is it possible to break passwords of su and swinst?

[frank]

Go to swinst menu
2) Expert Menu
6) System Management
5) User account management
1) Change account password

When it ask for a user, enter 'root' (without the ' ' )

that's it !

[la_toupie]

In which version ?

I've that in R6.1.1

2) Expert Menu
6) System Management
5) User account management
1) Change all passwords at next login

[frank]

OOpps, I did not notice that..

I am using R7.0 (f4.401.3.b), with swinst 2.34.0
If you can't find this menu, then swinst cannot change the root password (until you are in release 7.0) and you would need to use my documentation

[la_toupie]

So since R7.0, you can change root's password by swinst...not good for my security because I give the swinst's password to my consultants (and not root).

Ok, thank you Franck

[alex]

So since R7.0, you can change root's password by swinst...not good for my security because I give the swinst's password to my consultants (and not root).

Ok, thank you Franck

In R6.2 it is the same as in R7.0

[frank]

Just ask for a hack, and Franky will find it ...

once you login under mtcl , use su - to become root
Go under /DHS3bin/soft_install/bin and edit the file Swi_Management

Look for
if [ "$this_name" == "ppp" ] || [ "$this_name" == "ccfexc" ]; then
echo Operation not allowed for this account !
iemsg "Operation canceled..." ; return 1
fi
if [ $NAME = 'root' ] || [ $NAME = 'swinst' ] ; then
passwd $NAME


And replace with



if [ "$this_name" == "ppp" ] || [ "$this_name" == "ccfexc" ] || [ "$this_name" == "root" ]; then
echo Operation not allowed for this account !
iemsg "Operation canceled..." ; return 1
fi
if [ $NAME = 'swinst' ] ; then
passwd $NAME



and you won't be able to change root password from swinst !


Remember to add a comment:
#Hacked by Frank from http://www.alcatelunleashed.com

[infinite]

Hi, I have one issue with 'Swinst'.
The 'Swinst user name' and 'password' is accepted/works when connected via console port (V24).
but the same password is not working/takes when connected via Telnet.
Plz reply..

[vad]

You can use root/swinst account directly only via SSH (or V24).
For telnet connection you cannot use root or swinst account (you will have message about incorrect login/password).

Just connect (telnet connection) with mtcl account. After you can use "swinst" command (with swinst password) for swinst menu or "su" command (with root password) for root privelege.