Password Reset Tool - Lose access to webend

[red_sound]

Hey recliq,

I wanted to let you know about curious behavior when I use the pw-reset tool, maybe it's normal - you tell me.

Here is the scenario:

1. I have 105021 (latest) loaded on Plus flash, I have no password set on telnet, and default on webend.
2. When testing 106 beta (boot to root.bin) with mad_ady, it seems to break the link with telnet password (this is already being worked on by mad_ady), but here's where things get interesting.
3. I boot back to 105021, I can log in to webend still, but not telnet (as mentioned) - so I start the webend addons manager and install the pw-reset tool to USB.
4. After I hit apply, I loose access to webend, but I'm able to get into telnet with no password.
5. Webend keeps asking for a password, but the default doesn't work.
6. If I restart the Plus (boot in to 105021 with pw-reset enabled on USB still), then I'm able to get back into telnet and webend.
7. After the restart, I'm able to disable the tool and webend/telnet stay as is (defaults).

Is that the intended behavior (getting kicked out of webend)?

Cheers,

Red

[recliq]

[red_sound]

Ok, I had a perfect scenario to test this just now as I had rebooted back to 1.05 after testing 1.06 beta and I had been locked out of telnet...

I had already enabled the tool - is this the right version? It's what I see in Addons Manager...

Password Reset?
Version 0.0.1
2012-04-01 recliq Main This application will reset your telnet and weblogin passwords back to default in case you locked yourself out.

Anyway - I thought because it was less-invasive, I would try the service restart first, it didn't work.

Then, from CLI, I tried the webend reset, set my old PW back up and BAM! Back in to webend without having to restart the WD Plus.

Hope this info helps and thanks for the info. Let me know if you need something else tested.

Cheers,

Red

[red_sound]

[red_sound]

[mad_ady]

It would appear that your password gets reset to: 5c436a71d934af468cd1d03fec51642e. You can boot the 1.06 image, and run "login" and try to login with that, just to confirm if this is true...

[red_sound]

[mad_ady]

Now the whole internet knows your super secret root password. You're doomed!

[red_sound]

I heard about this new thing called a firewall, I hear it helps with security, I should prolly get one of those...

[kroetkroet]

Naah, mad_ady doesn't require firewalls, he has 9 lives, just like cats