Restore F5 root/admin password

Restore F5 root/admin password

1. 重置root密碼

進入單用戶模式

   修改密碼：

      a. 修改root

         mount -a

         passwd root

2. 重置web的admin密碼，直接在命令行passwd admin

-------------------------

如何進入單用戶模式 Solution ID: SOL4178 Booting BIG-IP in single user mode

Products:
ASM versions 9.2 - 9.2.3
GTM versions 9.2.2 - 9.2.3
LCM versions 9.2.2 - 9.2.3
LTM versions 9.0 - 9.2.3

Updated: 05-12-2006

Sometimes it is necessary to boot the BIG-IP system into single-user mode to fix operating system issues, such as filesystem or root password issues.

To boot the BIG-IP system into single-user mode, perform the following steps:

Note: To perform the following steps, you must be local to the BIG-IP system with a console connection.

1.         Connect a terminal to the BIG-IP serial console port. (Speed of Serial is 19200)

2.         Reboot the BIG-IP system.
在重啓運程中，會顯示一個 Grub 的系統引導菜單，並進入倒計數
While booting, the BIG-IP system will display the GRUB menu and will countdown before continuing the boot process.

3.         Before the countdown expires, press the ^ and v keys (SHIFT, 6, v) to select the boot p_w_picpath. 在倒計數完成之前，用向上向下箭頭選擇相應的引導文件。如果只有一個引導文件，則不需要選擇。如果有多個引導文件，一般用缺省的引導文件即可。

Note: Only one boot p_w_picpath will be available unless you have installed multiple boot p_w_picpaths.

4.         Press the e key to edit the boot options. 按 E 鍵進入引導選項編輯界面。

5.         A new menu screen displays.

6.         Press the ^ or v keys (SHIFT, 6, v) to select the line that begins with kernel /boot/vmlinuz. 用向下箭頭或 (SHIFT, 6, v) 定位到 kernel /boo/vmlinuz 的那一行

7.         Press the e key. 按 E 鍵進入引導選項編輯界面。

8.         Add the word single to the end of the kernel /boot/vmlinuz line. 在 kernel /boot/vmlinuz 那一行的末尾加上 single(single 前應有一個空格 ).

For example:

kernel /boot/vmlinuz single

9.         Press the Enter key. 按回車鍵退出編輯界面。

10.      Press the b key to boot the system using the modified options. 按 b 繼續引導過程

You have now booted the system in single-user mode. When you are finished using single-user mode, type exit or reboot to return the BIG-IP system to normal operating mode. 這樣你就進入到單用戶模式了。可以用 exit 或 reboot 命令退出單用戶模式重新進入正式模式。

 

6.2.    如何重置 root 與 web admin 密碼 Solution ID: SOL3350 Changing account passwords for the command line and Configuration utility

Products:
BIG-IP ASM version 9.2
BIG-IP LTM versions 9.0 - 9.2

Updated: 02-18-2006

How do I recover a lost or forgotten root password?

1.1.1                       Changing Root and Support Passwords

To reset a lost or forgotten root or support password, perform the following steps:

1.         Boot the system into single-user mode.

Note: For specific instructions, refer to SOL4178: How do I boot BIG-IP into single-user mode?

2.         Type the following commands:

mount -a

passwd <account>

For example:

passwd root

3.         When prompted, enter a new password.

4.         Type exit or reboot to return to the normal operating mode.

After the system reboots, you should be able to log in using the new password.

1.1.2                       Changing an Administrative Account Password

Note: If you have not lost the password, but want to change it, F5 Networks recommends that you do so using the Configuration utility. Changing the admin password from the command line will result in passwords that are different on each BIG-IP in a redundant pair, which will prevent configuration synchronization from working correctly. For specific instructions about how to change a Configuration utility admin password, refer to the Managing User Accounts chapter of the BIG-IP Systems Management Guide.

To reset a lost Configuration utility admin account password from the command line, perform the following steps:

1.         Log in to the command line.

2.         Reset the admin password, by typing the following command:

passwd admin

3.         When prompted, enter the new admin password.

4.         When prompted, retype the new admin password.

BIG-IP will display the following message:

passwd: all authentication tokens updated successfully.

5.         For a redundant pair, repeat these steps on the peer system. Configuration synchronization will not work correctly until the passwords match.