Solved: Re: ASA error message for user account using pbkdf2

erics08 · ‎09-26-2023

Hello, I have a remote company that lost their AnyConnect password to get into our VPN. This hasn't been touched in years and I only have CLI access at this time. Any idea on this error message and how to get around it? I tried using a password that was 33 characters, upper, lowercase, numbers and special character and still got this error message. Any suggestions?

(config)# username remote_user_1 password password123! pbkdf2
ERROR: Malformed pbkdf2 hash

Milos_Jovanovic · ‎09-28-2023

Hi @erics08,

If you want to input username/password in this format, system expects to get hashed password, usually in form $sha512$5000$some_random_characters==.

If you want to reset password and input something manually, then you need to use "username remote_user_1 password password123!", without pbkdf2 keyword.

Kind regards,

Milos

View solution in original post

marce1000 · ‎09-27-2023

- FYI : https://bst.cloudapps.cisco.com/bugsearch?pf=prdNm&kw=Malformed%20pbkdf2%20hash&bt=custV&sb=anfr

M.

-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

Milos_Jovanovic · ‎09-28-2023

Hi @erics08,

If you want to input username/password in this format, system expects to get hashed password, usually in form $sha512$5000$some_random_characters==.

If you want to reset password and input something manually, then you need to use "username remote_user_1 password password123!", without pbkdf2 keyword.

Kind regards,

Milos

erics08 · ‎09-28-2023

@Milos_Jovanovic Thank you, that worked.