expert password recovery on SecurePlatform

[alias_maya]

Hi,

Does anyone know how to recover the expert password on SecurePlatform (R61) ?
I've found a link to a possible solution, (https://secureknowledge.checkpoint.c...do?id=sk24666), but the company I'm working for doesn't have an Enterprise Support Contract.

Thanks,
Peter

[northlandboy]

You don't need a support contract to view that - get a Check Point cert, and you can view the advanced level articles.

That aside, password recovery has been covered here many times.

Boot off a RH recovery CD, and edit /etc/passwd so that admin uses /bin/bash, rather than cpshell.

Assuming you know admin's password, boot up, login as admin, then run passwd, to set the expert password.

If you also don't know the admin password, you need to edit it out of /etc/shadow, then run \passwd admin when you boot up and login with a blank password.

Not a huge amount different to a standard Unix password recovery procedure. admin's password is in /etc/shadow, the expert password is in /boot/grub.conf

[alias_maya]

Hi,

thanks a lot, you made my day.

br,
Peter

[efdsa]

I tried:

...Assuming you know admin's password, boot up, login as admin, then run passwd, to set the expert password....

But this changes the admin pw and not the expert pw. Is there a different way to recover the expert pw?

[kva.kva]

I think that
command passwd (full path - /bin/expert_passwd) - for expert user
and command \passwd (full path - /usr/bin/passwd) - for admin (root) user

[thebuffman]

here is a very nice read on the whole password thing with **nix os'.

http://www.unet.univie.ac.at/aix/cmd...ds4/passwd.htm

it definitely helped me understand some things.

[thebuffman]

Originally Posted by thebuffman

here is a very nice read on the whole password thing with **nix os'.

http://www.unet.univie.ac.at/aix/cmd...ds4/passwd.htm

it definitely helped me understand some things.

I just performed the recovery and it was a bit confusing. Using a Knoppix cd I could not gain write access to the /etc/passwd file to change the admin account for bash logon. I mounted the drive, changed permission on the drive etc however the file itself and all subsequent parent folders had grayed out permissions with 'root' having the only write permission.

Finall I right clicked on the /etc directory and selected 'root console' or something like that and a cli came up allowing me to modify the passwd file using vi editor. It was a piece of cake after that.