admin password reset

[Hami Ünal]

Hello

I installed wazuh server 4.0 and cant reset admin password with kibana gui and i get following error.

Failed to reset password. {"status":"FORBIDDEN","message":"Resource 'admin' is read-only."}

admin user assigned as read only?

[Sandra Ocando]

Hello Hami,

The admin password has to be changed via command line, it is not possible to change it from the GUI. To do so follow these steps:

1. Replace <new-password> and generate a hash for it using the hash.sh utility from Open Distro for Elasticsearch:

bash /usr/share/elasticsearch/plugins/opendistro_security/tools/hash.sh -p <new-password>

2. Open the file /usr/share/elasticsearch/plugins/opendistro_security/securityconfig/internal_users.yml and edit the section for the user admin where you need to replace the old hash with the newly generated one:

admin:
  hash: "<newly_generated_hash>"
  reserved: true
  backend_roles:
  - "admin"
  description: "Demo admin user"

3. Execute the securityadmin script so these changes can take effect:

cd /usr/share/elasticsearch/plugins/opendistro_security/tools/
./securityadmin.sh -cd ../securityconfig/ -nhnv -cacert /etc/elasticsearch/certs/root-ca.pem -cert /etc/elasticsearch/certs/admin.pem -key /etc/elasticsearch/certs/admin.key -h localhost

For more information visit our documentation: https://documentation.wazuh.com/4.0/user-manual/elasticsearch/elastic_tuning.html#change-elastic-pass
Best regards,
Sandra.

[Hami Ünal]

Thanks Sandra

Sandra Ocando <sandra...@wazuh.com>, 4 Kas 2020 Çar, 16:16 tarihinde şunu yazdı:

--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/1847e22c-3a17-4d6f-891b-a43fb15e33bao%40googlegroups.com.