topic Unable to authorize access FMC in Network Security

Unable to authorize access FMC

nethers — Fri, 21 Feb 2020 17:15:30 GMT

I have problem with access to FMC using admin account, because accidentally disable Role administrator on external authentication tab, and now i can't access the gui on FMC, but i still can access the cli using admin

anyone here know how to enable administrator role from CLI?

regards

Re: Unable to authorize access FMC

balaji.bandi — Mon, 01 Jul 2019 07:49:33 GMT

The Firepower Management Center has a web interface and Linux shell for direct management of the device.
- The Firepower Management Center supports two different internal admin users: one for the web interface, and another with shell access. These two admin users are different accounts and do not share the same password.
- Firepower Management Center internal users added in the web interface other than admin have web interface access only.
- You can grant shell access to Firepower Management Center external users.
- On the Firepower Management Center when any account with shell access logs in to the management interface, it directly accesses the Linux shell.

here is the guide

https://www.cisco.com/c/en/us/td/docs/security/firepower/623/configuration/guide/fpmc-config-guide-v623/user_accounts_for_management_access.html

Re: Unable to authorize access FMC

nethers — Mon, 01 Jul 2019 08:58:16 GMT

Hi BB,

thanks for your answer,

in my case, i totally can't access the FMC web Interface because i click an option on disable administrator, on rule option (if im not wrong) and then i lost access to web Interface

is any way to active administrator for web Interface from CLI ?

Re: Unable to authorize access FMC

balaji.bandi — Mon, 01 Jul 2019 15:21:36 GMT

Another suggestion from CLI you can create an another user with Admin full access with the below command :

> configure user add balajibandi config <-- replace balajibandi with your name then login to web

Re: Unable to authorize access FMC

nethers — Wed, 03 Jul 2019 03:50:00 GMT

Hi BB,

this happen because the Administrator Role was disabled

i just solve the problem by editing the role from the CLI

root@firesenal:/var/log/httpd# eo_tool

?> use UserRole

edit 0 (the Role number ) its mean Administrator

$VAR1 = {
'description' => 'System-Provided',
'is_active' => 1, before is 0 (because disabled from System->Users->UserRole on FMC)
'is_assigned' => 1,
'key' => 'admin',
'name' => 'Administrator',

etc...

save the config and you have access to administrator on FMC via Web

hope this help others

thanks for your help BB

regards

BMS