Has anyone gotten around being locked out of Panorama?

[hkp]

It appears that my passwords no longer work to get logged into Panorama.  It did have an unexpected shutdown and now I cannot login.  I found this: but it has been a few days since I restarted again.

Any other suggestions?

[mharding]

What version is your Panorama VM running?

[hkp]

5.0.2

I should have included it.

[mharding]

Are you setup with just local accounts or are you also using authentication through RADIUS/Kerberos/LDAP?

[hkp]

Just local accounts.

[mharding]

This would be the first time I've heard of local accounts being locked out. Are you able to log in at the console?

At any rate, I would report this to Palo Alto Support.

[hkp]

Thanks for help.

[hkp · Accepted solution]

Well, support wasn't much help.  I was told to use the default admin username and password.  That did not work.

I was able to change the admin password by changing the phash value for the admin user in every xml file I could find.  Probably not a supported way of doing things, but I got back in.

If a panorama password recovery tool doesn't exist, maybe PaloAlto can try this and give me some credit. 

[mschuricht]

Hmm, how were you able to alter the PHASH if you could not log into the Panorama?

[Quinton]

What XML files are you referring to and where are they located?