Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #182755 > unrolled thread

Debian 9

Back to article view | Back to linux.debian.user

This discussion starts older than the indexed window; earlier articles aren't shown. The article labeled Started by below is the oldest one visible, not the original post.

Contents

  Debian 9 <sarez45@att.net> - 2017-06-27 18:30 +0200
    Re: Debian 9 Greg Wooledge <wooledg@eeg.ccf.org> - 2017-06-27 18:50 +0200
      Re: Debian 9 Jimmy Johnson <field.engineer@gmail.com> - 2017-06-29 03:30 +0200
        Re: Debian 9 Sean Behan <seanwbehan@riseup.net> - 2017-06-29 04:10 +0200
        Re: Debian 9 Jimmy Johnson <field.engineer@gmail.com> - 2017-06-29 04:20 +0200
          Re: Debian 9 Jimmy Johnson <field.engineer@gmail.com> - 2017-06-29 10:20 +0200
    Re: Debian 9 Hans <hans.ullrich@loop.de> - 2017-06-27 19:10 +0200
      Re: Debian 9 Fungi4All <fungilife@protonmail.com> - 2017-06-27 23:50 +0200
        Re: Debian 9 Sean Behan <seanwbehan@riseup.net> - 2017-06-28 00:20 +0200
          Re: Debian 9 Hans <hans.ullrich@loop.de> - 2017-06-28 07:10 +0200
        Re: Debian 9 Andy Smith <andy@strugglers.net> - 2017-06-28 01:10 +0200
        Re: Debian 9 <tomas@tuxteam.de> - 2017-06-28 09:40 +0200
      Re: Debian 9 <dusan.vodopivec@pro-ing.rs> - 2017-06-28 12:20 +0200
        Re: Debian 9 Hans <hans.ullrich@loop.de> - 2017-06-28 12:30 +0200
          Re: Debian 9 <dusan.vodopivec@pro-ing.rs> - 2017-06-28 12:40 +0200
            Re: Debian 9 Hans <hans.ullrich@loop.de> - 2017-06-28 13:10 +0200
              Re: Debian 9 <dusan.vodopivec@pro-ing.rs> - 2017-06-28 13:20 +0200
                Re: Debian 9 Hans <hans.ullrich@loop.de> - 2017-06-28 13:30 +0200
    Re: Debian 9 deloptes <deloptes@gmail.com> - 2017-06-29 00:10 +0200

#182755 — Debian 9

The administrator password is not working in Debian 9 cinnamon. How can we use synaptic package manager or update the system if the administrator password is not working? I double checked the password during installation to be sure it is correct. I even reinstalled the system and the same problem occurs. This is unacceptable. First the Cd iso's did not work and now this. What is going on? 

[toc] | [next] | [standalone]

#182756

On Tue, Jun 27, 2017 at 04:00:13PM +0000, sarez45@att.net wrote:
> The administrator password is not working in Debian 9 cinnamon.

I bet you used a Live CD.

[toc] | [prev] | [next] | [standalone]

#182808

On 06/27/2017 09:49 AM, Greg Wooledge wrote:
> On Tue, Jun 27, 2017 at 04:00:13PM +0000, sarez45@att.net wrote:
>> The administrator password is not working in Debian 9 cinnamon.
> 
> I bet you used a Live CD.

I downloaded the iso to check this out, yes it won't give you root 
passwd, the install takes the passwd while installing.  Sudo is 
installed but the user is not allowed sudo rights. Now I have this 
install and it's worst than the live dvd, it least you can sudo with the 
live dvd. Is there an easy fix I can try?  I've been googling but 
nothing easy to do.
-- 
Jimmy Johnson

Registered Linux User #380263

[toc] | [prev] | [next] | [standalone]

#182809

[Multipart message — attachments visible in raw view] — view raw

On Wed, Jun 28, 2017 at 06:24:17PM -0700, Jimmy Johnson wrote:
> On 06/27/2017 09:49 AM, Greg Wooledge wrote:
> I downloaded the iso to check this out, yes it won't give you root passwd,
> the install takes the passwd while installing.  Sudo is installed but the
> user is not allowed sudo rights. Now I have this install and it's worst than
> the live dvd, it least you can sudo with the live dvd. Is there an easy fix
> I can try?  I've been googling but nothing easy to do.
 
Login as root, run "visudo" and uncomment the line that says:

# Allow members of group sudo to execute any command

Then log out and back in on your regular user

[toc] | [prev] | [next] | [standalone]

#182810

On 06/28/2017 06:24 PM, Jimmy Johnson wrote:
> On 06/27/2017 09:49 AM, Greg Wooledge wrote:
>> On Tue, Jun 27, 2017 at 04:00:13PM +0000, sarez45@att.net wrote:
>>> The administrator password is not working in Debian 9 cinnamon.
>>
>> I bet you used a Live CD.
> 
> I downloaded the iso to check this out, yes it won't give you root 
> passwd, the install takes the passwd while installing.  Sudo is 
> installed but the user is not allowed sudo rights. Now I have this 
> install and it's worst than the live dvd, it least you can sudo with the 
> live dvd. Is there an easy fix I can try?  I've been googling but 
> nothing easy to do.

I loaded my netinstall disc and ran the repair, I opened a shell and ran 
#passwd root and rebooted and now have root.
-- 
Jimmy Johnson

Registered Linux User #380263

[toc] | [prev] | [next] | [standalone]

#182812

On 06/28/2017 07:13 PM, Jimmy Johnson wrote:
> On 06/28/2017 06:24 PM, Jimmy Johnson wrote:
>> On 06/27/2017 09:49 AM, Greg Wooledge wrote:
>>> On Tue, Jun 27, 2017 at 04:00:13PM +0000, sarez45@att.net wrote:
>>>> The administrator password is not working in Debian 9 cinnamon.
>>>
>>> I bet you used a Live CD.
>>
>> I downloaded the iso to check this out, yes it won't give you root 
>> passwd, the install takes the passwd while installing.  Sudo is 
>> installed but the user is not allowed sudo rights. Now I have this 
>> install and it's worst than the live dvd, it least you can sudo with 
>> the live dvd. Is there an easy fix I can try?  I've been googling but 
>> nothing easy to do.
> 
> I loaded my netinstall disc and ran the repair, I opened a shell and ran 
> #passwd root and rebooted and now have root.

There are other problems with this install, apt sources are messed up 
and gpg-keys too.  What ever, it kept me from updating and upgrading. I 
fixed what looked wrong and can now upgrade, I'm waiting for the upgrade 
to finish, plus removing 4-5 meta-packages, discover, apper, packagekit 
and auto-upgrade. I can now update/upgrade without errors.

I do not recommend using these live dvds for install, unless you like 
fixing unnecessary problems that can otherwise be avoided.

Cheers,
-- 
Jimmy Johnson

Registered Linux User #380263

[toc] | [prev] | [next] | [standalone]

#182757

Am Dienstag, 27. Juni 2017, 16:00:13 CEST schrieb sarez45@att.net:
Hmm, this should not happen. When you cannot login as root, so the following:

1. Start with a livefile system, like Knoppix, GRML; Trinity Rescue Kit,. 
whatever.

2. Mount the root partition.

3. Now you can edit the "/etc/shadow" file on this partition. Look for the user 
"root" and delete everything between the ":" and the "0". The entry should 
look like "root::0:99999:7:::"

4. Reboot, now you should be able to enter as root without password.

(If I made a mistake here, someone might correct me, as I did this thing alt 
last almost 4 years ago!)

The other option is, to search for a boot disk called "Kon-Boot". Booting from 
this letts you in EVERY system (Windows, linux etc.) without password.

There is also the option (I never checked), to enter "#!/bin/bash" at the boot 
prompt, this let you in a console with admin rights. Never checked this, too. 
However, there are good documents of these in the web, but I was too lazy to 
look for them. Google will help you.

Question, can you login as a normal user?

Can you sudo to root? (I am no friend of sudo, so I disabled this option. Does 
stretch enable this by default?) If so, you will not be able to login as root 
(as far as I know), but login as normal user, then "sudo su" and root password 
will let you in.

Hope my (not proven) hints help either.

Happy hacking and good luck!

Kind regards

Hans

> The administrator password is not working in Debian 9 cinnamon. How can we
> use synaptic package manager or update the system if the administrator
> password is not working? I double checked the password during installation
> to be sure it is correct. I even reinstalled the system and the same
> problem occurs. This is unacceptable. First the Cd iso's did not work and
> now this. What is going on?

[toc] | [prev] | [next] | [standalone]

#182762

[Multipart message — attachments visible in raw view] — view raw

Highly deserving a top post
Is this all it takes to hack the root account of a secure debian system?
Not that it makes any difference, any linux system that is booted locally
in which you have root access can manipulate any debian file anywhere
on the same system. Unless of course it is encypted, which means
you are out of luck and can't even tell if there is a debian in there.
Thanks for the new trick ;)

> From: hans.ullrich@loop.de
> To: debian-user@lists.debian.org
> Am Dienstag, 27. Juni 2017, 16:00:13 CEST schrieb sarez45@att.net:
> Hmm, this should not happen. When you cannot login as root, so the following:
> 1. Start with a livefile system, like Knoppix, GRML; Trinity Rescue Kit,.
> whatever.
> 2. Mount the root partition.
> 3. Now you can edit the "/etc/shadow" file on this partition. Look for the user
> "root" and delete everything between the ":" and the "0". The entry should
> look like "root::0:99999:7:::"
> 4. Reboot, now you should be able to enter as root without password.
> (If I made a mistake here, someone might correct me, as I did this thing alt
> last almost 4 years ago!)
> The other option is, to search for a boot disk called "Kon-Boot". Booting from
> this letts you in EVERY system (Windows, linux etc.) without password.
> There is also the option (I never checked), to enter "#!/bin/bash" at the boot
> prompt, this let you in a console with admin rights. Never checked this, too.
> However, there are good documents of these in the web, but I was too lazy to
> look for them. Google will help you.
> Question, can you login as a normal user?
> Can you sudo to root? (I am no friend of sudo, so I disabled this option. Does
> stretch enable this by default?) If so, you will not be able to login as root
> (as far as I know), but login as normal user, then "sudo su" and root password
> will let you in.
> Hope my (not proven) hints help either.
> Happy hacking and good luck!
> Kind regards
> Hans
>> The administrator password is not working in Debian 9 cinnamon. How can we
>> use synaptic package manager or update the system if the administrator
>> password is not working? I double checked the password during installation
>> to be sure it is correct. I even reinstalled the system and the same
>> problem occurs. This is unacceptable. First the Cd iso"s did not work and
>> now this. What is going on?

[toc] | [prev] | [next] | [standalone]

#182764

[Multipart message — attachments visible in raw view] — view raw

On Tue, Jun 27, 2017 at 05:41:57PM -0400, Fungi4All wrote:
> Is this all it takes to hack the root account of a secure debian system?

Correct, if you're on the same architecture you can actually chroot to
acquire the same effect by issuing commands.

It's not really hacking, you have access to the file system, therefore
you are able to change the data on the disk, such as passwords.

[toc] | [prev] | [next] | [standalone]

#182769

Am Dienstag, 27. Juni 2017, 18:16:16 CEST schrieb Sean Behan:
> On Tue, Jun 27, 2017 at 05:41:57PM -0400, Fungi4All wrote:
> > Is this all it takes to hack the root account of a secure debian system?
> 

Yes, if one get physical access, you have lost! That is the reason, all of my 
personal systems are encrypted. 
> Correct, if you're on the same architecture you can actually chroot to
> acquire the same effect by issuing commands.
> 

Or you can use nice attacker tools, like "Switchblade and Haksaw",  "Rubber 
Ducký", or the very new and famous "Bash Bunny". Everything is known since a 
long time and no secret.  
> It's not really hacking, you have access to the file system, therefore
> you are able to change the data on the disk, such as passwords.
Hmm, IMO it is hacking, because you make things, which it is not intended for.

Admins should know this.

Ah, and the "Cold boot attack" which was mentioned: Take care not to hand your 
system over, until it is shut down for some minutes! :)

Kind regards

Hans

[toc] | [prev] | [next] | [standalone]

#182766

Hello,

On Tue, Jun 27, 2017 at 05:41:57PM -0400, Fungi4All wrote:
> Is this [booting a live distribution] all it takes to hack the
> root account of a secure debian system?

If an attacker has physical access to your running hardware then you
have always lost. In some cases not even encryption will save you
from a motivated and resourceful attacker:

    https://en.wikipedia.org/wiki/Cold_boot_attack

This has been the same forever, on all Linux distributions, Windows
and pretty much any other operating system.

Cheers,
Andy

-- 
https://bitfolk.com/ -- No-nonsense VPS hosting

[toc] | [prev] | [next] | [standalone]

#182771

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Tue, Jun 27, 2017 at 05:41:57PM -0400, Fungi4All wrote:
> Highly deserving a top post
> Is this all it takes to hack the root account of a secure debian system?

This is standard operating procedure if you forget your root
password, yes.

- -- t
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iEYEARECAAYFAllTW6IACgkQBcgs9XrR2ka0UgCfe9Ypvjao0UCI2v+q8n/NmkMs
3SwAn1lKgrRI4miAkMoM9+xfSM4FMUmV
=vTAl
-----END PGP SIGNATURE-----

[toc] | [prev] | [next] | [standalone]

#182779

On Tue, 27 Jun 2017 19:04:07 +0200, Hans <hans.ullrich@loop.de> wrote:
> The other option is, to search for a boot disk called "Kon-Boot". Booting
> from this letts you in EVERY system (Windows, linux etc.) without password.

Not every. Windows and MAC only.

[toc] | [prev] | [next] | [standalone]

#182780

> Not every. Windows and MAC only.

And linux, as far as I know.

[toc] | [prev] | [next] | [standalone]

#182781

On Wed, 28 Jun 2017 12:21:05 +0200, Hans <hans.ullrich@loop.de> wrote:
> > Not every. Windows and MAC only.  
> 
> And linux, as far as I know.
> 

http://thelead82.com/
http://piotrbania.com/all/kon-boot/

[toc] | [prev] | [next] | [standalone]

#182782

This is the official blog.
> http://thelead82.com/
> http://piotrbania.com/all/kon-boot/

There is an older kon-boot, see here:

http://www.supportnet.de/faqsthread/2376869

I translate this for the list.

German:
.....
Bei Linux mit einem Root können Sie nur einen bestimmten User ansteuern. 
Sollte der Bootvorgang von Linux mit einem Grafikinterface gestartet werden, 
können Sie per ALT + F2 ein weiteres Fenster der Konsole öffnen. Dort können 
Sie dann mit dem entsprechenden User "Kon-USR" ohne ein zusätzliches Passwort 
einwählen. 

Anschließend befinden Sie sich dann automatisch als Root in Ihrem Linux 
Betriebssystem.
...


English:
On linux with a rootyou can only control a decent user.
If the boot process of linux should be started with a graphical interface, you 
can open a further console via ALT + F2. Here you can login to the decent user 
"Kon-USR" without an additional password.

After that  you are automatically logged in as "root" in your linux operating 
system.

This is Kon-Boot 1.0, ok, but I guess, Kon-Boot-2.1 should be able the same. 
Otherwise, just get Kon-Boot-1.0.

Best 

Hans

[toc] | [prev] | [next] | [standalone]

#182783

On Wed, 28 Jun 2017 13:04:29 +0200, Hans <hans.ullrich@loop.de> wrote:
> This is the official blog.
> > http://thelead82.com/
> > http://piotrbania.com/all/kon-boot/  
> 
> There is an older kon-boot, see here:
> 
> http://www.supportnet.de/faqsthread/2376869
> 
> ...
>
> This is Kon-Boot 1.0...

Ok. But where can you find it?

[toc] | [prev] | [next] | [standalone]

#182784

> Ok. But where can you find it?

You can't! It is no more available, as it is no more free. It was free, but 
now it isn't any more. But I give you a clue:

Search for "Hiren's Boot CD 15.1" (an old rescue system), it is part of it. 
You can boot kon-boot 1.0 with this cd. Maybe "Falcon 4" (an improved version 
of Hirens CD has got it, too.

Don't tell anyone... :)

Best

Hans

[toc] | [prev] | [next] | [standalone]

#182802

sarez45@att.net wrote:

> The administrator password is not working in Debian 9 cinnamon. How can we
> use synaptic package manager or update the system if the administrator
> password is not working? I double checked the password during installation
> to be sure it is correct. I even reinstalled the system and the same
> problem occurs. This is unacceptable. First the Cd iso's did not work and
> now this. What is going on?

keyboard layout and special characters or mapping of chars ??

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.user

csiph-web