1.) The "debug" programming is kind of difficult to pull out the password if you've never done it before, but I will tell you if you do it once and write down what ITAS tells you, so you can do it again. Just know that it is password protected and that password changes daily. So if you do try this and want to do it again another day, you'd better write down the date you originally did the "debug", or you'll need the new password for that day.
2.) If the KSU has an expansion cartridge, simply power the KSU down, remove the cartridge and power up. This will of course wipe out all programmed data including installer passwords. Should the KSU not have an expansion cartridge, add one and repeat the previously listed instructions. Another method is to boot the KSU with an older version of software forcing it to do a cold restart. (WARNING: You loose all customers programming!). All programming defaults so your Install password will be config.
3.) Connect my own RAD to the Norstar, then use Norstar Manager "on line session" for pre 2.0 releases or Remote Tools "browser" for 2.0 and newer releases. You gain access to the database with out needing a password (it's your RAD so you know its password) and this allows you to display all passwords in the system.
4.) There is one other drastic measure that will force the switch to do a cold restart, and that is to short the battery on the MICS motherboard. Simply open up the plastic case, find the battery, bridge the battery posts with a screwdriver head, plug it in, and the switch forgets its ever had any software installed. This is NOT, I repeat NOT, supported by Nortel, and will void any warranty, but is also works on RAD's when you've forgotten the password. Very useful on switches out of warranty.
If you need the debug procedure let me know.
Good Luck!!