Using xfsdump On Linux With IRIX Version 1 FS?

Sean Elble elbles at sessys.com
Fri Jul 24 10:36:31 CDT 2009


On 7/24/09 3:30 AM, "Matthias Schniedermeyer" <ms at citd.de> wrote:

>> 
>> Looks like the version 1 directory code was removed as of June 15th, 2006,
>> per this:
>> 
>> http://oss.sgi.com/archives/xfs/2006-06/msg00067.html
>> 
>> But another post <http://oss.sgi.com/archives/xfs/2003-07/msg00495.html> has
>> a 2.4.21 kernel being used with a patch, so I'm not sure if I want to try a
>> 2.6 kernel, or see if I can patch together a 2.4.x kernel on an old FC4 box
>> I have laying around.  Truth be told, it's a lot of work just to blank the
>> entries in /etc/shadow so I can login to a 150 MHz box again, so who knows
>> if I'll even try at this point, hah.
>> 
>> In any event, thanks a lot for the pointers in the right direction.
> 
> I'd guess the disc isn't very big.
> 
> You just dd it completly (for backup).
> 
> Then search for the content of the shadow-file and blank out the entry
> with a hex-editor. Make sure that you don't change the filesize, pad
> the previous/following entry with any character you have to remove.

Right, the disk is only 2 GB.  Presumably, to back the disk up, all I'd have
to do would be something like:

    dd if=/dev/sda of=IRIXbackup

Correct?  No need to specify bs or count, I presume...

Then, I could use hexedit in the following manner to edit the disk:

    hexedit -d -f /dev/sda

I suppose I could search for the encrypted password string itself, but as
Chris Wedgwood suggested, I might be better off finding the offset of the
/etc/shadow file by doing something like the following:
    
    xfs_ncheck /dev/sda | grep /etc/shadow

I'm not sure if I can use the inode number directly as an offset or not, but
I *think* I could use it in conjunction with a xfs_db convert command to get
something usable as an offset.  Something like the following, perhaps?

    xfs_db -c convert inode <inode from xfs_ncheck command> daddr /dev/sda

My apologies for all the questions, but I've never tried this before, and I
don't particularly feel like messing it up, even with a backup of the FS
available.  Many thanks to Andi Kleen and Chris Wedgwood, in addition to
Eric Sandeen and Matthias Schniedermeyer.

-Sean
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2139 bytes
Desc: not available
URL: <http://oss.sgi.com/pipermail/xfs/attachments/20090724/5a7f3be2/attachment.p7s>


More information about the xfs mailing list