Page 1 of 2 12 LastLast
Results 1 to 10 of 12

Thread: locked out of server

  1. #1
    Join Date
    Nov 2015
    Beans
    5

    locked out of server

    I realise this may not be allowed but I have to ask.

    Our IT person was informed that they were to be made redundant.
    They didn't take this too well.
    Long story short is that they have locked everyone out and I have been tasked with getting control back.

    I need to get back into the server somehow and reset root/admin password (I think?) and take control back.
    I have access to the physical computer so can reboot into a safe mode or similar?
    I have a windows background,linux is not my forte and I have just over 12hrs to 'learn' how to do this.

    Thanks

  2. #2
    Join Date
    Nov 2009
    Location
    Catalunya, Spain
    Beans
    14,418
    Distro
    Ubuntu 18.04 Bionic Beaver

    Re: locked out of server

    I don't know if it's allowed too, but I guess it is since you have physical access to the machine.

    Something like this should help you: http://askubuntu.com/questions/24006...ative-password

    It has a quite detailed description... Even for a windows guy.

    PS. I now realised the instructions assume you know the username of the first user created. If you do not, after you do the remount step, try something like:
    Code:
    cat /etc/passwd
    That should list all users (including some system users) on the system. The first user created should have an id of 1000. Anyway, you should be able to check all usernames there...
    Last edited by darkod; November 26th, 2015 at 10:22 PM.
    Darko.
    -----------------------------------------------------------------------
    Ubuntu 18.04 LTS 64bit

  3. #3
    Join Date
    Nov 2015
    Beans
    5

    Re: locked out of server

    Thank you darkod

    I will give that a good read and I'll also make USB a bootable version.

  4. #4
    Join Date
    Nov 2015
    Beans
    5

    Re: locked out of server

    Is it possible to tell which users have admin/root rights?

  5. #5
    Join Date
    Sep 2006
    Beans
    8,627
    Distro
    Ubuntu 14.04 Trusty Tahr

    Re: locked out of server

    You can look at the contents of /etc/group to see who is in which group. Then you can look at /etc/sudoers to see which extra permissions have been added to various users or groups.

  6. #6
    Join Date
    May 2010
    Location
    uk
    Beans
    9,299
    Distro
    Xubuntu 14.04 Trusty Tahr

    Re: locked out of server

    Hi

    Quote Originally Posted by Sirport View Post
    I realise this may not be allowed but I have to ask.

    Our IT person was informed that they were to be made redundant.
    They didn't take this too well.
    Long story short is that they have locked everyone out and I have been tasked with getting control back.

    I need to get back into the server somehow and reset root/admin password (I think?) and take control back.
    I have access to the physical computer so can reboot into a safe mode or similar?
    I have a windows background,linux is not my forte and I have just over 12hrs to 'learn' how to do this.

    Thanks
    There are some good replies but the replies are making some assumptions such as the sudo binary is still there.

    Any good IT guy will know a whole bunch of ways to really make your life difficult and really lock everybody out.

    The good thing is that you have physical access and want to boot from a CD/USB but has the old admin added a BIOS password ? a grub password ? You really need to find out what the state of the system is ?

    Do you have full disc backups you can restore to ?

    What kind of server is this ? I take it, it's not exposed to the Internet ? If so it maybe have a backdoor.

    You want to consider this as if it does then all your hard work to fix it may be undone remotely. Does the motherboard have IPMI or vPro ?....

    Just some food for thought...

    Kind regards
    Last edited by matt_symes; November 27th, 2015 at 10:13 AM.
    If you believe everything you read, you better not read. ~ Japanese Proverb

    If you don't read the newspaper, you're uninformed. If you read the newspaper, you're mis-informed. - Mark Twain

    Thinking about becoming an Ubuntu Member?

  7. #7
    Join Date
    Sep 2006
    Beans
    8,627
    Distro
    Ubuntu 14.04 Trusty Tahr

    Re: locked out of server

    Quote Originally Posted by matt_symes View Post
    Any good IT guy will know a whole bunch of ways to really make your life difficult and really lock everybody out
    +1

    matt writes what was also in the back of my mind when I wrote the reply above. If you do find any back doors, I'd say do the reinstallation as soon as humanly possible. And even if you don't, I'd move the machine towards the top of the list for a re-installation because once someone malicious has had root access you kind of have to consider the machine done for.

  8. #8
    Join Date
    Nov 2015
    Beans
    5

    Re: locked out of server

    My thoughts also.
    Not sure how malicious they are going to be,it may just be a 'you need me' kind of a thing but who knows.

    I also need to transfer/copy some files from a usb HDD to the main HDD,usb hdd is plugged into the pc.
    Not familiar with putty and not totally sure of the file structure.

    If I run my bootable usb version can I access the server from home and do a simple copy/paste or drag/drop?
    Googling found midnight commander which looks like it could be just the ticket but it comes in various .tar.xxx formats and have no idea how to 'install' it haha

    Thanks

  9. #9
    Join Date
    Sep 2006
    Beans
    8,627
    Distro
    Ubuntu 14.04 Trusty Tahr

    Re: locked out of server

    midnight commander is in the repository as "mc"

  10. #10
    Join Date
    Nov 2009
    Location
    Catalunya, Spain
    Beans
    14,418
    Distro
    Ubuntu 18.04 Bionic Beaver

    Re: locked out of server

    In theory you should be able to copy files to it from live mode if you use the desktop live usb to boot into live mode.

    The server hdd will not be in /home. When you open the file manager (called Nautilus by the way), on the left side it will list all detected hdds. The server hdd should be there. With Nautilus you can work with a GUI to help you copy files easily.

    Note that you might need to copy as root to allow you to do it, but in such case the copied files on the destination might be owned by root and you will probably need to change their permissions depending on the setup so that other users can use them.

    Also, in some cases, like when using software raid mdadm on the server, live mode might not see the disk automatically unless you do other needed steps.

    So the first thing to do would be to boot the server in live mode and check if you can "see" the hdd. This assumes you want to use GUI to work.

    You could also use the recovery mode mentioned in that article I linked for the password reset. That will give you command line access to the server without using any desktop cd/usb.
    Darko.
    -----------------------------------------------------------------------
    Ubuntu 18.04 LTS 64bit

Page 1 of 2 12 LastLast

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •