Updating password with XML API for Palo Alto firewall user.

[ThomasEikeland]

I have a physical firewall and want to change the password on an admin by the use of XML API.

I have followed the guide from

How to Change the Password of Administrative Users via XML API - Knowledge Base - Palo Alto Networks

and everything works and ends with success. However, when I try to login with the new password it does not work. And neither does the old password. I checked the config file and the phash is under the correct user.

What is wrong and how do i fix it?

[JayGolf]

Hi @ThomasEikeland ,

If you are still unable to login with a new or old password can you try booting into maintenance mode? Once booted into maintenance mode, select a previous running-config where you were able to login. 

How to Reset the Administrator Password

[OtakarKlier]

Hello,

After changing the password, did you perform a commit to apply the changes?

Regards,

[ThomasEikeland]

Yeah, commited succesfully!

[ThomasEikeland]

Hi, late reply but it is of no consequence if i lose the user. It is just a test user. The problem is that the code runs succesfully and says that the password is updated, but then not the new or old one works. so my question is, is there som reason this happens or does it simply not work to do it this way?

[OtakarKlier]

Hello,

Do you have the following setting applied in your device config?

Device tab -> Setup -> Management -> 'Minimum Password Complexity' -> Require Password Change on First Login checked?

If yes then this is why it only works once. When getting the API 'password' turn these features off first.

Hope this helps.

[OtakarKlier]

Also if you have the 'Required Password Change Period" enabled, you will need to change your API keys before they expire.