topic Re: Updating password with XML API for Palo Alto firewall user. in General Topics

Updating password with XML API for Palo Alto firewall user.

ThomasEikeland — Wed, 26 Oct 2022 08:15:06 GMT

I have a physical firewall and want to change the password on an admin by the use of XML API.

I have followed the guide from

How to Change the Password of Administrative Users via XML API - Knowledge Base - Palo Alto Networks

and everything works and ends with success. However, when I try to login with the new password it does not work. And neither does the old password. I checked the config file and the phash is under the correct user.

What is wrong and how do i fix it?

Re: Updating password with XML API for Palo Alto firewall user.

JayGolf — Wed, 02 Nov 2022 06:39:45 GMT

Hi @ThomasEikeland ,

If you are still unable to login with a new or old password can you try booting into maintenance mode? Once booted into maintenance mode, select a previous running-config where you were able to login.

How to Reset the Administrator Password

Re: Updating password with XML API for Palo Alto firewall user.

OtakarKlier — Wed, 02 Nov 2022 21:40:40 GMT

Hello,

After changing the password, did you perform a commit to apply the changes?

Regards,

Re: Updating password with XML API for Palo Alto firewall user.

ThomasEikeland — Wed, 02 Nov 2022 22:29:17 GMT

Yeah, commited succesfully!

Re: Updating password with XML API for Palo Alto firewall user.

ThomasEikeland — Fri, 02 Dec 2022 12:29:51 GMT

Hi, late reply but it is of no consequence if i lose the user. It is just a test user. The problem is that the code runs succesfully and says that the password is updated, but then not the new or old one works. so my question is, is there som reason this happens or does it simply not work to do it this way?

Re: Updating password with XML API for Palo Alto firewall user.

OtakarKlier — Fri, 02 Dec 2022 20:38:06 GMT

Hello,

Do you have the following setting applied in your device config?

Device tab -> Setup -> Management -> 'Minimum Password Complexity' -> Require Password Change on First Login checked?

If yes then this is why it only works once. When getting the API 'password' turn these features off first.

Hope this helps.

Re: Updating password with XML API for Palo Alto firewall user.

OtakarKlier — Fri, 02 Dec 2022 20:42:42 GMT

Also if you have the 'Required Password Change Period" enabled, you will need to change your API keys before they expire.