Password Recovery Guide for FS N8560-32C

NOTEs:

To enter the Rboot menu you need to reboot the device, which will lead to business interruption, so back up the device as needed, and perform password recovery at a time with less business.
Before performing this operation, you need to contact the FS support at https://www.fs.com/tech_support.html to get the right user name/password used for entering Rboot shell.
Do not power off the switch during this operation.

Step 1 Power off and on to force restarting the switch, then press Ctrl+C to enter Rboot menu.

Step 2 Type 4 in the Rboot menu to enter the Scattered utilities menu, then Type 4, and enter the right user name and password to enter Rboot shell (Contact the FS support at

https://www.fs.com/tech_support.html to get the user name and password).

Step3 Check out the PICOS system boot partition.

ONIE:/ # blkid
/dev/sda6: LABEL="User-Data" UUID="da55e09c-0e7b-4d96-a8c9-bee2ed5bb42c"
/dev/sda5: LABEL="PicOS2" UUID="3f228548-64c1-492c-ad3d-8ca7d248c11a"
/dev/sda4: LABEL="PicOS" UUID="039453f9-0879-4c86-9e0b-8ef4d34d9a66"
/dev/sda3: LABEL="PICOS-GRUB" UUID="b3a8ab95-43f9-4f21-9c76-7f48101be381"
/dev/sda2: LABEL="ONIE-BOOT" UUID="7fcaa6c8-d174-42c1-abd1-8c6eea46eb6b"
/dev/sda1: LABEL="EFI System" UUID="36E9-D2F5"
ONIE:/ #

We find that the partition of LABEL="PicOS2" is /dev/sda5 and LABEL="PicOS" is /dev/sda4.

Step4 From the ONIE prompt, perform the following commands to mount the boot partition.

ONIE:/ # mount /dev/sda5 /mnt/   
ONIE:/ # mount /dev/sda4 /mnt/

Step5 Modify the shadow file.

# vi etc/shadow

Change the following line from:
admin:$1$eE9WFgVk$EwGcNl83uK98.r8TcKn2q/:15385:0:99999:7:::
into:
admin::15385:0:99999:7::: //Remove the string between the first and the second colon

Step6 Execute the sync operation.

# sync

The subsequent steps are distinguished between devices currently running in OVS and L2/L3 mode. Please choose the appropriate steps according to the PicOS mode.

L2/L3 Mode:

Step7 Modify the configuration file.

ONIE:/# vi pica/config/pica_startup.boot

In the pica_startup.boot file, you will find lines starting with “user admin {“, remove lines of user admin configurations.

For example, remove the following six lines in configuration file.

user admin {
            authentication {
                plain-text-password: "$1$zL8TUrpq$/Y1tcx1IhwPkm6HEd4aEM/"
            }
            class: "super-user"
        }

Save and exit with “:wq”.

Copy the configuration file to the backup file.

ONIE:/# cp /mnt/pica/config/pica_startup.boot /mnt/backup/pica/config/pica_startup.boot
ONIE:/# sync

Step8 Umount and reboot the switch.

# umount /mnt
# reboot

Step9 When you see PicOS login again, you can log in by the admin user without a password.

Step10 Set a new admin password using the following CLI commands and save the configuration.

root@XorPlus# set system login user admin authentication plain-text-password pica8            //Please enter the new password
root@XorPlus# set system login user admin class "super-user"
root@XorPlus# commit

After the above steps, you can log into the system with the new password.

OVS Mode：

Step7 Umount and reboot the switch.

# umount /mnt
# reboot

Step8 Set a new admin password with passwd admin command and save the configuration. The commands are illustrated here:

root@XorPlus:~$ passwd admin
Enter new UNIX password:
Retype new UNIX password:
passwd: password updated successfully

After the above steps, you can log into the system with the new password.