EDR: When Using the Edr-Docker exec cbdiag Command it Stops Running and Asks for Password
Article ID: 288276
Updated On:
Products
Carbon Black EDR (formerly Cb Response)
Issue/Introduction
The command #edr-docker exec cbdiag halts at asking for a password for the current user
Environment
EDR Container: All Supported
Cause
The PASS_MAX_DAYS for the container accounts is set to 90 days
Resolution
Attach to the container with the following command
Then inside the container run the following commands
exit the container and try #edr-docker exec cbdiag again
#docker container exec -it carbonblack-edr /bin/sh
Then inside the container run the following commands
sh-5.0#chage -M 999 root and sh-5.0#chage -M 999 cb
exit the container and try #edr-docker exec cbdiag again
Additional Information
The PASS_MAX_DAYS value can be found in /etc/login.defs in the container
Feedback
Yes
No
Powered by
