ssgconfig reset password

[Anon Anon]

Hi,

 

We have a customer that forget his ssgconfig password and the root password.

 

Do we have a way to reset they ssgconfig password?

 

They have virtual appliance.

 

Thanks,

Nir

[styganesh]

Here are the steps which i have tested for Gateway 8.2.

 

1. Restart the SecureSpan appliance

2. During the boot-up sequence Press Enter

3. Type "p" and enter "7layer" as password

4. Type "e" on Layer7 SSG

5. Use the down-arrow key to move highlighted bar down to the line that

starts with kernel.

6. Type another "e" to edit this kernel line

7. At the end of the line, add a space and the following: init=/bin/bash

Press the [Enter key] which will return you to the GNU GRUB menu.

8.Type "b" to boot the modified kernel line. System will now boot into

single-user mode with no password required.

9. Type command "mount -o remount,rw /"

10. Change the root password to whatever you would like by typing the

command: "passwd root"

11. Sync changes to the disc and reboot by typing the commands:

sync; reboot -f

12. At this point, the system will allow you to log into the Gateway using the

credentials defined. Once you have logged into the system as the root

user, you can reset or modify the password to the ssgconfig user.

 

Hope this helps.

 

Regards,

Ganesh Reddy

[Diego Silva Martins]

Hi Nir,

 

You can try this

 

Instructions for breaking into a grub based system (RHEL6)

1. Connect to the SecureSpan appliance console either through the serial cable or direct console access.

2. Reboot the SecureSpan appliance

3. Wait during initial stages of boot for following text, press the space bar or other key to stop the boot: ----------------------------------------------------------------------

Press any key to enter the menu

Booting Layer7 SSG-up (kernel version number) in 3 seconds...

----------------------------------------------------------------------

4. Once you are in the GNU GRUB menu, type "e" to edit.

5. Use the down-arrow key to move highlighted bar down to the line that starts with kernel.

6. Type another "e" to edit this kernel line.

7. At the end of the line, add a space and the following: "rd_LVM_LV=vg00/lv_var rd_LVM_LV=vg00/lv_log init=/bin/bash" then press the [Enter key] which will return you to the GNU GRUB menu.

8. Type "b" to boot the modified kernel line. System will now boot into single-user mode with no password required. 9. Remount the root partition as read/write: "mount -o remount,rw /dev/mapper/vg00-lv_root"

10. Confirm availability of lv_var and lv_log in /dev/mapper: "ls -l /dev/mapper"

Example output:

----------------------------------------------------------------------------

bash-4.1# ls -l /dev/mapper/

total 0

crw-rw---- 1 root root 10, 58 May 28 14:40 control

lrwxrwxrwx 1 root root 7 May 28 14:40 vg00-lv_log -> ../dm-3 lrwxrwxrwx 1 root root 7 May 28 14:40 vg00-lv_root -> ../dm-1 lrwxrwxrwx 1 root root 7 May 28 14:40 vg00-lv_swap -> ../dm-0 lrwxrwxrwx 1 root root 7 May 28 14:40 vg00-lv_var -> ../dm-2 bash-4.1# ----------------------------------------------------------------------------

11. Mount /var: "mount -t ext3 /dev/mapper/vg00-lv_var /var"

12. Mount /var/log: "mount -t ext3 /dev/mapper/vg00-lv_log /var/log"

13. Change the root password to whatever you would like by typing the command: "passwd root"

14. Reset the root tally: "pam_tally2 --user root --reset"

15. Flush the filesystem buffer (for safety) and reboot: "sync;sync;reboot -f"

----------------------

Instructions for breaking into a grub based system (RHEL5)

1. At grub prompt enter the grub password (if set) to gain access to edit mode

2. Press 'e' to enter edit mode

3. Select the kernel line, press 'e' to edit it and add 'init=/bin/bash'

4. Press 'b' to boot. Should boot kernel, mount root partition read only

and give a bash prompt.

5. Remount root partition as read/write: "mount -o remount,rw /"

6. Use `passwd` to change the root passwd: "passwd root"

7. Reset the root tally: "pam_tally2 --user root --reset"

8. Flush the filesystem buffer (for safety) and reboot: "sync;sync;reboot -f"

 

Regards,

Diego Martins

[Anon Anon]

There is an article for this on the API Management support portal: https://na32.salesforce.com/articles/Knowledge_Base/Managing-user-accounts-on-the-CA-API-Gateway. It currently requires access to said portal. We are working on migrating these documents to CA Support's existing knowledge base infrastructure but that process is not yet complete. If you are unable to access this article then please open an issue with CA APIM support via email ([e-mail]) or phone [phone])

[Anon Anon]

Thank you!

 

Its work!

[Anon Anon]

Please be sure to mark the appropriate response as the correct answer for other readers. Thanks!