[ Date Index ] [ Thread Index ] [ <= Previous by date / thread ] [ Next by date / thread => ]
On Monday, 16 August 2021 08:31:29 BST Rich Brown wrote: > Hi > > On our main desktop computer we have all family users. However, the > other members of the family only occasionally log in and in a recent log > in one of the users had forgotten their password. I reset it as an admin > and they logged in, but only to find the keychain password is different. > When they can't input the correct password the computer locks up. We > have tried to use the new password but this is rejected. > > Any help greatly received! We need a bit more details of what system, and what you want to achieve. Keychain is the Mac terminology. GNOME has a keyring https://wiki.gnome.org/Projects/GnomeKeyring/SecurityFAQ Assuming GNOME keyring... As far as I know the keyring password is the only thing required to, and capable of unlocking the keyring, and GNOME is AES128 encrypted with multiple iterations, so basically you want the password to read the contents. The old keyring can be moved out of place, and when they login GNOME will create a new, empty, keyring. If you need to access the contents of the old key-ring, then probably need to crack the password. Extracting the user's old password hash from an old backup of the "/etc/shadow" file, and use John the Ripper with some hints of what they think the password was, will probably work. If you can get a hash I'm sure myself or someone else will help crack it (as long as you can assure me it is yours to crack, and I'm not doing an Assange). I couldn't find any information on recovery of keyring beyond this. Apple had some for keychain, but it basically boiled down to recovering a version with a known password from time machine (IIRC), which is another approach for keyrings if you know any previous passwords and have extensive enough backups. That said I don't use GNOME these days, so all alien to me ;) -- The Mailing List for the Devon & Cornwall LUG https://mailman.dcglug.org.uk/listinfo/list FAQ: http://www.dcglug.org.uk/listfaq