The CARR script states “Invalid password” after providing the admin or root credentials for one or more appliances
search cancel

The CARR script states “Invalid password” after providing the admin or root credentials for one or more appliances

book

Article ID: 427208

calendar_today

Updated On:

Products

VMware NSX

Issue/Introduction

  • When running the CARR script to replace expired/expiring passwords in NSX Manager, the following message appears:

Enter '<site_name> site: <IP_address> root password (will not be displayed): 
Invalid password for <IP_address>, please check password and try again



  • SSH login as admin and as root cannot be achieved on at least one NSX Manager node in a cluster or for any Global or Local (site) Manager appliance in a Federated environment if the script is run on a Global NSX Manager.

    • Verify by attempting to open an SSH session as the root user to the IP address where Invalid Password was indicated or by accessing it via a console and running command (as the admin user): get service ssh 

Cause

SSH access via admin and root users must be enabled on all NSX Managers before running the CARR script. Right after beginning the script, it will prompt for admin or root passwords from specified IP addresses of NSX Manager nodes. Whether the provided password is actually incorrect, expired, or cannot be checked (SSH service or SSH root login option isn't enabled), the script will output the same Invalid password... message.

Resolution

Ensure that the SSH service as well as root SSH login is enabled on all NSX Manager instances. New attempts to run the CARR script can use different nodes from an NSX Manager cluster, so don't just check/update the one indicated in the error. Refer to Enable ssh root access for NSX appliances for instructions.

While logged into an NSX Manager as the admin user (do it via a VM console if SSH is not yet enabled), utilize these commands:

  • get service ssh     // this will tell you if the SSH service is running ("Service state") and if using root to login via SSH ("Root login) is enabled.

  • start service ssh     // enables the SSH connection to the appliance. Login as admin and other users besides root will also show Connection Refused when attempting to SSH to the manager node if SSH service is not enabled.

  • set ssh root-login    // enables SSH as the root user (different from connecting as admin and using command "st en" to switch to root).

Additional Information

Powered by Wolken Software