topic Re: How to Restore the 'admin' password in Expedition Discussions

How to Restore the 'admin' password

sjanita — Fri, 22 Mar 2019 09:00:30 GMT

update ver 1.1.9 added a CLI option to restore the password for the WebUI account - 'admin'

If you need to restore the password to the default password of 'paloalto' the CLI syntax is shown below:

expedition@Expedition:/var/www/html$ php /home/userSpace/utils/restore/restoreAdmin.php

✓ Connected successfully to the database

✓ Admin user found

✓ Admin password restored to: 'paloalto'

expedition@Expedition:/var/www/html$

Re: How to Restore the 'admin' password

KartikaUtami123 — Tue, 19 Jan 2021 05:02:42 GMT

Hi Sjanita,

I can't use this command to restrore my admin password. Please see below the results when I tried to run the command in expedition:

It doesn't seem that I have utils directory.

expedition@ubuntu1604:/var/www/html$ sudo php /home/userSpace/utils/restore/restoreAdmin.php
Could not open input file: /home/userSpace/utils/restore/restoreAdmin.php

expedition@ubuntu1604:/var/www/html$ cd /home/userSpace/
expedition@ubuntu1604:/home/userSpace$ ls -la
total 36
drwxr-xr-x 3 www-data www-data 4096 Jan 18 04:33 .
drwxr-xr-x 5 root root 4096 Jan 18 04:03 ..
-rw-r--r-- 1 www-data www-data 82 Jan 18 04:32 environmentParameters.php
-rw-r--r-- 1 www-data www-data 894 Jan 18 04:32 panReadOrders.log
drwxrw-rw- 3 www-data www-data 4096 Jan 18 04:33 projects
-rw-r--r-- 1 www-data www-data 70 Jan 18 04:32 .signatureMAC
-rw-r--r-- 1 www-data www-data 101 Jan 18 04:33 tempEnvironmentParameters.php
-rw-r--r-- 1 root root 654 Jan 18 04:09 userDefinitions.php
-rw-r--r-- 1 www-data www-data 36 Jan 18 04:09 .uuid5
expedition@ubuntu1604:/home/userSpace$

Re: How to Restore the 'admin' password

dgildelaig — Tue, 19 Jan 2021 10:49:18 GMT

Hi,

I see you do not have the utils folder. Could I ask which version of Expedition are you currently running?

Re: How to Restore the 'admin' password

adelamarre — Thu, 18 Feb 2021 18:52:02 GMT

Hello,

Looks like the file has moved. Here is the new location :

Aswell the login might be admin instead of expedition

expedition:~$ php /var/www/html/OS/startup/restore/restoreAdmin.php ✓ Connected successfully to the database ✓ Admin user found ✓ Admin password restored to: 'paloalto'

Re: How to Restore the 'admin' password

azuniga — Thu, 18 Feb 2021 19:05:47 GMT

@adelamarre

Yes that is correct and you could always locate the file with the "sudo find" command

Re: How to Restore the 'admin' password

raghavendra.badiger — Sat, 21 Aug 2021 18:28:18 GMT

When I run above command I get following error, am I missing anything?

PHP Warning: mysqli::__construct(): (HY000/2002): No such file or directory in /var/www/html/OS/startup/restore/restoreAdmin.php on line 81
Connection failed: No such file or directory

Re: How to Restore the 'admin' password

lychiang — Mon, 23 Aug 2021 15:24:35 GMT

Try to switch to Root account using $su , then you should be able to see the file.

Re: How to Restore the 'admin' password

edgutier — Tue, 30 Aug 2022 21:49:50 GMT

Hi there,
I followed the commands and it shows the correct restoration, however credentials not working in the GUI:

expedition@expedition1:~$ sudo php /var/www/html/OS/startup/restore/restoreAdmin.php ✓ Connected successfully to the database ✓ Admin user found ✓ Admin password restored to: 'paloalto' expedition@expedition1:~$

I tried using admin/paloalto as default credentials but is not working.

I also have powered-off/on with no luck.
Expedition version: 1.2.39
Any suggestions?

Re: How to Restore the 'admin' password

lychiang — Tue, 30 Aug 2022 21:54:47 GMT

@edgutier

Which version of ubuntu you are running ? Expedition newer version only runs on ubuntu 20.x please follow the installation guide below:

https://live.paloaltonetworks.com/t5/expedition-articles/expedition-documentation/ta-p/215619?attachment-id=10820

Re: How to Restore the 'admin' password

edgutier — Tue, 30 Aug 2022 21:57:03 GMT

Hi,
My Ubuntu is running 20.04 LTS

Re: How to Restore the 'admin' password

edgutier — Tue, 30 Aug 2022 22:19:19 GMT

I have found the following error:

Aug 30 21:32:41 expedition1 /etc/mysql/debian-start[1346]: Looking for 'mysql' as: /usr/bin/mysql
Aug 30 21:32:41 expedition1 /etc/mysql/debian-start[1346]: Reading datadir from the MariaDB server failed. Got the follow>
Aug 30 21:32:41 expedition1 /etc/mysql/debian-start[1346]: ERROR 1045 (28000): Access denied for user 'root'@'localhost' >
Aug 30 21:32:41 expedition1 /etc/mysql/debian-start[1346]: FATAL ERROR: Upgrade failed

Re: How to Restore the 'admin' password

lychiang — Tue, 30 Aug 2022 22:39:44 GMT

Hi @edgutier Could you please try the solution in the below article:

https://live.paloaltonetworks.com/t5/expedition-discussions/incorrect-username-or-password/m-p/487494#M3985