03-25-2019 08:29 AM - edited 07-05-2021 10:07 AM
I have upgraded CMX 10.5 to 10.6 and I am having some problems with the upgrade. One of my problems is I am now getting the certificate error again. I need to log in with the root user to correct the certificate issue, but I'm not able to get access with that user. Are you no longer allowed to access CMX 10.6 with the root user?
Solved! Go to Solution.
03-26-2019 11:18 PM
I can confirm that, installed CMX 10.6 and had log a TAC with Cisco on an issue I had with my maps. They wanted to get access via the root account and realized that this can't be done with the 10.6 version. They advised that there will be a patch release to resolve this.
03-25-2019 06:12 PM
03-26-2019 08:36 PM
I think you are right, with CMX 10.6.x it does not allow to got to root user mode using "su root" once you are in cmxadmin CLI.
Rasika
03-26-2019 11:18 PM
I can confirm that, installed CMX 10.6 and had log a TAC with Cisco on an issue I had with my maps. They wanted to get access via the root account and realized that this can't be done with the 10.6 version. They advised that there will be a patch release to resolve this.
03-27-2019 12:27 AM
Ok great, thanks for the information.
12-19-2019 12:50 AM
Do you have a BugID for this issue with not being able to login with root in 10.6 ?
Thanks :-)
/Thomas
12-19-2019 01:47 AM
Hi,
I don't think it's a bug, but more a security change after release 10.2.
In this document: https://www.cisco.com/c/en/us/td/docs/wireless/mse/10-6/cmx_config/b_cg_cmx106.pdf
You can find the following info:
Root User Changes
In releases prior to Cisco CMX 10.2, all the processes used the root user role. This has been changed in Cisco
CMX 10.2 by introducing two new user roles: cmx and cmxadmin. The cmx user is a no-login user who owns
all the processes, except postgres. The cmxadmin is the primary user who performs all the administrative
tasks.
The root user is not disabled; this user can still be used for installation and debugging. You cannot directly
log in to root through SSH or console. First you have log in as cmxadmin and then issue the su command to
go to the root user level.
Do not use the root user account; unless explicitly directed to do so by the Cisco Technical Assistance Center
team.
06-27-2019 12:04 PM
I found this document for resetting the root password:
https://www.cisco.com/c/en/us/td/docs/wireless/mse/10-6/cmx_config/b_cg_cmx106.pdf
I tried this procedure on a new VMware image with cmx10.6.1 and although i was able to change the root password succesfully , the root password has no access. ;-(
Maybe the solution provided in this document works for upgrade 10.5 to 10.6?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide