Panorama upgrade local auth not working

L4 Transporter

Panorama upgrade local auth not working

Recently upgrade panorama to 8.0.17 and after it upgraded it got hung, so we had to reboot it to get it back.  Once it was back it is no longer allowing local auth.  Remote auth works via the GUI (thankfully).  Neither local or remote auth works via cli (console doesn't work either).


SSH using LDAP I get this message:


Received disconnect from port 22:2: Too many authentication failures for<ldap_user>

When using local auth via GUI I see this in the logs:


 'failed authentication for user \'admin\'.  Reason: Authentication profile not found for the user

When using local auth via CLI it just keeps asking for the password even though I know its right.  


I read 2 articles, 1 about PAN running FSCK after a reboot but it shouldn't take nearly a week to do that (upgraded it last week).  And another article about rebuilding the user database but I can't login via CLI to do that.   Remote console doesn't show anything, like it won't display anything.  


Has anyone see this before?  


Tags (2)
L7 Applicator

Re: Panorama upgrade local auth not working


I'd just go straight to support with something like this so they can view the logs and see what the debug info is actually stating. It kind of sounds like the upgrade might have effected a few files in an adverse way however. 

L4 Transporter

Re: Panorama upgrade local auth not working

I did that and they weren't able to figure it out.  Asked me to reboot it again to see if it clears whatever the problem is.  Will probably do that sometime today. 

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!