EAM Password reset procedure

Contents

Introduction

This reset procedure can be useful if the root password has been forgotten. If this procedure is not able to reset the password on your unit, then the unit must be returned to Güralp Systems for re-building. Please contact for details and to arrange an RMA Return Material Authorisation. An RMA is permission to return goods for any reason. Our Goods-In team may refuse to accept any item received without an RMA number clearly marked on the outer packaging so, please, always ensure that you have an RMA before despatching anything to us. For more details, please see our Warranty and Repairs policy.

This procedure applies to EAMs (both Peli™-cased and cylindrical), DM24SnEAMs, Peli™-cased DAS units and nTDE instruments.

Preparation

Equipment required:

Physical access to the unit will be required.

Booting

  1. Connect the console cable to the EAM and to the laptop/PC.

  2. Open the terminal emulator on the laptop/PC and set it to 38400 baud, 8N1.

  3. Apply power to the EAM.

  4. Almost immediately, there should be some output. Approximately two screens (2×25 lines) of output will be displayed.

  5. There will be a series of yes or no questions. Answer no (by keying n to each question (without keying enter). Very old boot-loaders have some minor differences, but the questions should be as below. If any question is accidentally answered yes, it is safe to simply remove and re-apply power, starting the process again.

    Boot-up procedure questions:

    Attempt rsync update ? (y/N) n Boot main via kexec ? (Y/n) n Boot main via switch_root ? (y/N) n Mount successful but no boot options available Attempt scripted NAND device reinstall ? (y/N) n

    At this point, you are now at a shell prompt:

    / #

    and can continue the process as below.

Changing the root password

It is not generally possible to recover the root password, but it can be reset to a known one and then, after logging in normally, changed again to something secure. Start by checking the version of firmware installed:

/ # cat /mnt/etc/build.version # Overall build version BUILD_LABEL="platinum-stable" BUILD_VERSION="10071"

Look at the number in BUILD_VERSION to determine which procedure to follow.

Builds ≥ 11139

Copy and paste these two commands. They must be exact:

sed -i /mnt/etc/shadow -e '/^root:/s/.*/root:$1$lJerdeXb$pNDmzGchfA5mNrA1u.60m1:14666:0:99999:7:::/' sync

After power cycling, it will then be possible to use the user-name root and the password for either ssh or logging in via the serial port. However it will not be possible to use this for the web interface; you must log in using one of these two methods and then invoke the passwd command to change the password to something stronger. Only then will the new password work on the web interface.

Do not connect the unit to the Internet without first changing the root password to something stronger. Strong passwords are essential for Internet-connected systems.

Builds ≥ 10000 but < 11139

Copy and paste these three commands. They must be exact:

sed -i /mnt/etc/shadow -e '/^root:/s/.*/root:$1$lJerdeXb$pNDmzGchfA5mNrA1u.60m1:14666:0:99999:7:::/' sed -i /mnt/etc/shadow_http -e '/^root:/s/.*/root:a5f39cb2039fd48d39ad69e0be49717a:15202:0:99999:7:0:0:0/' sync

After power cycling, it will then be possible to use the user-name root and the password . A firmware upgrade is then recommended, after which the password should be changed to something stronger.

Do not connect the unit to the Internet without first changing the root password to something stronger. Strong passwords are essential for Internet-connected systems.

Builds < 10000

Copy and paste these two commands. They must be exact:

sed -i /mnt/etc/passwd -e 's,^root:.*$,root:iWuSGrtezXz0E:0:0:root:/root:/bin/bash,' sync

After power cycling, it will then be possible to use the user-name root and the password for either ssh or logging in via the serial port. However it will not be possible to use this for the web interface; you must log in using one of these two methods and then invoke the passwd command to change the password to something stronger. Only then will the new password work on the web interface.

A firmware upgrade is strongly recommended for systems running builds < 10000.
Do not connect the unit to the Internet without first changing the root password to something stronger. Strong passwords are essential for Internet-connected systems.