topic Re: SSH and console login blocked in Next-Generation Firewall Discussions

SSH and console login blocked

ceapen01 — Thu, 23 Nov 2023 09:34:13 GMT

cannot login to Palo Alto SSH and console using super admi user. From console it shows error = "user not known to the underlying authentication module"

From SSH it shows error - " Access Denied".

SSH screenshot attached.

Re: SSH and console login blocked

akuzhuppilly — Fri, 24 Nov 2023 03:54:58 GMT

Hello @ceapen01

The account you used is 'admin2'.

Is this a valid superuser account present in the firewall?

Do you have any other accounts to log in? If so, please check the system logs and authd logs.

Re: SSH and console login blocked

ceapen01 — Fri, 24 Nov 2023 05:21:25 GMT

admin or admin2, which ever super admin user result is the same.

Re: SSH and console login blocked

akuzhuppilly — Fri, 24 Nov 2023 05:33:26 GMT

Hello @ceapen01

Here are a few other options you can try:

If the firewall is connected to Panorama, attempt to create a new admin account from Panorama and push it to the firewall.
If the firewall is in High Availability (HA) and you can log in to one firewall in the HA pair, create a local account, and synchronize the configuration.

If there is no other way to log in to the firewall, you may need to perform a factory reset, as explained in the following KB:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClK2CAK

Re: SSH and console login blocked

ceapen01 — Fri, 24 Nov 2023 07:27:51 GMT

Firewall is not connected to panorama. We tried creating local user from secondary firewall, still no luck.

Re: SSH and console login blocked

akuzhuppilly — Mon, 27 Nov 2023 05:55:14 GMT

So, you mean to say you are able to connect to the Passive FW?

What does the config sync status show in the HA details?

If you are making a change on the Passive FW (such as creating a new local account), you will need to sync the config (if it's not already in sync) from Passive to Active.

Re: SSH and console login blocked

BlairTurner — Mon, 27 Nov 2023 08:41:23 GMT

The error message indicates the user is not recognized by the authentication module.

Re: SSH and console login blocked

rmfalconer — Mon, 27 Nov 2023 17:05:31 GMT

Do you have these accounts set with Role Based access?

Re: SSH and console login blocked

ceapen01 — Tue, 28 Nov 2023 10:26:25 GMT

the config is getting synced successful, but cannot login to primary firewall CLI using any admin credentials.

Re: SSH and console login blocked

M.Bock — Thu, 27 Mar 2025 11:26:42 GMT

Do you have a solution for this because I have the same problem

Re: SSH and console login blocked

M.Bock — Thu, 27 Mar 2025 11:39:57 GMT

When I use public key authentication for ssh, it works. But console access is still not working