12-29-2023 08:21 AM
Hi all;
Consider you want to login to your ISE in CLI mode and your "Admin" password has expired. ISE provides you with password changing procedure and you successfully change your password. As I know, there is no "write memory" or "copy running-config startup-config" in ISE 3.2 and as Cisco's documentation, ISE should preserve the changes automatically. But in my case, after changing the password and then rebooting the box, ISE complains again expired "Admin" password.
Any ideas?
Thanks
Solved! Go to Solution.
01-10-2024 08:22 PM - edited 01-10-2024 08:23 PM
Thanks for your support;
The problem was solved by following the procedure below:
The interesting thing was that when I executed the "halt" command, it did not force me to accept writing changes to the startup config.
12-29-2023 08:46 AM
After login type password and change it again, reboot the box and check it. Also check the Password Policy on GUI as adjust it as required.
12-29-2023 02:50 PM
Hi @rezaalikhani ,
please take a look at CSCwd73787 CLI password change doesnt persist in Confd DB after "password" command., fixed on ISE 3.2 P1.
Hope this helps !!!!
12-30-2023 10:39 PM
I use ISE 3.2 Patch 4.
01-01-2024 08:41 PM
@rezaalikhani Are you able to log back-in right after updating the password but before rebooting? If so, please use the CLI exec command "show running-config username" before the reloading and after. I tried changing the CLI password on one of my ISE 3.2 Patch 4 nodes and it worked fine as expected.
BTW, is this ISE upgraded from an earlier ISE release?
01-04-2024 05:41 AM - edited 01-04-2024 05:41 AM
Yes, i have upgraded from previous patch versions as follows:
01-09-2024 02:52 PM
@rezaalikhani Are you able to compare the username line before and after reload? I meant ISE regular releases but not patch releases. Use ISE admin CLI command "show version history".
At this point, please engage Cisco Support if not already done so.
01-10-2024 08:22 PM - edited 01-10-2024 08:23 PM
Thanks for your support;
The problem was solved by following the procedure below:
The interesting thing was that when I executed the "halt" command, it did not force me to accept writing changes to the startup config.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide