{"id":2430,"date":"2016-05-30T05:54:31","date_gmt":"2016-05-29T20:54:31","guid":{"rendered":"http:\/\/www.catracing.org\/hendrb\/?p=2430"},"modified":"2016-05-30T05:54:31","modified_gmt":"2016-05-29T20:54:31","slug":"centos-7-resetting-lost-root-password","status":"publish","type":"post","link":"https:\/\/www.catracing.org\/hendrb\/centos-7-resetting-lost-root-password\/","title":{"rendered":"CentOS 7 – Resetting Lost Root Password"},"content":{"rendered":"

CentOS 7 – Resetting Lost Root Password\"Blog<\/a>
\n<\/span><\/h1>\n

You have just discovered that you have forgotten the root password of your CentOS 7 workstation or server.\u00a0 What are you going to do?<\/p>\n

 <\/p>\n

 <\/p>\n

If you have access to an account that is a member of the group ‘wheel’, you only need to login with that account and type the following at the shell prompt<\/p>\n

$sudo passwd root<\/span><\/p>\n

[sudo] password for (username) :<\/span> **********<\/span><\/p>\n

Changing password for user root.<\/span>
\nNew password:<\/span> (Enter New Password)<\/span>
\nRetype new password:<\/span> (Retype New Password)<\/span>
\nIf you entered and confirmed the password correctly, the shell will return the following, and return you to the shell prompt. For Example.<\/p>\n

passwd: all authentication tokens updated successfully.<\/span>
\n$<\/span><\/p>\n

Now we can try switching user to the root account with the new password.<\/p>\n

$<\/span> su \u2013<\/span><\/p>\n

NOTE: The switch user \u2018su\u2019 command defaults to the account root unless another account is specified. The \u2018-\u2018 option tells the switch user command to load the accounts environment variables.<\/p>\n

You then should be prompted with the password prompt, and if the change performed above was successful you should be logged in.<\/p>\n

$<\/span> su –<\/span>
\nPassword: *******<\/span><\/span>
\nLast login: Sun May 29 10:43:00 KST 2016 on tty1<\/span><\/p>\n

“Wish I had a decent book of quotes!”<\/span><\/p>\n

-Sysop<\/span><\/p>\n

#<\/span><\/p>\n

Notice the shell prompt is now a #, this indicates you are using the root account.<\/p>\n

So what if you do not have an account that is a member of the group \u2018wheels\u2019?
\nYou will need to boot your system into single user mode.<\/p>\n

Here is where it gets rather sticky, as you do not have access to the root account, you will be unable to gracefully shut your server down (unless there is an account that has been given access to the reboot, or shutdown command through the sudoers file), if you run applications on this server that have a database backend like MySQL or MariaBD there is a possibility that data corruption will occur! Proceed at your own risk.<\/span><\/p>\n

Physically reboot your Centos box.<\/p>\n

From the grub bootloader, enter \u2018e\u2019 for edit<\/p>\n

\"Grub\"<\/a><\/p>\n

 <\/p>\n

On the next screen use your cursor keys, and cursor down until you see an entry starting with \u2018linux16\u2019, we will be making the following changed on this line. NOTE using your cursor keys, move the cursor keys with your UP \/ DOWN cursor keys to the beginning of the block of text and use your left cursor key to position the cursor at the end of \u2018ro\u2019<\/p>\n

\"Section<\/a><\/p>\n

Change \u2018ro\u2019 to \u2018rw init=\/sysroot\/bin\/sh\u2019<\/p>\n

NOTE: DO NO COPY THE SINGLE QUOTES. (See screen shots!)<\/span><\/p>\n

The grub screen should now look like this. (NOTE: What looks like an underscore between init=\/sysroot\/bin\/sh and rd.lvm.kv\u2026. is actually your cursor. There should just be a space here.<\/p>\n

\"Section<\/a>
\nNow press \u2018Ctrl-x\u2019 to exit and boot into single user mode.<\/p>\n

Once you are in single user mode, issue the chroot command as follows.<\/p>\n

:\/#<\/span> chroot \/sysroot<\/span><\/p>\n

We can then issue the passwd command to change the root password.<\/p>\n

:\/#<\/span> passwd root<\/span><\/p>\n

Your screen will look like this.<\/p>\n

\"Single<\/a><\/p>\n

 <\/p>\n

Now update selinux<\/p>\n

:\/#<\/span> touch \/.autorelabel<\/span><\/p>\n

Now exit chroot<\/p>\n

:\/#<\/span> exit<\/span><\/p>\n

Finally reboot the system, and test logging in a root.<\/p>\n

:\/#<\/span> reboot<\/span><\/p>\n

This brings up a good point, with it being this easy to change the root password, isn\u2019t this a possible security issue, and if so what can be done to harden the system and prevent someone from coming along, rebooting our Linux machine and changing the root password?\u00a0 The answer to this question is YES!\u00a0 This is a big security hole and there are several things that can and should be done to prevent this sort of attack.<\/p>\n