Kitz Forum
Broadband Related => Broadband Hardware => Topic started by: bobis on July 31, 2017, 07:21:11 PM
-
Hello, I am new to these forums and first of all, I want to say thank you about that topic which unlocked my VMG3925 and was finally able to firmware upgrade it to V5.13(AAVF.7)C0 http://forum.kitz.co.uk/index.php?topic=19022.75 :angel:
But , still cannot reboot it, do I really need to login via supervisor/root to do this? Is there any other command that I can do from "admin" user to reboot my gateway , since I don't have access to root/supervisor (not knowing the passwords and difficult to find according to http://forum.kitz.co.uk/index.php/topic,20006.0.html) ?
I just want telnet reboot because in my older Zyxel of P-870hn 51b I was able to daily reboot it when I had telnet access from another linux machine running on my LAN network (crontab -e and expect -f /root/zyxel.sh)
zyxel.sh was like this:
#!/usr/local/bin/expect
spawn telnet 192.168.1.1
expect "Login:"
send "admin\n"
expect "Password:"
send "mypassword\n"
expect ">"
sleep 1
send "reboot\n"
expect eof
Please, help me to make it work like this! :o
-
Welcome to the Kitz forum. :)
I do not have any experience with the VMG3925-B10B so am uncertain as to what to suggest. Perhaps other members will be able to comment?
With my VMG1312-B10D, it is very simple . . . From the Busybox shell, attained via either ssh or telnet, the reboot command is available for use.
-
If you type 'help' after logging on as admin, does the reboot command appear in the list? And if you manually issue it, does it reboot the device?
-
I have started to list all the directories on my 3925 and there does seem to be an entry called /sbin/reboot but I am loathed to try it as this is my live router.
Stuart
-
looks like 'admin' doesnt have permission
$ reboot
reboot: Operation not permitted
-
looks like 'admin' doesnt have permission
$ reboot
reboot: Operation not permitted
That's just plain wrong. Admin has the ability to do this through the web interface, plus as there is a power button on the back of the router anyone just being physically next to it can power cycle it and thus reboot it. That's what admin's job is anyway.
Stuart
-
Tell zyxel that not me :)
-
looks like 'admin' doesnt have permission
$ reboot
reboot: Operation not permitted
Yeah, this is exactly my output message, any workaround/fix?
-
Tell zyxel that not me :)
Yes I was hoping bobis would do that, sounds like a bug, unless his is an ex-ISP supplied router with their own modified f/w.
Stuart
-
Yes I was hoping bobis would do that, sounds like a bug, unless his is an ex-ISP supplied router with their own modified f/w.
Stuart
Wel, to be honest , I bought my VMG3925-B10B (brand new) from an UK seller from ebay (I am not from UK) and although no ISP icon/symbol was in the package/gateway/web_interface , it sounded weird that I didn't have access to firmware update first, but thanks to a guy in this forum with the zycli command , I managed to clear it and then upgrade it to the latest current firmware....but still I cannot reboot it as admin user in telnet/ssh :(
-
The issue with ebay sellers is that they often sell these things as brand new in retail packaging but it can still be originally from an ISP. The only way I believe to be sure about routers is to specifically ask if it is an ex-ISP one and if they lie and you find it is then you have a good case to return it as it was not as described. I am not saying all sellers are like this but undoubtedly some are either through ignorance or maybe deliberately. The reason you had to do the save_default clean is because this router did have some customisation in it and therefore I believe it is likely to have been ex-ISP. Now original ZyXEL firmware 'should' put it back to default retail state but you never know what else may have been messed with. The only way to be 100% sure it is a retail box is to buy from a retail outlet, but we all like a bargain and that's why ebay sellers do a trade but sometimes you can come unstuck.
Stuart
-
looks like 'admin' doesnt have permission
$ reboot
reboot: Operation not permitted
Can you see the reboot option in the web interface when logged on as admin? My problem is that as I do have the supervisor p/w I have changed the privileges for admin and can't remember if that was one I added.
Stuart
-
Can you see the reboot option in the web interface when logged on as admin? My problem is that as I do have the supervisor p/w I have changed the privileges for admin and can't remember if that was one I added.
Stuart
Hi Stuart,
I can reboot it via web interface 192.168.1.1 as admin account (the only account I can login) but can't do it via "reboot" command in telnet/ssh.
Since I currently have an open ticket with Zyxel relating to the firmware update problem (I discovered this site after the ticket opening :/) can I ask them for root/supervisor password?
-
Several others are attempting this at present but they seem to be having problems. ZyXEL, I suppose quite correctly, are asking users to prove they have a retail box before maybe giving it out. Obviously they do not want to allow end users to mess with ISP provided (owned?) routers and I can understand that is many ways. However if you can assure them yours is a retail box you may get lucky.
Stuart
-
Yeah, this is exactly my output message, any workaround/fix?
get root/supervisor password.
Several others are attempting this at present but they seem to be having problems. ZyXEL, I suppose quite correctly, are asking users to prove they have a retail box before maybe giving it out. Obviously they do not want to allow end users to mess with ISP provided (owned?) routers and I can understand that is many ways. However if you can assure them yours is a retail box you may get lucky.
Stuart
Was yours not an ex isp unit?
-
I just discovered this , can I issue a reboot command here?
Moreover , I already replied to the ticket saying that my firmware update issue is fixed and requested root/supervisor credentials.
-
I just discovered this , can I issue a reboot command here?
I suspect not. But perhaps you can find the time to test and then let us all know?
-
After I opened a new ticket about not being able to reboot the router , they lastly respond with:
Dear Customer,
we are really sorry that we can not provide more support for you in that case.
Because these home user products only have limited small Linux installed that the endusers are not supposed to use in a profound ways.
This is ridiculus! I also own a ZyXEL P-870HN 51b (home gateway of course, 4 years old) and I am able to reboot it from telnet/ssh , no problem!
-
have you tried the "reboot" command when logged in as Supervisor via telnet/ssh?
-
have you tried the "reboot" command when logged in as Supervisor via telnet/ssh?
Zyxel doesn't send any supervisor credentials to end/home users like me. Anyway, to close this thread, I finaly found a workaround called ssh tunneling (this can be used even if you don't have https access from WAN due to TLS error) and with this I mirrored the http localhost site of the gateway to the localhost of my mobile. Then, I just logged in and issued a reboot from web interface as normal.
If it was not for ssh tunnelling, I would never have done it but I would prefer to have elevated rights to my product anytime than having to rely to workarouds like this.
-
Zyxel doesn't send any supervisor credentials to end/home users like me.
If you login via telnet as admin and issue the command:
cat /var/passwd
msg me the line containing:
supervisor:$dkhkjdfjgsfjjfg:0:0:Administrator:/:/bin/sh
I will give you the Supervisor password, which you can then change to something else.
-
[REAL FINAL SOLUTION]
Only the root account (which has the same password like the supervisor one) has access to reboot command via ssh/telnet. Thanks to a guy named John on this forum, he helped me find out these credentials.
-
:hat:
-
Hi,
Can we get the solution in here?
Thanks,
Nenad
-
[REAL FINAL SOLUTION]
Only the root account (which has the same password like the supervisor one) has access to reboot command via ssh/telnet.
If you login via telnet as admin and issue the command:
cat /var/passwd
msg me the line containing:
supervisor:$dkhkjdfjgsfjjfg:0:0:Administrator:/:/bin/sh
I will give you the Supervisor password, which you can then change to something else.
Basically John used the hashcat utility to decrypt the supervisor password.
Hashcat needs a decent spec GPU to get results quickly which is why j0hn kindly offered to do so, otherwise it may have taken bobis a few days.