NVP vProxy: Unable to log in using root credentials, root access lost
Résumé: Root account access through the vProxy appliance is lost.
Symptômes
You are unable to log in using the vProxy's admin account from either SSH or vSphere web client. Access Denied or Invalid Credential errors are returned.
Cause
Résolution
The vProxy OVA packages are available through the NetWorker Product Support page.
If the root account is accessible:
If the root account is accessible through the vSphere VM console connection, connect to the vProxy over SSH and login with admin credentials. Switch to the root user account using the below command and specify the root users password.
sudo su -
You can only change (update) the root password if you already have access to the root account.
sudo passwd root
If the admin user password is lost but know the root password, connect to the vProxy from the vSphere web client and login as root. The admin password can be changed with the command:
passwd admin
Figure 1: Screenshot of vProxy properties from the NetWorker Management Console (NMC).
If the admin account is locked, log in with the root account from the vSphere web client and reset admin account with pam_tally2 to reset it:
pam_tally2 --user admin --reset
If the admin account continues to become locked, check to see where the login requests are coming from:
journalctl -u sshd | grep -w 'admin'
This command lists the IP addresses of systems which attempted (and failed) to login using the admin credentials:
Dec 06 09:23:36 nsr-vproxy02.amer.lan sshd[9407]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.168.9.100 user=admin
Dec 06 09:23:38 nsr-vproxy02.amer.lan sshd[9407]: Failed password for admin from 192.168.9.100 port 54788 ssh2