12-17-2018 01:50 PM
Hi,
After upgrading from Prime 3.2 to 3.5 and trying to open a shell I´ve got this message:
prime Shell will be disabled as it reached timeout. Please install root patch to enable shell
I could verify that the shell command is not visible anymore from the CLI.
Any idea about this?
Cisco Application Deployment Engine OS Release: 4.1
ADE-OS Build Version: 4.1.0.001
ADE-OS System Architecture: x86_64
Copyright (c) 2009-2018 by Cisco Systems, Inc.
All rights reserved.
Hostname: xxx
Version information of installed applications
---------------------------------------------
Cisco Prime Infrastructure
********************************************************
Version : 3.5.0 [FIPS not Enabled]
Build : 3.5.0.0.550
Thanks in advance,
HMG.
Solved! Go to Solution.
01-30-2019 12:14 PM
Hello,
For this kind of issue is better to open a TAC case so the Prime Infrastructure Engineer can recover the shell cli access using a patch file. This procedure requires TAC to copy a RootEnable patch into the Prime defaultRepo, and install it so you can recover back the shell password.
I did the below steps already and it worked. Please check below:
Recover Shell CLI Access on Prime 3.5:
To copy the file from SFTP Server to Prime 3.5:
prime3.5/admin# copy sftp://a.b.c.d/RootEnable-appbundle-x86_64.tar.gz disk:/defaultRepo
Username: cisco
Password: cisco123!
(This syntax is to copy the file from SFTP Server to the defaultRepo of the Prime).
(You can put your own credentials on your SFTP server, this is just an example).
(a.b.c.d stands for the IP Address of the SFTP Server).
Check the file got copied successfully:
apl90624/admin# show repo defaultRepo
RootEnable-appbundle-x86_64.tar.gz
Execute the install command, and below the expected output:
apl90624/admin# application install RootEnable-appbundle-x86_64.tar.gz defaultRepo
Save the current ADE-OS running configuration? (yes/no) [yes] ? yes
Generating configuration...
Saved the ADE-OS running configuration to startup successfully
Please ensure you have a backup of the system before proceeding.
Proceed with the application install ? (yes/no) [yes] ? yes
Initiating Application installation...
Application successfully installed
Reconfigure the shell password back:
apl90624/admin# shell
Shell access password is not set
Configure password for shell access
Password :
Password Again :
Shell access password is set
Run the command again to enter shell
apl90624/admin# shell
Enter shell access password :
Starting bash shell ...
ade #
Root password successfully recovered.
Hope this helps to fix the issue.
02-08-2019 06:04 AM
12-18-2018 04:11 AM
root shell is reserved for use by Cisco TAC?
look at this thread
when assisted by Cisco TAC you may be asked to install the root patch for use by the support engineer
after he finishes the root patch will be removed again.
12-18-2018 05:12 AM
Hi,
Thanks pieterh,
I thinks only root shell is reserved to Cisco TAC but admin shell.should be accessible.
Regards,
Hilario.
12-18-2018 05:12 AM
Hi,
Thanks pieterh,
I thinks only root shell is reserved to Cisco TAC but admin shell.should be accessible.
Regards,
Hilario.
12-20-2018 09:01 AM
Hi,
i have the problem too, but on my CPI i have the following:
/admin# shell
^
% invalid command detected at '^' marker.
Please HELP!!!
01-30-2019 12:14 PM
Hello,
For this kind of issue is better to open a TAC case so the Prime Infrastructure Engineer can recover the shell cli access using a patch file. This procedure requires TAC to copy a RootEnable patch into the Prime defaultRepo, and install it so you can recover back the shell password.
I did the below steps already and it worked. Please check below:
Recover Shell CLI Access on Prime 3.5:
To copy the file from SFTP Server to Prime 3.5:
prime3.5/admin# copy sftp://a.b.c.d/RootEnable-appbundle-x86_64.tar.gz disk:/defaultRepo
Username: cisco
Password: cisco123!
(This syntax is to copy the file from SFTP Server to the defaultRepo of the Prime).
(You can put your own credentials on your SFTP server, this is just an example).
(a.b.c.d stands for the IP Address of the SFTP Server).
Check the file got copied successfully:
apl90624/admin# show repo defaultRepo
RootEnable-appbundle-x86_64.tar.gz
Execute the install command, and below the expected output:
apl90624/admin# application install RootEnable-appbundle-x86_64.tar.gz defaultRepo
Save the current ADE-OS running configuration? (yes/no) [yes] ? yes
Generating configuration...
Saved the ADE-OS running configuration to startup successfully
Please ensure you have a backup of the system before proceeding.
Proceed with the application install ? (yes/no) [yes] ? yes
Initiating Application installation...
Application successfully installed
Reconfigure the shell password back:
apl90624/admin# shell
Shell access password is not set
Configure password for shell access
Password :
Password Again :
Shell access password is set
Run the command again to enter shell
apl90624/admin# shell
Enter shell access password :
Starting bash shell ...
ade #
Root password successfully recovered.
Hope this helps to fix the issue.
01-30-2019 12:21 PM
06-05-2020 02:25 AM
06-05-2020 06:54 AM
02-08-2019 05:57 AM
thanks for your info esterodr,
is there any way to get RootEnable-appbundle-x86_64.tar.gz without open a TAC?
regards :-)
02-08-2019 06:04 AM
05-01-2020 10:35 AM - edited 05-01-2020 10:38 AM
Can you check if this issue happens again? There seems to be a bug as we keep losing shell access. I have installed root patch several times. After few days I get the same time out message and have to install root patch again.
To compound the issue we ran into another potential bug where /var fills up and Prime stops working. I can't get to shell because of above mentioned issue. I had to do CentOS ISO recovery to access the /var volume and delete large files to bring up Prime.
Hope this helps if someone runs into this issue.
05-01-2020 10:47 AM
05-01-2020 10:52 AM
Thanks for the info.
Regarding the shell access ...yes we keep losing it even after installing root patch. I have another TAC case open on this. I will update you all on how it goes.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide