New created Local admin fail

[LizaRajjab]

I have issue when create local admin password, it is not working. It show below error

“2023-08-07 09:55:43.566 +0700 debug: pan_auth_request_process(pan_auth_state_engine.c:3612): Receive request: msg type PAN_AUTH_REQ_GET_PW_CHANGE_REQUIRED, conv id 310, body length 64
2023-08-07 09:55:43.566 +0700 debug: pan_db_funcs_request_process(pan_auth_state_engine.c:1657): Authd: Get PW Change Requred
2023-08-07 09:55:43.567 +0700 Error:  pan_authd_handle_get_pwchange_required(pan_auth_clt_requests.c:527): Failed in get_pwchange_required for user test-admin”

anyone has same experience? Password example is just Abcd1234 but it still fail.  PA-3410 version 10.2.3-h2

[reaper]

can you elaborate on what you did exactly?

you created a new admin with a starter password, pushed a commit, then logged on with the new admin via the web interface, got redirected to the password change and tried to change the password?

[LizaRajjab]

Not change password but I create new local superuser password only then login via GUI. 

[BPry]

@LizaRajjab,

It seems like you likely have a password-profile assigned that is forcing the password change. 10.2.4-h4 is presently the preferred release in 10.2, there's PAN-203663 that was addressed with 10.2.4 that sound similar that you could potentially be hitting. 

I'd try an update to 10.2.4-h4 and see if that eliminates the issue or not. 

[LizaRajjab]

Hi @BPry 

I will wait result from you. Thank you for feedback.