* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com

* Podcasts
* Social Channels
* Video Streaming

 

 

 

 

 

ABOUT DEVCENTRAL

DevCentral News Technical Forum Technical Articles Technical CrowdSRC Community Guidelines DevCentral EULA Get a Developer Lab License Become a DevCentral MVP

RESOURCES

Product Documentation White Papers Glossary Customer Stories Webinars Free Online Courses F5 Certification LearnF5 Training

SUPPORT

Manage Subscriptions Professional Services Professional Services Create a Service Request Software Downloads Support Portal

PARTNERS

Find a Reseller Partner Technology Alliances Become an F5 Partner Login to Partner Central

---

©2024 F5, Inc. All rights reserved.

Hi,

Im setting a new F5 VE 15.1 big ip, and first i want to change expired passwords. ACtually i can only do it from the brownser.

Im have been testing the REST API like, but i cant make it work.

$secpasswd = ConvertTo-SecureString 'default' -AsPlainText -Force

$mycreds = New-Object System.Management.Automation.PSCredential 'root', $secpasswd

$Props = @{

    Uri                     = \"https://10.21.65.11/mgmt/tm/auth/root \"

    Credential              = $mycreds

    ContentType             = \"application/json\"

    Body                    = $payload

    Method                  = \"Patch\"

    SkipCertificateCheck    = $True

    Verbose                 = $True

}

invoke-restmethod @Props

VERBOSE: PATCH https://10.21.65.11/mgmt/tm/auth/root with 64-byte payload

payload is:

{

  \"oldpassword\": \"default\",

  \"newpassword\": \"example1234\"

}

VERBOSE: received 165-byte response of content type application/json

invoke-restmethod : {\"code\":401,\"message\":\"Authentication failed: Password expired. Update password via /mgmt/shared/authz/users.\",\"restOperationId\":6489074,\"kind\":\":resterrorresponse\"

So then i try: (with same credentials an payload)

VERBOSE: PATCH https://10.21.65.11/mgmt/shared/authz/users/admin with 64-byte payload

VERBOSE: received 381-byte response of content type text/html

invoke-restmethod :

401 Unauthorized

Unauthorized

I see it changes the admin password but not root's. Am I missing something ? 

I see it changes the admin password but not root's. Am I missing something ? 

Try changing the admin password first by sending a PATCH request with \"oldpassword\" and \"password\" (not \"newpassword\") properties: e.g.,

curl -sku admin:admin https://<mgmtIP>/mgmt/shared/authz/users/admin \\\n  -X PATCH -H \"Content-type: application/json\" \\\n  -d '{\"oldPassword\":\"admin\", \"password\":\"superuser1000\"}'

This action changes the admin password to \"superuser1000\". It also changes the root password to \"superuser1000\". See also K10612010.

Try changing the admin password first by sending a PATCH request with \"oldpassword\" and \"password\" (not \"newpassword\") properties: e.g.,

This action changes the admin password to \"superuser1000\". It also changes the root password to \"superuser1000\". See also K10612010.

The F5 Academy Roadshow is rolling into 19 cities (plus two virtual stops), and if you work with apps, APIs, or infrastructure, this event was built for you.

In the ever-evolving world of application delivery and security, gaining actionable insights into your infrastructure and applications has become more critical than ever. The Application Study Tool (AST) is designed to help technical teams and administrators leverage the power of open-source telemetry and visualization tools to enhance their monitoring, diagnostics, and analysis workflows.

From this I understand, the change to both admin and root happens only when the passwords expire.