[comp.sys.dec.micro] P/OS security?

Azog-Thoth@cup.portal.com (William Thomas Daugustine) (04/15/91)

Today I was able to remove the hard drive from a Pro 350 before it 
went to the scrap heap. When I got it home, and put it in my 350, 
it booted right up into P/OS 3.1. Some kind soul defined a default
accout on it, so I am able to get into the menu. Unfortunatly, the
default account is _not_ the system account, and I am wondering if
anyone knows of any way to finf out how I can get into the system
account? I tried 'system', and password 'system', but that of course,
didnt work. 

I am able to do just about anything I want with it, execpt for 
account maintaince. I am able to access DCL, but when I do a
$ DIR DW2:[*] because I am not the system, I get lots off access
errors. 

Thanx

Billy D'Augustine
Azog-Thoth@cup.portal.com

slsw2@cc.usu.edu (04/17/91)

In article <41275@cup.portal.com>, Azog-Thoth@cup.portal.com (William Thomas Daugustine) writes:
> Today I was able to remove the hard drive from a Pro 350 before it 
> went to the scrap heap. When I got it home, and put it in my 350, 
> it booted right up into P/OS 3.1. Some kind soul defined a default
> accout on it, so I am able to get into the menu. Unfortunatly, the
> default account is _not_ the system account, and I am wondering if
> anyone knows of any way to finf out how I can get into the system
> account? I tried 'system', and password 'system', but that of course,
> didnt work. 

Well, I've never really dealt with P/OS, but a long, long time ago I was
involved with a group that had a similar problem with a PDP-11/60 that we
bought from another group at the site. It ran RSX-11M, but we didn't get
any passwords from the group from which we bought the machine. After a lot
of poking about in manuals, I found a way to get to the password file, which
in that version of RSX-11M was not encrypted.

While the machine was booting, executing the startup command file, I pressed
^C. That gave me an MCR prompt at which I could type a command. Since the
machine was executing the startup command file, the MCR prompt was attached to
the system account. In an obscure manual that I no longer have and don't
remember very well, I found the name of the password file. The MCR command
that I issued, then, typed the password file on the console.

Since P/OS is related to RSX-11M, it might work. Wish I could remember the
name of the account file, though...

Roger Ivie
slsw2@cc.usu.edu

kalisiak@acsu.buffalo.edu (christophe m kalisiak) (04/18/91)

In article <1991Apr16.134937.47433@cc.usu.edu> slsw2@cc.usu.edu writes:
>In article <41275@cup.portal.com>, Azog-Thoth@cup.portal.com (William Thomas Daugustine) writes:
>While the machine was booting, executing the startup command file, I pressed
>^C. That gave me an MCR prompt at which I could type a command. Since the
>machine was executing the startup command file, the MCR prompt was attached to
>the system account. In an obscure manual that I no longer have and don't
>remember very well, I found the name of the password file. The MCR command
>that I issued, then, typed the password file on the console.

What was the command? I would say that if one were to delete the 
password file, then you could probably start from scratch...
Don't quote me on it.

>Since P/OS is related to RSX-11M, it might work. Wish I could remember the
>name of the account file, though...

[0,0]RSX11.SYS


Chris Kalisiak
V076N3W7@ubvms.cc.buffalo.edu
kalisiak@acsu.buffalo.edu

slsw2@cc.usu.edu (04/22/91)

In article <71506@eerie.acsu.Buffalo.EDU>, kalisiak@acsu.buffalo.edu (christophe m kalisiak) writes:
> In article <1991Apr16.134937.47433@cc.usu.edu> slsw2@cc.usu.edu writes:
>>In article <41275@cup.portal.com>, Azog-Thoth@cup.portal.com (William Thomas Daugustine) writes:
>>While the machine was booting, executing the startup command file, I pressed
>>^C. That gave me an MCR prompt at which I could type a command. Since the
>>machine was executing the startup command file, the MCR prompt was attached to
>>the system account. In an obscure manual that I no longer have and don't
>>remember very well, I found the name of the password file. The MCR command
>>that I issued, then, typed the password file on the console.
> 
> What was the command? I would say that if one were to delete the 
> password file, then you could probably start from scratch...
> Don't quote me on it.

It was just PIP TO:=filename. Since the file was not encrypted, the passwords
showed up.

BTW, deleting the password file is probably not a good idea. If you do it on
VMS, you just plain can't get in unless you do a conversational bootstrap and
set the startup file to OPA0:...
> 
>>Since P/OS is related to RSX-11M, it might work. Wish I could remember the
>>name of the account file, though...
> 
> [0,0]RSX11.SYS

I dunno; sounds like the system image to me. I'd want to poke about the
documentation for a while before I deleted that one.

Roger Ivie
slsw2@cc.usu.edu

kalisiak@acsu.buffalo.edu (christophe m kalisiak) (04/25/91)

In article <1991Apr22.154959.47516@cc.usu.edu> slsw2@cc.usu.edu writes:
>In article <71506@eerie.acsu.Buffalo.EDU>, kalisiak@acsu.buffalo.edu (christophe m kalisiak) writes:
>> In article <1991Apr16.134937.47433@cc.usu.edu> slsw2@cc.usu.edu writes:
>>>In article <41275@cup.portal.com>, Azog-Thoth@cup.portal.com (William Thomas Daugustine) writes:
[...]
deleted
>It was just PIP TO:=filename. Since the file was not encrypted, the passwords
>showed up.

This only works on versions of RSX in which the password file is not 
encrypted. I think they started encription at V3.0 of 11M/PLUS. 

>BTW, deleting the password file is probably not a good idea. If you do it on
>VMS, you just plain can't get in unless you do a conversational bootstrap and
>set the startup file to OPA0:...

I have never really had to worry about system protections... If I had 
to do it I would just hit ^c while the STARTUP.CMD file was executing
then type ABO AT.T0 to kill the IND.

>>>Since P/OS is related to RSX-11M, it might work. Wish I could remember the
>>>name of the account file, though...
>> 
>> [0,0]RSX11.SYS
>
>I dunno; sounds like the system image to me. I'd want to poke about the
>documentation for a while before I deleted that one.

I know for a fact that RSX11.SYS is the password file. I don't know 
what you would do with it though.


Chris Kalisiak
kalisiak@acsu.buffalo.edu
V076N3W7@ubvms.cc.buffalo.edu