cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
1844
Views
5
Helpful
6
Replies
Korth501
Beginner

MSO Password Recovery

For some reason when recovering my MSO cluster with a backup file created the same day the tacacs domain got lost and i cannot log anymore. Next to that the local account isn't working either.

 

Is there a way to reset the password of the local account used in the GUI via CLI?

Or is there another way to reset the local account?

 

Username is admin.

 

Note. I can log in via CLI.

 

Thank you in advance.

 

Bob 

 

Update 12-01-2021: I found out that i was importing the wrong backup, so me stating that configuration got lost after restoring the backup was totally my own fault. Luckily this all happened in the testlab.

1 ACCEPTED SOLUTION

Accepted Solutions
Robert Burns
Cisco Employee

I assume this is the OVA version of MSO (rather than service engine or Nexus Dashboard. If that's the case, log into the CLI:

 

1. Delete admin credential:

/opt/cisco/msc/builds/<build_version>/bin/msc_delete_admin.sh

2. Restart msc_userservice:
docker service update --force --detach=false msc_userservice

 

This process should reset the password back to the default.

Robert

 

View solution in original post

6 REPLIES 6
Robert Burns
Cisco Employee

I assume this is the OVA version of MSO (rather than service engine or Nexus Dashboard. If that's the case, log into the CLI:

 

1. Delete admin credential:

/opt/cisco/msc/builds/<build_version>/bin/msc_delete_admin.sh

2. Restart msc_userservice:
docker service update --force --detach=false msc_userservice

 

This process should reset the password back to the default.

Robert

 

View solution in original post

Thank you Robert, this was exactly what i was searching for.

 

Is there a link to documentation where i can find these kind of actions for MSO, maybe APIC to?

 

Greetings,

Bob

Hi @Korth501 

Well, I do not see the msc_delete_admin mentioned anywere, but there are quite a lot useful tips&tricks in the cisco live presentations (especially the troubleshooting ones). Here are the good ones:

operations.png

 

 

Stay safe,

Sergiu

I'll have our docs team add into the docs.  I'll update this thread once its been added with the relevant doc link - to help others in the future find this.

Regards,

Robert

kawak_zx7
Beginner

Hi Robert,

 

Do you have the similar solution if the MSO is installed on top of virtual ASE? I can still login to virtual ASE with the rescue-user username.

 

Thank you.

 

Regards,

Albert

@albert for the MSO on ASE password recovery you will need to contact TAC as they need root access to modify the mongoDB manually to drop the admin account & reset it.  
I'd suggest to move to Nexus Dashboard if/when possible as MSO will leverage Single Sign On features and bring much better integration to both platform and other Day2 Ops tools (Nexus Insights, NAE etc).

Robert