vCops Password Reset KB2001483 - solution not working

[slanger]

Hopefully someone from VMware is watching this forum and can help me out.

Hello, we are demo'ing vCops (Version 5.0.1 Build 677931) for 60 days and already having issues logging in.  I was able to find two KB's detailing the steps to first reset the root password on the UI VM (http://kb.vmware.com/kb/2001476) and then reset the Admin password for the web interface (http://kb.vmware.com/kb/2001483).

1. There are some inconsistancies with the second KB.  I just wanted to mention these in case you guys want to update the KB accordingly.. or maybe im way off and you can correct me..
   1. KB2001483 states that I should run' /usr/lib/vmware-vcops/user/conf/install/resetadminpw.sh' but there is no such script.  I beleive it's a typo: the script I was able to find is 'resetadminpwd.sh' (there is a 'd' on the end)
   2. 'resetadminpwd.sh' asks for an arguement in the form of 'resetadminpwd.sh <newpassword>'.  This is not listed in the KB and probably should be.
2. After running resetadminpwd.sh <mynewpassword> successfully, I am still unable to log into the admin interface of vCops.  (https://10.x.x.x/admin/com.vmware.cm.ui.Admin/).  I have tried several different lengths and complexities of passwords, I have also rebooted the vApp a few times just in case it needed it after the password reset.  All to no avail

So at this point I CAN get into the vCops web interface, but I CAN'T get into the admin web interface to be able to change passwords and add users, etc...

Normally I would just destroy the vApp and redeploy it, but I dont want to lose all the data we have collected over the past week..  So, any ideas here?

Thanks in advance. -Scott

[MauricioMoya_So]

Hi anyone,

Now i have the same issue as Scott. I installed the vCop for a lab, and i made the initial configuration in the admin url.

Since I entered  the licenses key I lost the login in the admin url. But the strange thing is that i can access to the vcops-vsphere interface and the vcops-custom, but not to the admin.

I try on with change the admin password with the kb (http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=200148...) and yet have the same problem. I have access to vcops-vsphere and vcops-custom but not to the admin.

Like Scott I would be so gratefull with your help.

Best Regards.

~Mauricio

P.s: The error is: "The user ID and password combination is invalid. Please try again."

[gradinka · Accepted solution]

there is a lockout policy enabled for the admin account. by default it's set to 3 wrong attempts.

try the procedure mentioned in Troubleshooting section of the release notes:

http://www.vmware.com/support/vcops/doc/vcops-501-release-notes.html#resolvedissues

do write back whether this solved your problem.

[shimmo]

Yes this solves problem... thanks.

[slanger]

@gradinka, thank you!!! that worked.

Now can someone from VMware put this in a KB and link it to the two others in the thread... thanks!!!

Determine whether the admin account is locked out

1. Login to the console of the UI VM as root user.
2. Run the following command twice: su admin.
   The admin account is locked if the console displays a message that reads Account locked due to XX failed login, where XX stands for the number of failed login attempts.
3. Repeat the above steps on the Analytics VM to check if the admin account there is locked out.

Unlock the admin account

1. Login to the console of the UI VM as root user.
2. Run the following command: pam_tally --user admin --reset.
3. Repeat the above steps on the Analytics VM if the admin account there is locked out.

Disable the automated lockout for the admin account (optional)

1. Log in to the console of the UI VM as root user.
2. Remove or comment out the following line from file /etc/pam.d/common-auth:
   auth requisite pam_tally.so deny=3
3. Repeat the above steps on the Analytics VM to disable the lockout functionality there.
Note: The admin account is unlocked automatically when you disable this functionality.

[gradinka]

Yes, we'll do that

[slanger]

you guys rock!  :smileycool:

[MauricioMoya_So]

Well done!

Works good, thanks!

[admin]

Hello,

The KB you cite (2001483) is for vC Ops Standard 1.0.x. Similarly, the KB for resetting the root (2001476) also applies to 1.0.x.

The KB for resetting passwords of both types (admin and root) for 5.0.x is here:

http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=201335...

It does not have a typo in the name of the shell script (resetadminpwd.sh) and includes the step to enter the new password.

Please do not refer to those old KBs.

Thanks,

Victoria

vC Ops Doc Lead

[admin]

A Bugzilla ticket has been filed to create a KB for the lockout solution.

Thanks,

V.