forgot root user ????

**For everybody who does not speak Spanish and who did not get the details through some translation machine:
**
The OP’s problem:
The OP is not able any more to log into the graphical user interface KDE4 on openSUSE 11.1.
The system is running virtualized on VMware.
The OP states that he did not alter any value and did not any upgrade prior to the last shutdown. He also made clear that he never logged into the GUI as root.
When trying to boot the machine, the system arrives up to runlevel 5 where it asks the username (given by the OP) and the password (also known to the OP). The system then logs in correctly to the OP as user but does not start the X-session with “start-X”. The OP did not refer any error message when this happens.
Instead, when then trying to login as root (from the promt, not from his username) after giving “root” as user to login, the system states “incorrect user name”. The OP states that he knows the correct root password, but that it seems that “root”-user “vanished”.

What the OP desires as solution:
he want to login again to the running KDE4 and fix the problem of root access.
If the system is not reparable, he wants to safe the system and states he has valuable data to backup in:
/home
/opt
/etc

If you wish to give any input, I can translate it into a (so I think) well understandable Spanish.

stakanov wrote:

> If you wish to give any input

BACKUP first!

then slow down…it may not be necessary to reinstall…well, as far
as i can see the need to reinstall has not yet been proven (to me).

use a live cd and backup now…best to put the “valuable data” onto a
different machine, tape, optical media, removable hard drive, etc…

THEN fiddle with what is wrong with the system…

wait: is all of this in a virtual machine? is the data in a VM also?
what is the host OS?

and, what was the outcome of trying Malcolm’s sudo -i ???


DenverD (Linux Counter 282315)
CAVEAT: http://is.gd/bpoMD
posted via NNTP w/TBird 2.0.0.23 | KDE 3.5.7 | openSUSE 10.3
2.6.22.19-0.4-default SMP i686
AMD Athlon 1 GB RAM | GeForce FX 5500 | ASRock K8Upgrade-760GX |
CMedia 9761 AC’97 Audio

I share your view.
The outcome of Malcoms command is not yet know, I would think he lives in Spain. Me I am living in Europe too, so I posted around 5 am because I couldn’t sleep (yeap, happens). So, when he will be back online he will do I guess. On what is backup, he stated that he will simply duplicate the VM so he “can work without hassel”.
He hasn’t stated host OS now. I will ask him. For what I have understood the data he wants to recover is all on the virtual disk.

So recapitulating:
Let’s ask for type of VM, host system caracteristics. Backup he already stated. Anything else? Thanks for helping.

stakanov wrote:
> Anything else?

wait for response…if his host is from Redmond we may never hear from
him again (as it BSODs and dumps his VM and valuable data into the
sewer)


DenverD (Linux Counter 282315)
CAVEAT: http://is.gd/bpoMD
posted via NNTP w/TBird 2.0.0.23 | KDE 3.5.7 | openSUSE 10.3
2.6.22.19-0.4-default SMP i686
AMD Athlon 1 GB RAM | GeForce FX 5500 | ASRock K8Upgrade-760GX |
CMedia 9761 AC’97 Audio

LOL, bad boy, I do not hope so

@Pixie72:
Pensamos que se puede eventualmente evitar la re-instalación. Todos modos haces un backup. Entonces, cuando has hecho, nos serviría la información siguiente:
Productor y versión de el sistema “host” de tu VM.
Si hemos comprendido bien todos los datos que te sirven están en el mismo disco virtualizado en /home /opt /etc.
Cual es el resultado de

sudo -i

Hi, thanks for your help.
I tried sudo -i commmand and i get the message:
“sudo: must be setuid root”
I dont know what that means but i get that :confused:

Hello Stakanov.
Lol… i live in south america, and i can sleep :slight_smile:
Really thanks for all of your help on this thread.

I tried sudo -i commmand and i get the message: “sudo: must be setuid root”
VMWare runs on a Windows XP64.
And yes… I have data on /etc /home and /opt , ( mysql databases and apache tomcat apps are most important things )

pixie72 wrote:
> Hi, thanks for your help.
> I tried sudo -i commmand and i get the message:
> “sudo: must be setuid root”
> I dont know what that means but i get that :confused:

sounds like you might need to read about setuid…but, i’m not
sure…this is beyond my knowledge of linux…i can’t help more…

is AB around?? (or any of the ‘real gurus’?)


DenverD (Linux Counter 282315)
CAVEAT: http://is.gd/bpoMD
posted via NNTP w/TBird 2.0.0.23 | KDE 3.5.7 | openSUSE 10.3
2.6.22.19-0.4-default SMP i686
AMD Athlon 1 GB RAM | GeForce FX 5500 | ASRock K8Upgrade-760GX |
CMedia 9761 AC’97 Audio

Can you post the output of:

ls -l /usr/bin/sudo

por favor? :wink:

It seems that you have a (fixable) permission problem. Did you install by any chance a software prior to the last shutdown?

Boot this system from a live cd, then mount the root partition in /mnt and post contents of /mnt/etc/passwd .
Let’s think, could we get this alive by chrooting to the installed system, mounting /proc and /sys, and run ‘passwd root’ ?

loool!
well i go…

mh@susevirtualPV:~> su -l
Contraseña:
su: no se puede establecer el grupo: Operación no permitida
mh@susevirtualPV:~> ls -l /usr/bin/sudo
-rwxrwxrwx 1 root root 152716 dic 3 2008 /usr/bin/sudo
mh@susevirtualPV:~>

I didnt install anything, and the other people of here says “i didn´t touch !!!” ( no les creo nada igual :stuck_out_tongue: )

He leido que por otros systemas de linux, cuando se presenta el problema como el tuio la solution seria:
Hacer partir el sistema con un disco “life” (preferiblemente 11.1 ya que tienes este sistema instalado.
Pues:

chown root:root /usr/bin/sudo
chmod 4755 /usr/bin/sudo

Despues reaviar el sistema con

shutdown -r now

Todavia espera que voi a preguntar los otros aqui.

The first command lines (chown and chmod) seem correct for you guys? Or is openSuse “4111”? You tell me.

Hi
That to me would indicate someone has been playing with the chmod
command as root user…

Like Knurpht says, boot from a live cd and use chroot to fix. Then have
a look at the logs to see who was using root and also run the command
history.


Cheers Malcolm °¿° (Linux Counter #276890)
SUSE Linux Enterprise Desktop 11 (x86_64) Kernel 2.6.27.45-0.1-default
up 1 day 14:57, 3 users, load average: 0.56, 0.29, 0.27
GPU GeForce 8600 GTS Silent - CUDA Driver Version: 195.36.15

Hi
I would also check some random files with ls -l and check
permissions if they are 777 then there are definitely issues.

If you do a backup of the files and the permissions are incorrect it
won’t help your situation, you will need to identify the files you
need, check/fix permissions, then backup.


Cheers Malcolm °¿° (Linux Counter #276890)
SUSE Linux Enterprise Desktop 11 (x86_64) Kernel 2.6.27.45-0.1-default
up 1 day 15:19, 3 users, load average: 0.30, 0.29, 0.28
GPU GeForce 8600 GTS Silent - CUDA Driver Version: 195.36.15

since no one touched the file system it is an absolute need to find
and remove the root kit which damaged this system…

MUST boot from a Live CD and find/remove the crack…

or, save off data, format install and CHECK data for security before
moving it back into the system…

for the next install pick a SECURE root password and do not share it
with anyone for any reason…

by secure password i mean some ten or so random picked from here:
https://www.grc.com/passwords


DenverD (Linux Counter 282315)
CAVEAT: http://is.gd/bpoMD
posted via NNTP w/TBird 2.0.0.23 | KDE 3.5.7 | openSUSE 10.3
2.6.22.19-0.4-default SMP i686
AMD Athlon 1 GB RAM | GeForce FX 5500 | ASRock K8Upgrade-760GX |
CMedia 9761 AC’97 Audio

hi malcom…
yes… as you said.
All content in /etc directory is 777 !!! /bin too :S
Definitely … someone has playing here with chmod !!!
Most directories have this situation i saw… except a few like /sys /dev

Hi
YUK!!! :frowning: If possible, can you get a replacement drive and do a
re-install? Then you can mount the corrupt drive and copy/fix the files
you need, you could also check the logs etc to see when it occurred


Cheers Malcolm °¿° (Linux Counter #276890)
SUSE Linux Enterprise Desktop 11 (x86_64) Kernel 2.6.27.45-0.1-default
up 1 day 15:53, 3 users, load average: 1.17, 1.37, 0.94
GPU GeForce 8600 GTS Silent - CUDA Driver Version: 195.36.15

ok, i will backup tomcat, mysql databases and reinstall suse
:frowning:
i dont believe !!!

Hi
Copy over /var/log/* so you can investigate? You need to lock down
access, suggest you read up on sudo and define the commands users can
run.


Cheers Malcolm °¿° (Linux Counter #276890)
SUSE Linux Enterprise Desktop 11 (x86_64) Kernel 2.6.27.45-0.1-default
up 1 day 16:51, 3 users, load average: 0.90, 0.75, 0.52
GPU GeForce 8600 GTS Silent - CUDA Driver Version: 195.36.15