Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.user > #238664 > unrolled thread
| Started by | Thomas George <lists@tomgeorge.info> |
|---|---|
| First post | 2021-08-14 23:10 +0200 |
| Last post | 2021-08-15 16:40 +0200 |
| Articles | 10 — 6 participants |
Back to article view | Back to linux.debian.user
password set at installation of debian-10.10.0-amd64 not recognized Thomas George <lists@tomgeorge.info> - 2021-08-14 23:10 +0200
Re: password set at installation of debian-10.10.0-amd64 not recognized Charles Curley <charlescurley@charlescurley.com> - 2021-08-15 00:00 +0200
Re: password set at installation of debian-10.10.0-amd64 not recognized Stefan Monnier <monnier@iro.umontreal.ca> - 2021-08-15 00:10 +0200
Re: password set at installation of debian-10.10.0-amd64 not recognized <tomas@tuxteam.de> - 2021-08-15 09:00 +0200
Re: password set at installation of debian-10.10.0-amd64 not recognized Reco <recoverym4n@enotuniq.net> - 2021-08-15 11:20 +0200
Re: password set at installation of debian-10.10.0-amd64 not recognized <tomas@tuxteam.de> - 2021-08-15 13:50 +0200
Re: password set at installation of debian-10.10.0-amd64 not recognized Stefan Monnier <monnier@iro.umontreal.ca> - 2021-08-15 17:10 +0200
Re: password set at installation of debian-10.10.0-amd64 not recognized Greg Wooledge <greg@wooledge.org> - 2021-08-15 17:20 +0200
Re: password set at installation of debian-10.10.0-amd64 not recognized <tomas@tuxteam.de> - 2021-08-15 17:30 +0200
Re: password set at installation of debian-10.10.0-amd64 not recognized Greg Wooledge <greg@wooledge.org> - 2021-08-15 16:40 +0200
| From | Thomas George <lists@tomgeorge.info> |
|---|---|
| Date | 2021-08-14 23:10 +0200 |
| Subject | password set at installation of debian-10.10.0-amd64 not recognized |
| Message-ID | <CM94J-yi-3@gated-at.bofh.it> |
The installation from a usb stick went smoothly. Everything works sudo commands work so I will rarely need to log on as root. Nevertheless there are rare cases only root can make changes. What to do?
[toc] | [next] | [standalone]
| From | Charles Curley <charlescurley@charlescurley.com> |
|---|---|
| Date | 2021-08-15 00:00 +0200 |
| Subject | Re: password set at installation of debian-10.10.0-amd64 not recognized |
| Message-ID | <CM9Ra-SB-7@gated-at.bofh.it> |
| In reply to | #238664 |
On Sat, 14 Aug 2021 17:00:39 -0400 Thomas George <lists@tomgeorge.info> wrote: > Nevertheless there are rare cases only root can make changes. > > What to do? Check out "sudo -i". -- Does anybody read signatures any more? https://charlescurley.com https://charlescurley.com/blog/
[toc] | [prev] | [next] | [standalone]
| From | Stefan Monnier <monnier@iro.umontreal.ca> |
|---|---|
| Date | 2021-08-15 00:10 +0200 |
| Message-ID | <CMa0N-1bR-1@gated-at.bofh.it> |
| In reply to | #238664 |
> Nevertheless there are rare cases only root can make changes.
You mean cases where `sudo zsh -l` is not an option?
Stefan
[toc] | [prev] | [next] | [standalone]
| From | <tomas@tuxteam.de> |
|---|---|
| Date | 2021-08-15 09:00 +0200 |
| Subject | Re: password set at installation of debian-10.10.0-amd64 not recognized |
| Message-ID | <CMihJ-6rs-13@gated-at.bofh.it> |
| In reply to | #238672 |
[Multipart message — attachments visible in raw view] — view raw
On Sat, Aug 14, 2021 at 06:06:50PM -0400, Stefan Monnier wrote: > > Nevertheless there are rare cases only root can make changes. > > You mean cases where `sudo zsh -l` is not an option? Up to now, there is exactly one case I am aware of when you'd wish you had a root password: at boot, the root file system is deemed too broken to mount, and you are told to fix it manually. Of course, there are ways around that, but all of them involve having access to another living instance of an operating system, either a rescue system or a third system to poke around and try to get your half-dead root file system up to speed (or you know your way around the initramfs, which is "another living instance of an operating system", but not one with access to your brain extension, aka search engine). The most convenient step at that point still is "enter your root password and be dropped into a root shell". Does anyone know other cases where you'd wish you had a root password? Cheers - t
[toc] | [prev] | [next] | [standalone]
| From | Reco <recoverym4n@enotuniq.net> |
|---|---|
| Date | 2021-08-15 11:20 +0200 |
| Subject | Re: password set at installation of debian-10.10.0-amd64 not recognized |
| Message-ID | <CMktc-7Yc-9@gated-at.bofh.it> |
| In reply to | #238705 |
Hi. On Sun, Aug 15, 2021 at 08:49:49AM +0200, tomas@tuxteam.de wrote: > On Sat, Aug 14, 2021 at 06:06:50PM -0400, Stefan Monnier wrote: > > > Nevertheless there are rare cases only root can make changes. > > > > You mean cases where `sudo zsh -l` is not an option? > > Up to now, there is exactly one case I am aware of when you'd wish > you had a root password: at boot, the root file system is deemed > too broken to mount, and you are told to fix it manually. > > Of course, there are ways around that, but all of them involve having > access to another living instance of an operating system, Booting an existing system with init=/bin/sh does not require one to know a root password, and allows full access nevertheless. Of course, a console access is required, but the same can be said about any kind of a rescue media. > Does anyone know other cases where you'd wish you had a root password? I can think of nothing, short of broken third-party software that insists on executing "su -". Reco
[toc] | [prev] | [next] | [standalone]
| From | <tomas@tuxteam.de> |
|---|---|
| Date | 2021-08-15 13:50 +0200 |
| Subject | Re: password set at installation of debian-10.10.0-amd64 not recognized |
| Message-ID | <CMmOl-12h-1@gated-at.bofh.it> |
| In reply to | #238711 |
[Multipart message — attachments visible in raw view] — view raw
On Sun, Aug 15, 2021 at 12:15:07PM +0300, Reco wrote: > Hi. > > On Sun, Aug 15, 2021 at 08:49:49AM +0200, tomas@tuxteam.de wrote: [...] > > Up to now, there is exactly one case I am aware of when you'd wish > > you had a root password: at boot, the root file system is deemed > > too broken to mount, and you are told to fix it manually. > > > > Of course, there are ways around that, but all of them involve having > > access to another living instance of an operating system, > > Booting an existing system with init=/bin/sh does not require one to > know a root password, and allows full access nevertheless. You don't really get that far if your root FS is unmountable. > Of course, a console access is required, but the same can be said about > any kind of a rescue media. definitely. > > Does anyone know other cases where you'd wish you had a root password? > > I can think of nothing, short of broken third-party software that > insists on executing "su -". Apart from, of course "I don't want sudo on my box", which, to me, looks like a perfectly valid reason (not that this is /my/ standpoint: I'm a happy sudo customer, but I know folks who do take this standpoint and have all my respect). Cheers - t
[toc] | [prev] | [next] | [standalone]
| From | Stefan Monnier <monnier@iro.umontreal.ca> |
|---|---|
| Date | 2021-08-15 17:10 +0200 |
| Message-ID | <CMpVU-3eu-19@gated-at.bofh.it> |
| In reply to | #238720 |
> You don't really get that far if your root FS is unmountable.
Hmm... if it truly can't be mounted, then the system can't read
`/etc/passwd` and then whether there is a root account or not makes
no difference.
In the "usual" case where the root FS is readable but fsck found errors,
then indeed the normal boot steps will require a root password, but you
can normally circumvent this with `init=/bin/sh`.
If this fails because `/bin/sh` is affected by the filesystem's
inconsistency, then you need to resort to the initrd's debug shell,
e.g. with something `break=local` IIRC.
Of course, the existence of a root password can occasionally be handy
for things like `rsync` (strictly speaking, you can probably arrange
for rsync to first log in as a normal user and then use `sudo`, but
it requires a fair bit of fiddling, IIRC).
Stefan
[toc] | [prev] | [next] | [standalone]
| From | Greg Wooledge <greg@wooledge.org> |
|---|---|
| Date | 2021-08-15 17:20 +0200 |
| Subject | Re: password set at installation of debian-10.10.0-amd64 not recognized |
| Message-ID | <CMq5A-3iE-9@gated-at.bofh.it> |
| In reply to | #238743 |
On Sun, Aug 15, 2021 at 11:00:26AM -0400, Stefan Monnier wrote: > Of course, the existence of a root password can occasionally be handy > for things like `rsync` (strictly speaking, you can probably arrange > for rsync to first log in as a normal user and then use `sudo`, but > it requires a fair bit of fiddling, IIRC). You'll generally want to set things up so that direct root logins require key authentication, not password auth. (And *definitely* not some shell/Expect botch involving feeding a password to sudo after a non-root login. That's simply terrible.)
[toc] | [prev] | [next] | [standalone]
| From | <tomas@tuxteam.de> |
|---|---|
| Date | 2021-08-15 17:30 +0200 |
| Subject | Re: password set at installation of debian-10.10.0-amd64 not recognized |
| Message-ID | <CMqfg-3n9-23@gated-at.bofh.it> |
| In reply to | #238743 |
[Multipart message — attachments visible in raw view] — view raw
On Sun, Aug 15, 2021 at 11:00:26AM -0400, Stefan Monnier wrote: > > You don't really get that far if your root FS is unmountable. > > Hmm... if it truly can't be mounted, then the system can't read > `/etc/passwd` and then whether there is a root account or not makes > no difference. That's right. [...] > Of course, the existence of a root password can occasionally be handy > for things like `rsync` (strictly speaking, you can probably arrange > for rsync to first log in as a normal user and then use `sudo`, but > it requires a fair bit of fiddling, IIRC). For that, there is `rsync ... --rsync-path="sudo rsync" ...'. I do use to back up my virtual server out there, which doesn't like (heh) to have an ssh root login. Cheers - t
[toc] | [prev] | [next] | [standalone]
| From | Greg Wooledge <greg@wooledge.org> |
|---|---|
| Date | 2021-08-15 16:40 +0200 |
| Subject | Re: password set at installation of debian-10.10.0-amd64 not recognized |
| Message-ID | <CMpsT-2P8-25@gated-at.bofh.it> |
| In reply to | #238705 |
On Sun, Aug 15, 2021 at 08:49:49AM +0200, tomas@tuxteam.de wrote:
> [trying to enter single user mode requires a root password]
>
> Of course, there are ways around that, but all of them involve having
> access to another living instance of an operating system,
Not all. You can supply kernel parameters from the GRUB menu to get
around it. Historically, "init=/bin/bash" used to work, but that may
not be enough these days. I haven't tried it in a while.
> Does anyone know other cases where you'd wish you had a root password?
If the sudo package happens to break.
If you break your sudoers file by accident. ("But who could *possibly*
screw that up? The format is so simple that you *barely* need a PhD
in computer science to understand the documentation!")
[toc] | [prev] | [standalone]
Back to top | Article view | linux.debian.user
csiph-web