Admin Password change

[Satwika sree]

Hi Team

I have deployed a Wazuh cluster in a distributed environment, and I want to change the admin password. I followed the instructions in this document (https://documentation.wazuh.com/current/user-manual/user-administration/password-management.html#changing-the-passwords-in-a-distributed-environment), but when I enter the admin password, it says 'invalid credentials,' even though the same password works for accessing the dashboard web page.

Can help me to fix this?

[Md. Nazmur Sakib]

Hi Satwika sree,

Hope you are doing well. Thank you for 

Let me clarify for you in detail.

You are mainly working with 3 users. 

The first one Wazuh indexer users (related to filebeat)

• admin: is the default administrator user. It's used to log in to the web interface and for communications between Filebeat and the Wazuh indexer. If you change the admin password, you must update it in Filebeat.

The second and third ones are Wazuh manager API (related to dashbaord)

• wazuh: is the default Wazuh manager API administrator user.

• wazuh-wui: is an admin user used for communications between Wazuh dashboard and the Wazuh manager API. If you change the wazuh-wui password, you must update it in the Wazuh dashboard.

The command you were referring to was not working because it was for API users.

If you do not want to change the API user password you do not need to run the below command. I believe you have already changed the admin user password in the previous step. Update that password in your every Filebeat configuration and restart Filebaet. Your system should work fine with the new admin password.

vi /etc/filebeat/filebeat.yml

output.elasticsearch:

  protocol: https

  username: admin

  password: ${password_of_admin}

If you want to change the API user.

bash wazuh-passwords-tool.sh --change-all --admin-user wazuh --admin-password <wazuh-password>

It is recommended to save the password in a safe place if you are making any changes.

I hope this clears up your confusion.

Regards

Md. Nazmur Sakib