Dashboard/Indexer Admin password change

[Dinie Rosli]

Hi All,

It seems most documentation about changing Admin password for the dashboard is outdated. 

I've tried curl  -so wazuh-passwords-tool.sh  https://raw.githubusercontent.com/wazuh/wazuh-documentation/4.1/resources/open-distro/tools/wazuh-passwords-tool.sh 

And running bash wazuh-passwords-tool.sh -u admin -p xxxxxxxxxx

Error: Open Distro is not installed on the system.

But the error Open Distro comes up. This is on version 4.3.9. 

Would appreciate assistance on this, since need to change the admin password asap for security purposes. 

[Abdullah Al Rafi Fahim]

Hello,

There you can have the recent & updated documentation on changing the Wazuh Indexer password: https://documentation.wazuh.com/current/user-manual/securing-wazuh/wazuh-indexer.html#change-the-wazuh-indexer-passwords 

For changing the password, first you have to download the wazuh-passwords-tool.sh script:

curl -so wazuh-passwords-tool.sh https://packages.wazuh.com/4.3/wazuh-passwords-tool.sh

Then, run the following command:

bash wazuh-passwords-tool.sh -u admin -p <mypassword>

Please replace <mypassword> with your expected password for the user admin.

I hope this helps. Please let us know if you need anything else.

[Dinie Rosli]

Hi,

I tried using that command but I keep getting below error:

bash wazuh-passwords-tool.sh -u admin -p xxxxxxxxxxxxxxxxxxx

15/11/2022 05:44:42 ERROR: The password must have a length between 8 and 64 characters and contain at least one upper and lower case letter, a number and a symbol(.*+?-).

The password I used is from random pass generator, which is 22 length in character and includes all the listed criteria above, Upper case, lower case, number, and a symbol. But still gives that error. I tried generating another random password, same error. 

[Abdullah Al Rafi Fahim]

Hello,

This ERROR message indicates an issue with the password format. Otherwise, the output should be something like this:

Can you please share one random password that you tried to use so that I can review that and identify the issue? You can reply privately if you want to avoid sharing it in public.

I will wait for your response here. 

[Dinie Rosli]

Hi Abdullah,

I'll share it in public since the password did not work anyway and will generate another one. But below are two examples of password I tried that gets the same error:

[root@ ossec]# bash wazuh-passwords-tool.sh -u admin -p WX5gItEHrpDV84adv6@#Xk

15/11/2022 05:44:42 ERROR: The password must have a length between 8 and 64 characters and contain at least one upper and lower case letter, a number and a symbol(.*+?-).

[root@ ~]# bash wazuh-passwords-tool.sh -u admin -p w8$%jW7$*%iHyn7zP7
15/11/2022 05:40:57 ERROR: The password must have a length between 8 and 64 characters and contain at least one upper and lower case letter, a number and a symbol(.*+?-).

[Abdullah Al Rafi Fahim]

Hello,

I have reviewed the passwords that you have used and tested them in local lab to identify the issue. Let me clarify the issues here:

Password - WX5gItEHrpDV84adv6@#Xk

Though this password has 22 characters with upper and lower case letters, numbers and special characters, there was none of these mentioned symbols (.*+?-) used. In my lab, I just added a dot (.) in this password and it worked fine.

Password - w8$%jW7$*%iHyn7zP7

Here the $ character is creating an issue. In linux command, $ABC will be counted as the value of variable ABC and that is conflicting with the proper value of the password. Just removing the $ characters from the password made it work in my lab.

Therefore, I would request you to try with another password considering the above mentioned issues. I hope it will work. Please let us know how it goes. 

[Dinie Rosli]

Hi Abdullah,

I managed to get it to work now. I didn't realize the symbol (.*+?-) did not include all the special characters. By including any of the symbols, it now works.

Thanks! 

--
You received this message because you are subscribed to a topic in the Google Groups "Wazuh mailing list" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/wazuh/ipoZJSNxzJA/unsubscribe.
To unsubscribe from this group and all its topics, send an email to wazuh+un...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/f4626f1a-e3f2-4fca-8909-40373a7df3f9n%40googlegroups.com.

[Abdullah Al Rafi Fahim]

Hello,

I am happy to know that it finally worked as you expected. You are always welcome to share your queries or issues regarding Wazuh with us. Cheers!