topic Re: Panorama standby password expired in General Topics

Panorama standby password expired

junior_r — Mon, 25 Sep 2017 21:38:06 GMT

Hi,

One of my accounts on Panorama standby doesn't let me login. I get "Password expired" message. I tired to change password for active unit and that still did not fix issue. I tired to delete and recreate account from active unit that still did not fix issue. How can I clear this flag on standby unit without making it active and changing password on it.

failed authentication for user 'junior'. Reason: Password expired. User Locked out. From: 10.200.200.90.

Thanks

Re: Panorama standby password expired

reaper — Tue, 26 Sep 2017 06:52:46 GMT

the user is locked so you won't be able to login even if you do change the pasword, you'll need to wait untill the lock ends or log in with a different user and unlock the user

> request authentication unlock-admin user <value>

there is no need to switch to an active state to perform any of these tasks

Re: Panorama standby password expired

junior_r — Tue, 26 Sep 2017 12:12:27 GMT

Hi,

That command wont work for users that have expired password. Is there a command to reset expiry without flipping to standby and changing password?

Reason: Password expired. User Locked out.

Thanks

Re: Panorama standby password expired

reaper — Tue, 26 Sep 2017 13:54:37 GMT

I'm not sure what you mean by 'flipping to standby', you should not change the active membership status of a cluster member to execute this type of action. Commands can be executed on the passive member without it needing to be active

You do, however, need to log on as a different user and perform the password change, commit and unlock

Re: Panorama standby password expired

junior_r — Wed, 27 Sep 2017 00:53:25 GMT

On Standby Panorama you are not aloud to make changes to shared configuration. IE User accounts. I have a user with expired password on Standby unit but on active unit its fine. I can flip to standby unit triger a password change then flip back this will fix the issue but not the correct way it should be done.

Re: Panorama standby password expired

junior_r — Wed, 11 Oct 2017 01:08:43 GMT

I am guessing no one knows? lol

Re: Panorama standby password expired

reaper — Wed, 11 Oct 2017 08:02:03 GMT

have you tried resetting the password in the meanwhile?

it's true you can't write new config on a passive panorama, but you can change passwords

since no one else on the forum seems to have encountered this issue, have you been in contact with TAC? might be helpful if you post the outcome here