How to Reset Root Password in RHEL7

Without a doubt, one of the most powerful and essential tools a system's administrator has is the ability to gain root privileges. While it's generally a bad idea, to say the least, to perpetually operate as the root user on any given system, being able to log in as the root user on the command console is essential at times. Therefore, it's frustrating to be in the position as a system administrator if you've forgotten or otherwise lost the password and are, subsequently, unable to gain escalated privileges on a system.
Since the shift to grub2, as well as other changes with the init system, the method of gaining access to a system for such low-level purposes has changed.
Reboot the system, wait for the grub menu, press the letter 'E' on the keyboard to edit the menuentry. Then, scroll down to the bottom of the screen to the line starting with linux and append the space-separated kernel commands rw and init=/bin/bash
before hitting the F10 key to boot the edited menu entry.
enter image description here
This will boot the system into a bash shell with the root partition mounted in
rw mode (read-write permissions).
enter image description here
NOTE: The previously-advised method of booting into single user mode, or
runlevel 1 should not be advised, as the rescue-shell now expects the user to enter
the root password before allowing access to it.
Booting the system using bash will allow the user to finally change the password
with the appropriate 
    # passwd
command.
Furthermore, however, in order to make sure that SELinux file contexts are
restored properly after the password modification, execute:
    # touch /.autorelabel
before restarting the virtual system.
To restart the virtual machine, execute
    # /sbin/reboot -f

Popular posts from this blog

Centos 7 pulseaudio

Image
Centos 7 doesn't come with an option for `awesome-wm` installation.  Therefore, the only way to make use of this light-weight tiling manager one has to enable Fedora 19 repo or build the package from source.  For the Fedora 19 repo approach, see: https://gist.github.com/ILMostro/1909a50e1858d0ee7e10 To use without GDM, GNOME's display manager, and without gnome services, one has to be aware of certain shortcomings that the gnome-services provide by default.  One such shortcoming is the lack of built-in Sound and Volume management.  Never fret, though, as there is a solution; namely, the PulseAudio-focused tools pavucontrol and pavumeter .  These packages are available from the " nux-desktop " repository available at at http://li.nux.ro/repos.html . nux-desktop My unofficial, as-is, not for profit RPM repositories for EL (RHEL, CentOS, ScientificLinux etc): These repos may or may not be up to date or behave the way you expect them to; use them at yo
Read more

Password Policy in RHEL 7

In Red Hat Enterprise Linux 7, the pam_pwquality PAM module replaced pam_cracklib, which was used in Red Hat Enterprise Linux 6 as a default module for password quality checking. It uses the same back end as pam_cracklib. The code was originally based on pam_cracklib module, and the module is backwards compatible with its options. The pam_pwquality module can be customized and configured in the file /etc/security/pwquality.conf . The possible options in the file are: difok Number of characters in the new password that must not be present in the old password. (default 5) minlen Minimum acceptable size for the new password (plus one if credits are not disabled which is the default). (See pam_pwquality(8).) Cannot be set to lower value than 6. (default 9) dcredit The maximum credit for having digits in the new password. If less than 0 it is the minimum number of digits in the
Read more

RHEL 7 and CentOS 7 syslog Rate Limit

https://access.redhat.com/solutions/1417483 In RHEL 7 there is rate-limiting both in systemd-journald and in rsyslog's imjournal module Lower Ratelimit Interval Lower the interval for rate-limiting and increase the burst level in order to minimize the possibility of losing log messages when the threshold is reached for the specified number of messages logged within the specified interval. Rate-limiting is specific to each process, so there's usually no reason to change this. It is also inadvisable to disable this feature entirely! grep -i rate /etc/systemd/journald.conf #RateLimitInterval=30s #RateLimitBurst=1000 RateLimitInterval=10s RateLimitBurst=3000 grep -i rate /etc/rsyslog.conf #$imjournalRatelimitInterval 600 <--default $imjournalRatelimitInterval 300 $imjournalRatelimitBurst 30000 journal corruption journalctl --verify journalctl --force
Read more