Getting locked out of your Linux or Windows system is a frustrating experience. These days, not being able to log in to your system might be worse than getting locked out of your car; at least with a car you can get a ride home or contact a locksmith to get back in. However, if you’re locked out of your Linux system, you’re really not going to find a competent ready-made service to come to your rescue.But never fear: The open source community offers some powerful tools for helping you reset passwords.
For instance, the GRUB and LILO boot managers offer some recovery options. If you need something more versatile, the SystemRescueCd disk project provides a number of tools for resetting passwords and recovering your system. SystemRescueCd doesn’t just reset passwords in your Ubuntu, Red Hat, or Linux Mint system: It can also help you recover access to your Windows computer.GRUB’s System Recovery ModeSometimes you don’t need a specialized tool like SystemRescueCd to get back on your system. The traditional Unix/Linux single-user mode might be all you need. If your system uses the GRUB bootloader, you can enter Linux single mode through GRUB’s Recovery Mode and boot menu options. (An equivalent process is also available for the LILO bootloader; see the box titled “Using LILO.”).
Mtdvd - Rescue Und Troubleshooting 1
Recovery Mode is available to you no matter what Linux flavor you are using (e.g., Ubuntu 12.04 “Precise Pangolin,” Red Hat Enterprise Linux 6, Fedora 16, or Linux Mint 12).When using GRUB to enter Linux single-user mode, first, make sure you have removed any and all external drives or connections. More than once, I’ve confused the issue by trying to mount external USB drives and other devices when I was working to recover my primary hard disk.When you’re sure you’ve stripped things down to the bare bones, boot your system so the GRUB menu is showing and choose the kernel into which you want to boot. Usually, you will boot into the first kernel listed on the menu, but you can make sure you’re booting into the latest version by reading the numbers – the higher the number, the more current. You can choose the kernel by simply hitting the Up or Down arrow key.Once you’ve selected the kernel version, press the e key to edit the entry.
In the simple text editor, choose the line starting with the word kernel (usually the second line on your screen). After selecting the kernel line, press the e key to edit the kernel entry. Append the following to the end of the kernel line: SYes, just use the letter S, without quotes. You can also use the word Single without quotes.When you press Enter, you will exit the editor and be placed back at the GRUB menu. The menu will now have the modified kernel line (e.g., the line with the capital S at the end).To boot into Linux single-user mode, press the b key. You’ll know you’ve entered Linux single-user mode once you see a simple root prompt, denoted by the hash mark ( #).
You won’t see any other information on the prompt as you normally would (e.g., the username, system name, or current directory). Usually, you can simply reset the password using the passwd command at this point (see the “Warning: Don’t Misuse This Information” box). However, depending on how your system is configured, you might need to mount some partitions: /proc/, /var/, or the root directory itself ( /): # mount -t proc proc /proc# mount -o remount,rw /Once you’re at the prompt, enter passwdand press Enter. You will be prompted to enter a new password, so go ahead and do so and press Enter to confirm your choice. Next, you can reboot the system with the reboot command, log in to the root account, and change any other passwords as necessary.Rescuing with SystemRescueCdSystemRescueCd is a Live Linux distribution similar to Knoppix.
The distribution is designed for system troubleshooting, which means it lets you:. change user passwords in Linux or Windows systems, including the passwords for the root and Administrator accounts;. check the integrity of existing partitions;. create new partitions or format existing partitions using the parted tool or the graphical equivalent, GParted (Figure 1); and. recover files from unbootable Linux or Windows systems.
I should add that SystemRescueCd uses the Zsh command shell by default, which could be confusing for users who are accustomed to the Bash shell. Every once in a while when using SystemRescueCd, I get a funky error message that tells me I am using the wrong shell.If you are not familiar with Zsh and would prefer to work in Bash, you can easily change the shell from Zsh to Bash by entering the following export command: export SHELL=/bin/bashOnce you’ve downloaded the image from the project website, you can use any appropriate tool to burn the image to a CD or a Flash drive. See the “Using UNetbootin” sidebar for more on burning the image to a USB stick.
Figure 2: Using UNetbootin to create a SystemRescueCd USB boot disk.Resetting PasswordsSometimes your system is damaged in a way that won’t let you reset the password using Linux single-user mode. To reset a Linux-based password in SystemRescueCd, start by booting to the SystemRescueCd Live system.To find out which disk partition contains the /etc directory, use fdisk. The /etc partition is usually on the root ( /) drive. See the command and output in Listing 1.Listing 1: Listing Partitions with fdisk 01 #fdisk -lDevice Boot Start End Blocks Id System/dev/sda1 63 11 de Dell Utility/dev/sda2 17 7 HPFS/NTFS/exFAT/dev/sda3. 431372 7 HPFS/NTFS/exFAT/dev/sda4 16586807+ 5 Extended/dev/sda5 16582893+ 83 Linux/dev/sda6 2315851 82 Linux swap / SolarisIn Listing 1, the /dev/sda5 directory is the main partition, as revealed by its size and partition type, so you will need to mount this partition. To do so, first create a directory that will act as a mountpoint: mkdir /mnt/bootdirNow, mount the Linux partition to your SystemRescueCd partition: mount /dev/sda5 /mnt/bootdirThe chroot command lets you access it easily: chroot /mnt/systemNow, you can reset your password using the passwd command, passwd where newpassword is the new password you want to use. The umount command unmounts the partition, after which you can reboot.
Once you log back in to your troubled Linux system, you’ll be able to use the root account with the new password you’ve specified.Mounting DisksOnce you have accessed the system with SystemRescueCd, you don’t have to go stampeding to the passwd command and then rush out again. If necessary, you can mount drives and edit key files. In fact, once you enter Linux single-user mode, you can edit and browse through directories or make changes to critical text files.For example, instead of using the passwd command, you could edit the /etc/shadow file directly and remove the password information.
To do this, mount the partition that contains the /etc directory – this is usually the root partition – and enter the command: # mount -rw / /mnt/partitionIf necessary, create the /mnt/partition directory. Once you’ve mounted the / partition, simply use vi, Emacs, or another text editor to access the /etc/shadow file and edit the file so that the user account of your choice (e.g., the root account) no longer contains the hashed password information. Then, unmount this partition, reboot, and access your Linux system in a standard session.
At this point, you’ll be able to log in to the account without specifying a password.Resetting GRUB Boot Password ProtectionBut, you ask, what if you have password-protected GRUB and have forgotten that password? Isn’t it impossible to get past this password to enter single-user mode? With SystemRescueCd, you can mount the /boot partition, or the root ( /) partition, as discussed above.To begin, switch to the /boot/grub/ directory and copy the unedited file to the same directory under a new name: cp /boot/grub/menu.lst /boot/grub/menu.lstbakThis is an important step, just in case you edit the file incorrectly. In a text editor, edit the /boot/grub/menu.lst file and look for the following line: password -md5 $1$gLhU0/$aW78kHK1QfV3P2b2znUoe/Now, comment out the password entry and save your changes. Then, unmount the directory and reboot your system. Once you’ve taken these steps, you’ll be able to bypass the GRUB password.Resetting Passwords on a Windows SystemYou can use the tools on your disk to boot into a Windows partition as well.
Suppose you want to boot into Windows and change the password for a user account.To begin, boot into SystemRescueCd and using fdisk to list existing partitions like this: fdisk -lNext, look for an NTFS partition that appears to be the Windows system partition. For example, you might see a line that reads: /dev/sda3 (NTFS)Once you have found the correct NTFS drive (I’ll assume it is /dev/sda3), use the ntfs command: ntfs -3g /dev/sda3 /mnt/windows -o forceThis command mounts the NTFS drive on /dev/sda3 onto your local /mnt/windows/ drive. If this drive isn’t available, create it as follows: mkdir /mnt/windowsOnce you’ve mounted the NTFS drive onto the /mnt/windows/ drive, change to it: cd /mnt/windows/Windows/System32/configNow, you are ready to use the chntpw command to list the Windows accounts in the SAM database: chntpw -l SAMThe result of the preceding command will be a list of user account names.Next, you can select the account name that requires a password reset. In this case, I’ll assume you want to change the account of a user named James Stanger: chntpw -u 'James Stanger'Once you issue the above command, you will see a menu of various options. To reset the password, press 1 and Enter. You will be asked to confirm that you want to reset this account, so press the y key and Enter.
The account is now reset.To reboot, enter the reboot command and press Enter. You’ll find you can get into your account (e.g., James Stanger) without entering a password.SystemRescueCd makes it pretty easy. The preceding steps will simply change the password. If you want to get full read-write access to a Windows disk, you can enter the command ntfs-3g /dev/sda1 /mnt/windowsand then you’ll be able to mount the disk and copy or even write files to it. I would recommend, however, simply copying files from your Windows system; writing to another filesystem is always fairly risky, especially one that isn’t based on Linux. Once you have mounted your Windows drive, you can then simply navigate through it using the cd command as you would a Linux system – more or less.ConclusionNow you know how to give your system passwords the boot.
Although you might be able to reset your passwords in Linux single-user mode, accessed through the GRUB (or LILO) bootloader, SystemRescueCd offers another, more versatile alternative.