Devices | Panorama | Add User (in API key section) issue

[justamoment]

Install details below, but I haven't used my Expedition install in a while and I went to start another migration, but the Panorama user I was using wasn't working.  The account locked so I just changed the password to avoid any issues there (new password meets all complexity requirements as defined in Panorama | Setup | Management tab).

When I try to add it as an auth type username & password, I get an error:

Remote Exception

Please change your password.

I've changed it several times but it still throws that error.

Ubuntu 16.04

Expedition v1.1.68

Any ideas?

Thanks!

[azuniga]

Hello @justamoment 

Go ahead and try upgrading your expedition client and see if you still have an issue. The current version is 1.1.113.

[justamoment]

Unfortunately, that didn't work - same error.

[azuniga]

Hello @justamoment 

Can you share a screenshot of what you're seeing? This is coming from the expedition server? If for some reason the username/password isn't working you can always add in the API key but I would like to see the screenshot I think it will be helpful.

[justamoment]

Yes, on Expedition within the Panorama device, in the Authentication API Keys section where you add mt_user etc. as a user.

[justamoment]

Also, how would I get the API key?

[azuniga]

Hello @justamoment 

https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-panorama-api/get-started-with-the-pan-os-xml-api...

[justamoment · Accepted solution]

That failed (invalid credentials), however it then occurred to me to try to login to the GUI as mt_admin.  So, all this time I had been changing the password (even deleting & re-creating the username in Panorama with commits in between).  Well, I login to the GUI and it says I need to change the password (60-day expiry).  Apparently, it was stuck as an expired account.

Thanks for all of your suggestions!

[azuniga]

Hello @justamoment 

Thanks for the update and good luck on your migration!