Difficult AX Question

[AutoPilot]

Anyone know how to recover a lost Station password?

I can connect to the platform no problem. The Chief engineer (Luser) left town in a hurry. Not to long after changing all the passwords he could.

TIA
Auto

[Chris_Worthington]

Yep,

Do a station copy in the platform, open up my host>my files>yada yada> stations> da station> config.bog>config>services>users>pick one/create one......

edit/password/whatever.........

save "AND" right click on config.bog, click save,,, close all that crap back up......

Go back to the platform level login>station copier>transfer to da Jace,,, It reboots,,,, wala your in :D

[AutoPilot]

Thank You Sir
Got it right away.

[jogas]

Yep,

Do a station copy in the platform, open up my host>my files>yada yada> stations> da station> config.bog>config>services>users>pick one/create one......

edit/password/whatever.........

save "AND" right click on config.bog, click save,,, close all that crap back up......

Go back to the platform level login>station copier>transfer to da Jace,,, It reboots,,,, wala your in :D

Now that's COOL...went right into my archive.
Thanks.

[digo]

Let this serve all as a reminder - physical access to a JACE is all one needs to get in to a station if they know what they are doing.
In this case, autopilot had access to the platform. What if you didn't?
Serial shell access can restore the platform credentials to factory default.

The only way to secure your JACE, would be if you somehow changed the default platform username and password. That way, if someone attempted to restore the default platform credentials as shipped from factory via the serial shell, they would not know what the "default" credentials are...

Chris, do you know the procedure to change the factory credentials?

[tk2k]

You can also go into the config.bog "text file editor" under SysHome-->Stations--> station folder-->config.bog and delete the following in the code. It will reset the admin password to "no password" or blank

<?xml version="1.0" encoding="UTF-8"?>
<bajaObjectGraph version="1.0">
<p h="1" c="1" m="b=baja" t="b:Station">
<!-- /Services -->
<p n="Services" h="2" t="b:ServiceContainer">
<!-- /Services/UserService -->
<p n="UserService" h="3" t="b:UserService">
The username line is below:
<p n="admin" h="4" t="b:User">
<p n="enabled" f="r"/>
<p n="expiration" f="r"/>
<p n="permissions" f="r" v="super"/>
Delete the following line:
<p n="password" v="AH/3lmWT201xYzAroiMa62Ze7lSOR2RCpw=="/>

[The Reaper]

All good information. I'm gonna write that one down. Thanks guys.

[Chris_Worthington]

Chris, do you know the procedure to change the factory credentials?

Nope....

I would prefer to keep the ability to restore the factory defaults through the shell mode, I think changing this to lock in a customer/whatever is just wrong IMO......

"If" I knew, I probably would not share that information, as some bonehead would use it :eek:

[digo]

I agree. I was just feeling you out on this one - One does not need to lock a customer in when one takes good care of their customers.

Sometimes I feel we should point out where the documentation resides, as opposed to spelling it out on a public forum. Otherwise any joe schmoe could look up this info, and use it with a malicious intent.
e.g. You could point someone to look at the docs folder, say docJaceStartup.pdf, for info on the serial shell.

You don't have to worry about losing the ability to restore the factory defaults. There's always a backdoor, I'm just not telling...
From the pdf mentioned above:
"If you change platform login credentials and then lose or forget them, you will need to contact Systems Engineering for a special recovery routine."