is this possable with DA?

[dwilko]

Hi

our Webserver Root got "hacked" we and the guy that installed DA on it for us recovered root, he says he used DA to recover it?
is this possable or is he talking aload of bull S**t?
if so how cos I would like to know for future ref


Thanks

Dave

 

[jmstacey]

A lot of things are possible. A lot of things can be meant by that cryptic quote.
For example, he could have reinstalled DirectAdmin which corrected the problem to simply fixing the affected files through DirectAdmin...

 

[dwilko]

as as I can tell DA hasnt been reinstalled and to reinstall it he would need root login right? which we didnt have at the time due it been hacked and changed, DA was running fine just we couldnt get on root, we even had a couple of guys go down to the datacentre repairing another box that when down while they was down there they tryed couple of things to recover it but it didnt work they it was like root doesnt even exist
then guy that installed DA says he use DA to get us Root back the box, all we are unsure if he use really did use DA to recover root or if he was behind/knew the person that changed root, as we didnt think it was possable to use DA to get the root back(thats why am here to see if that was possable)



Thanks

Dave

 

[nobaloney]

It appears you're writing about him recovering the root password.

Is that correct?

It is possible to change the root password through DA.

Because I consider it a security issue I don't intend to write about it onlist.

Jeff

 

[dwilko]

It appears you're writing about him recovering the root password.

Is that correct?

It is possible to change the root password through DA.

Because I consider it a security issue I don't intend to write about it onlist.

Jeff

yes that is right

I understand about not wanting to how post to it
think it turned out to be a good security issue well for us this time lol unless thats how the person hacked root in the first place but I think(would hope) you would need n admin login to do it?

Thanks for you help

Dave

 

[nobaloney]

Yes, you need to be an admin to do it.

If you need to learn how either search the forums (I didn't delete the post describing the method) or send me an email.

Note that if you ask me, you'll have to prove you own a DA license (not just that you have an admin password).

Jeff