Nokia Firewall Admin Password Recovery

[notoriousBG]

While playing with the IP560 I stumbled onto how you password recover in IPSO in case you forget the admin password or if some malicious individual were to change it – whatever.

When you see the loading boot manager text you need to get ready to send a break (any key works) just tap a key every few seconds until you get the BOOTMGR[1]> prompt.

Example:
Loading boot manager..
Boot manager loaded.
diskless platform
Entering autoboot mode.
Type any character to enter command mode.
BOOTMGR[1]>

At the boot manager prompt type  “boot –s” to boot into single user mode.

Example:
“BOOTMGR[1]>boot –s” <press enter>

You will the resulting text from the boot process and then it will stop to prompt you for the location for the shell.

Example:
Enter pathname of shell or RETURN for sh:

Type “/bin/sh” <press enter>

Now you are at the prompt with admin privileges.

#/etc/overpw is the command that you need to type to change the password and recover the box.

Example
# /etc/overpw
    This program is used to set a temporary admin password when you have
    lost the configured password.  You must have booted the machine into
    single user mode to run it.  The configured password will be changed.
    Please change the temporary password as soon as you log on to your
    system through voyager.

Please enter password for user admin: <enter password and press enter>
Please re-enter password for confirmation:  <confirm password and press enter>
Continue? [n] y

IPSO may run fsck befor the write operation:

Running fsck...
/dev/rwd0f: clean, 222266 free (626 frags, 27705 blocks, 0.2% fragmentation)
/dev/rwd0a: clean, 31443 free (19 frags, 3928 blocks, 0.1% fragmentation)
/dev/rwd0h: clean, 550497 free (185 frags, 68789 blocks, 0.0% fragmentation)

Then you are presented with the following dialogue which confirms that the password has been changed and you are warned to change it from Voyager to your production password ASAP!

       Admin password changed.  You may enter ^D to continue booting. 
       THIS IS A TEMPORARY PASSWORD CHANGE.
 PLEASE USE VOYAGER TO CREATE A PERMENANT PASSWORD FOR THE USER ADMIN.

Press ^D (Ctrl-D) to change init to multi user mode and that’s it!