For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Greg_33932's avatar
Greg_33932
Icon for Nimbostratus rankNimbostratus
Apr 24, 2014

Update/Change root password on LTM

We just had a worker leave the company and its our policy to change it when they leave. We are looking to change the root password. We have the password on our F5 units so not sure this document applies as it describes if root password is forgotten or lost, however I find no others that seem to be a better fit. Surely there is a better method if you have the password.

 

Can someone confirm this is the best method of changing the root password even if we have it? Support article: http://support.f5.com/kb/en-us/solutions/public/3000/300/sol3350.html

 

Thanks in advance!

 

application delivery
BIG-IP Access Policy Manager (APM)
LTM
management
security
TMSH

7 Replies

  • Patrik_Jonsson's avatar
    Patrik_Jonsson
    Icon for MVP rankMVP
    Apr 24, 2014

    I would either change it as admin in the GUI via System/Platform or login via SSH and enter 

    passwd root
    .

    Is that what you're looking for?

    /Patrik

  • What_Lies_Bene1's avatar
    What_Lies_Bene1
    Icon for Cirrostratus rankCirrostratus
    Apr 24, 2014

    Looking ahead, you really shouldn't be using the root account at all. What's wrong with an individual admin level account per user.

     

  • Greg_33932's avatar
    Greg_33932
    Icon for Nimbostratus rankNimbostratus
    Apr 24, 2014

    Patrick, Are you sure that applies to the root account? It sounds like I have to use the single-user mode to update the PW for root.

     

    What Lies Beneath, Not sure you read my question right. We are not using it but in emergency situations. We are looking to update the password. We have the password, I'm wanting to know if the only way to update the root password is to treat it as a "lost" password even when I have the password.

     

    And thanks all!

     

    • What_Lies_Bene1's avatar
      What_Lies_Bene1
      Icon for Cirrostratus rankCirrostratus
      Apr 24, 2014
      Understood. As you've found, password works, and not just in single user mode.
  • Greg_33932's avatar
    Greg_33932
    Icon for Nimbostratus rankNimbostratus
    Apr 24, 2014

    Patrick, I spoke too soon. I just tried it and it seemed to work on the 10.2 test box I have and it appears to take that command. I'll give it a go. Thank you sir!

     

    ---------Updated---------------------------

     

    And to confirm it worked if anyone else needs/wants confirmation.

     

    Logged in as root with old PW, used the command passwd root and entered in the new PW, confirmed, duplicated on other unit and then sync'd. no problem at all.

     

    Thanks again everyone!