Changing an expiring user password from the NSX UI fails to update the password and shows the password as expired after the change is made.

Products

• VMware NSX

Issue/Introduction

• There is an alarm for password about to expire showing in the NSX UI.
• Attempts to change the password in the UI seem to work, but the password still shows as expired.
• Attempts to change the password in the CLI of the NSX Manager also seems to work and the password still shows as expired.
• Running the command chage -l <username> from the root CLI of an NSX Manager node shows the password as expiring or already expired.

Environment

• VMware NSX 4.x

 

Cause

The password for this user is getting reset by the CORFU quorum between the NSX manager nodes.  This can occur if the username is one that was added as a local account and is not a default NSX user or if the password that is being changed is for the root user.

Resolution

Follow the instructions presented in NSX documentation Resetting the Passwords of an Appliance.