fireglass ID account locked / Unlock OR Reset fireglass user account ( Shell / CLI Access Password )

Products

• Web Isolation

Issue/Introduction

At times because of forgotten password or wrong password attempt consecutively for 5 times the user account fireglass can get locked out.

Environment

Release : 1.14+

Component : OS

Cause

Account Lockout policy.

Consecutively 5 incorrect passwords while logging in locks out the account.

Resolution

If you have access to the shell through another user account, 

You can issue below to reset the locked fireglass account. 

eg:

sudo pam_tally2 --user=fireglass --reset
sudo passwd -u fireglass

 

To Test:

 

su - fireglass

 

Enter password and issue below command.

 

whoami

 

example:

[email protected]:~$ su - fireglass
Account locked due to 5 failed logins
Password:
su: Authentication failure
[email protected]:~$
[email protected]:~$
[email protected]:~$ sudo pam_tally2 --user=fireglass --reset
[sudo] password for fireglass1:
Login           Failures Latest failure     From
fireglass           5    05/24/21 05:28:37  /dev/pts/4
[email protected]:~$
[email protected]:~$ sudo pam_tally2 --user=fireglass --reset
Login           Failures Latest failure     From
fireglass           0
[email protected]:~$ sudo passwd -u fireglass
passwd: password expiry information changed.
[email protected]:~$
[email protected]:~$ su - fireglass
Password:
[email protected]:~$ whoami
fireglass
[email protected]:~$

 

 

Above steps should be enough to unlock the account. In case you also want to reset the password, you can issue:

 

sudo passwd fireglass

 

 

Otherwise, Create a ticket to web isolation support team.

 

From the management console, enable remote support by Going to System Configuration > Gateways, editing gateway and checking below options

 

 

 

Once remote support is enabled, fireglass support team can login remotely and follow the same commands as above to reset it.