Admin password with 2FA not synced in HA

Could be related to a encryption problem with the SSMK. Can you reset the password and then login via console? This needs to be looked at by Support. 

Thank you @Lucar Toni, opened a case: 06084292

last time i reset the admin password on Console. I will leave it as it is so support can look at the faulty state.

webadmin login is not working either with admin user.

Hello LHerzog,

Thank you for sharing the Case ID.

We have left a note in the case; checking on it, an L2 has requested the engineer assigned to gather some logs to escalate the case.

 Regards,

Hello,

To update the community this is now being investigated by DEV under NC-113962.

Regards,

As advised by support, I reset the password with serial cable now on both machines. On Serial connection I could login with admin / admin then. Logged on Web GUI with admin admin+2FA and was forced to set a new secure password.

At first I just entered admin as old password and a new password.

Then the wizard told me it didn't work - I need 2FA for old password.

So did the same again with admin+2FA

Same error message appeard again and again. Need 2FA for old password and it did not proceed.

In my mailbox I found mails about badlogins and that the IP I tried with has been finally banned due to  too many logins.

Then I logged in Web GUI with other admin user and found that the admin password has been changed on the Web GUI. But why? I always got error messages when I tried to change the password as the admin user.

and yes, after some time when my IP has been unblocked, I could login as admin with the new password +2FA

As advised by support, I reset the password with serial cable now on both machines. On Serial connection I could login with admin / admin then. Logged on Web GUI with admin admin+2FA and was forced to set a new secure password.

At first I just entered admin as old password and a new password.

Then the wizard told me it didn't work - I need 2FA for old password.

So did the same again with admin+2FA

Same error message appeard again and again. Need 2FA for old password and it did not proceed.

In my mailbox I found mails about badlogins and that the IP I tried with has been finally banned due to  too many logins.

Then I logged in Web GUI with other admin user and found that the admin password has been changed on the Web GUI. But why? I always got error messages when I tried to change the password as the admin user.

and yes, after some time when my IP has been unblocked, I could login as admin with the new password +2FA

tried today to use the new admin password + 2FA on the AUX node by connecting to it's local LAN port with notebook.

The machine then brings this popup which shows me, the new password has been synced BUT it is missing the flag that it has already been changed on the PRI node.

Hello LHerzog,

Thank you for the update.

This feedback has been shared with DEV under NC-113962.

Regards,

Thanks emmosophos 

received Mail from GES today:

They could reproduce the issue. There seems to be some issue regarding password change in HA setup, when MFA is enabled, fails to set the password in the Auxillary machine. the following is the error in the auxiliary machine

ERROR     Mar 02 07:51:40Z  [change_admin_password:12402]: authentication_user: recvfrom(6) failed 'Resource temporarily unavailable'

In the Primary machine password is set correctly, and in UI “password change successfully” message is also shown.

As the auxiliary password is not changed(still ‘admin’ is set), when the customer tries to log in to auxiliary machine, the change password menu is shown again

--

I'm not so sure about the last sentence as I had the new password already on the AUX but it was still flagged like "password change required".

Hello LHerzog,

Thank you for the information; I will ask the engineer to provide the feedback to DEV.

Regards,