change root password

[caieng]

Somehow, I managed to disrupt the normal installation process.  After the installation of Grub, the screen remained unchanged, without instruction, for a long time (older computer PIII 1.1GHz), so I incorrectly thought, ok, I guess I am supposed to reboot.....

So, I did, and of course the installation was thus corrupted.  But, it was not completely unusable, on rebooting, a login screen appeared, and I recalled, from the first screen the name and password for root, and so logged in, then accessed the elegant configuration panel (Drake), created a user, and established automatic login, as usual.

Now, however, I don't know how to change the root password.

Any suggestions, or, do you prefer that I simply start over, from the beginning, again, and try to avoid rushing about this time, by waiting more patiently for a user prompt? It may be helpful, in the future, to prevent this user error, to include a single line of text, informing the user that it will be necessary to wait a few minutes....

Thanks for your suggestions.

CAI ENG

[Neal ManBear]

On older machines, the installation process can seem slow. The last part can be so slow that it seems to hang. It isn't hanging, though. You need to let this process complete, so that the first boot process runs as it should.

Reinstall. That is the best way to insure that there are no hidden errors in the install.

[daniel]

Now, however, I don't know how to change the root password.

Terminal open and type

Code: [Select]

su <ENTER>
actually password for root <ENTER>

Code: [Select]

passwdfollowing the instructions

Good Luck
Daniel

ps: Better way had Neal wrote

[lucid_dream]

Doesn’t it seem odd that you need the root password to run so much stuff. Yet, pretty much any user can easily change the root password

[Old-Polack]

Doesn’t it seem odd that you need the root password to run so much stuff. Yet, pretty much any user can easily change the root password

Only if they already have the present root password. It is root that changes the root password.

[lucid_dream]

Only if they already have the present root password. It is root that changes the root password.

Actually if i recall correctly you can boot off a live cd , mount the root partition and edit the /etc/shadow file.  This process works for MS products as well but i forget the file name that stores the passwords.

it has been many years since taking security classes so i suppose it is possible that this method is no longer valid.

[Neal ManBear]

Only if they already have the present root password. It is root that changes the root password.

Actually if i recall correctly you can boot off a live cd , mount the root partition and edit the /etc/shadow file.  This process works for MS products as well but i forget the file name that stores the passwords.

it has been many years since taking security classes so i suppose it is possible that this method is no longer valid.

Actually, you must be root to change the root password, as has been said already. And yes, if you allow physical access to your computer, you make yourself vulnerable to having someone change root's password via a liveCD. If they know how.

To be secure, think secure. Never allow unsupervised access to your computer. Never allow anyone to watch while you enter a password - root or user.

As most MS users run as admin anyway, it is less secure. All anyone has to do is boot the machine.

Comparing MS to Linux is like comparing apples and oranges. They just are not the same.

 

[lucid_dream]

I agree with you Neal, the only comparison I was making is that they both have a file that can be altered for someone to gain access without the password.

I am trying to refresh my memory without being at my Linux box ...... correct me if i am wrong ...While training on a different distro I seem to recall using the command sudo su

[Neal ManBear]

I agree with you Neal, the only comparison I was making is that they both have a file that can be altered for someone to gain access without the password.

I am trying to refresh my memory without being at my Linux box ...... correct me if i am wrong ...While training on a different distro I seem to recall using the command sudo su

PCLinuxOS uses su and/or su - by default; sudo is not set up, unless a user sets it up. This not recommended. Full sudo access / set up is insecure.

[Old-Polack]

I agree with you Neal, the only comparison I was making is that they both have a file that can be altered for someone to gain access without the password.

I am trying to refresh my memory without being at my Linux box ...... correct me if i am wrong ...While training on a different distro I seem to recall using the command sudo su

Which only requires the users own password, as no root password is known. We don't use sudo, by default, because of this insecurity.

[daniel]

huch a little question, and a big discussion is started 

[Neal ManBear]

huch a little question, and a big discussion is started 

  A bit of a highjack, isn't it?

[lucid_dream]

Just trying to test my knowledge a bit  Didn't mean any harm

[caieng]

A bit of a highjack, isn't it?

In my humble opinion, NO.  I thought this thread was very instructive.  THANK YOU.

Just trying to test my knowledge a bit   Didn't mean any harm

No harm delivered, and none received, either.

Please remember, this is a forum.  Folks are supposed to argue, and disagree.  I get the feeling that this forum is TOO tame, too concerned about hurting someone's feelings.

Relax.
Don't be so nervous. 

Yeah, I goofed.  The install screw up was entirely my fault.   I did follow Neal's recommendation:

I reinstalled the December 2010 PCLinuxOS LXDE, and it is fantastic, in my opinion.

I admit to being especially fond of the Drake tool that permits autologin, and especially, adjustment of the screen resolution.
If this forum were not so fussy, about discussing other distros, I would show my results testing PCLinuxOS.  However, I understand that some object to this sort of objective assessment, so, I will make no further mention of it.

I would again reiterate that a simple, single line of text, during the installation, at the point where at present the screen is blank, would reassure both the novice and those as ignorant as I am, that one must wait, until the next step in the process is signalled.

The installer is not defective in my opinion, simply a bit terse, for my taste.  I do have one other comment on the installer:  I prefer those distros which offer the user an opportunity to choose autologin from the getgo, i.e. from the outset, rather than requiring the user to login at least once, find the configuration tool, (which is superb), and enable autologin.  I am simply writing my opinon that this is an unnecessary step, a slightly awkward requirement, which could be eliminated, without harm, and, without any breach of security....

Thanks again to so many who offered an interesting discussion re: passwords. 

CAI ENG