Hmm, this can sometimes not work if the local administrator has done his job properly and required authentication if changing boot parameters. Easier:

- boot off a live CD

- pray the administrator is a fool, and not used LVM encryption on the disk, and mount the root partition somewhere

- chroot to the mounted partition and passwd it

- unmount, reboot, enjoy.