst...not good for my security because I give the swinst's password to my consultants (and not root).

Ok, thank you Franck
What I seek in the word, it is the response of the other...

User avatar
alex
Senior Member
Posts: 1324
Joined: 06 Jul 2004 07:27
Location: Russia
Contact:

Post by alex » 02 Jun 2006 08:31

La_Toupie wrote:So since R7.0, you can change root's password by swinst...not good for my security because I give the swinst's password to my consultants (and not root).

Ok, thank you Franck
In R6.2 it is the same as in R7.0

User avatar
frank
Alcatel Unleashed Certified Guru
Alcatel Unleashed Certified Guru
Posts: 12673
Joined: 06 Jul 2004 00:18
Location: New York
Contact:

Post by frank » 02 Jun 2006 19:53

Just ask for a hack, and Franky will find it ...

once you login under mtcl , use su - to become root
Go under /DHS3bin/soft_install/bin and edit the file Swi_Management

Look for
if [ "$this_name" == "ppp" ] || [ "$this_name" == "ccfexc" ]; then
echo Operation not allowed for this account !
iemsg "Operation canceled..." ; return 1
fi
if [ $NAME = 'root' ] || [ $NAME = 'swinst' ] ; then
passwd $NAME


And replace with



if [ "$this_name" == "ppp" ] || [ "$this_name" == "ccfexc" ] || [ "$this_name" == "root" ]; then
echo Operation not allowed for this account !
iemsg "Operation canceled..." ; return 1
fi
if [ $NAME = 'swinst' ] ; then
passwd $NAME



and you won't be able to change root password from swinst !


Remember to add a comment:
#Hacked by Frank from http://www.alcatelunleashed.com

:-)
Code Free Or Die

infinite
Member
Posts: 7
Joined: 27 Jun 2011 08:30

Re: is it possible to break passwords of su and swinst?

Post by infinite » 02 Jul 2011 08:07

Hi, I have one issue with 'Swinst'.
The 'Swinst user name' and 'password' is accepted/works when connected via console port (V24). :)
but the same password is not working/takes when connected via Telnet.:(
Plz reply..

vad
Alcatel Unleashed Certified Guru
Alcatel Unleashed Certified Guru
Posts: 3431
Joined: 23 Sep 2004 06:47
Location: Russia

Re: is it possible to break passwords of su and swinst?

Post by vad » 04 Jul 2011 02:00

You can use root/swinst account directly only via SSH (or V24).
For telnet connection you cannot use root or swinst account (you will have message about incorrect login/password).

Just connect (telnet connection) with mtcl account. After you can use "swinst" command (with swinst password) for swinst menu or "su" command (with root password) for root privelege.

Post Reply

Return to “Swinst”