root account -unknown password

[owahid]

hello

I have an isssue with root account on a brocade san switch , the account is disabled by default , I enabled the account and try to login with the it but I get access denied , when login with admin I get a message that the root account password do not changed . I used the default "root" and "password"

My questions:

why I can not login with the default?

Can I recover the password for the root account to the default ,"although no one changed it"?

Thanks

[Yeskay]

Hi owahid,

I understand that you are unable to login to the root account. Please note that the root account is not needed for the normal admin activities. It is for service/support purpose. I see that the password you are using for the root account is "password", which is incorrect. The default root account password is "fibranne" without quotes. Try this password and you should be able to login to the switch as root.

[owahid]

Many thanks for your helful support

but I have some questions:

I have more than one HP san switch (brocade ) and the older switches have the root account enabled and have password , Do you want to say the newer switches have the root account disabled by default and can not be used by customer??

I used the password you specify but I did not get access denied instead I console closed autmatically even if the account is enabled .

All I want to do is to secure this accounts by changing its defaualt passwords , How to secure this account ,all I have to do just disable the account or thier is something else to do.

[Yeskay · Accepted solution]

Hi @owahid ,

From FOS 8.0.x onwards, the default switch “root” account is disabled on switches that have FOS v8.0.x installed at the factory. For administrators who want to enable the “root” account, a new command rootAccess is provided to control the management interfaces allowed to have root account login. While upgrading FOS from old version to 8.x versions, root account is disabled by default.

I see that the ssh/putty screen disappears when you entered the correct password. This indicates that root access is not enabled for all interfaces. It may be enabled only for console or may not be enabled for any interfaces. Follow the steps below to resolve this issue:

Login to the switch CLI as "admin" user and enter the following commands.

#userconfig --change root -e yes
#rootaccess --set all

(Options are <none/consoleonly/all> The "none" option disables root account access, "consoleonly" permits root access via the console only (this is default enabled option) while "all" allows root access through all interfaces.)

Now you should be able to login to the switch using root account.

[owahid]

That was very helful

Very Big Thaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaanks

[Lekhpal]

Hello.  I think after FOS 9.X they have discontinued the root access.  So, what is the alternative way to access via root account.  

We use to access our switches from a linux host for some scripts and outputs and it is failing nowoot@vm06v ~]# ssh 10.8.X.XXX fosexec 128 -cmd 'firmwareshow'
ECDSA key fingerprint is SHA256:ClF+WGWoCFoD5voBgFTyvD+YD/G19fdCXYqBS5er9iQ.
ECDSA key fingerprint is MD5:24:25:66:7e:9f:91:7c:00:6a:71:f7:c4:4b:64:bd:c5.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '10.8.X.XXX' (ECDSA) to the list of known hosts.
root@10.8.X.XXX's password:
Received disconnect from UNKNOWN port 65535:2: Root access is not supported
Authentication failed.

This used to work in previous FOS version.

Thanks.

[Sunitha_Mod]

Hello @Lekhpal,

Thank you for posting! 

You might want to consider creating a new topic by utilizing the "New Discussion" button, as this will not only enhance visibility compared to the old topic but also boost your chances of receiving responses from experts.

[Lekhpal]

Got it.  Instead of root, which has been discontinued as I mentioned earlier, now they have another user 'maintenance', and functions similar to root in most of the respects. Just need to enable it once and set the password during first login. All set now.  Best..