Help, I did a big goof!

Posted by This_guy_works@reddit | sysadmin | View on Reddit | 8 comments

So I'm in the vCenter console logged in as administrator@vsphere.local account. I changed the password to something random using our password manager as a good tech does, however, when I went to change it said something along the lines of "password does not meet requirements, unable to change password." I tried several different passwords that were not meeting the requirements, but one of them must have worked, as now when I tried to change the password it says the previous password is not correct. So one of the randomized passwords mut have taken, but I have since deleted that password. I am still in the client under the new password, but as soon as I log out, I am not able to get back in. Is there anything I can do while still logged into the system to recover before it disconnects, and I can no longer access the system?

Reply to Post

8 Comments

[-]

ryan5084@reddit

Do you have another account with global administrator rights? Log in as one of those, then hit the three lines button at the top left > Administration > Single Sign on (left side) and users and groups. Select the vsphere.local domain and you should be able to set a new password from there by hitting edit.

[-]

This_guy_works@reddit (OP)

Awesome. I was able to change the admin password while still logged in using this method, without needing the unknown password. I now have the administrator password set properly and I have a second admin account created as commented above. What a way to end a Friday. Thought I'd have to reset the box.

[-]

SuperDo_RmRf@reddit

“Read-Only Fridays” my friend. Enforce ‘em.

[-]

ryan5084@reddit

Glad you got it fixed up!!

[-]

-Shants-@reddit

Can you create a new admin account?

[-]

This_guy_works@reddit (OP)

Yes, I created a new admin account. Thankfully that looks to be working. I had to create the account, then apply it to the administrators group.

[-]

-Shants-@reddit

That’s great! You should keep one as a break glass account if possible

[-]

Dimens101@reddit

Your vcenter appliance also required a separate account next to administrator@vsphere.local, should be able to reset your vsphere account with that from CLI, its a specific linux command easily found on vmware forums. Had the same situation and created call for it and this is what they did but seeing you are still logged in creating second admin account would prob be quicker.