Re: [Unity-idm-discuss] Unity admin interface password lost

[Fernandez R. D. <dan...@ep...>]

Dear Krzysztof,


thanks a lot for your suggestion. That did the trick! I was able to create a new admin user and use that one to login.

Now I gained back control over my Unity instance.


Thanks a lot!!

Daniel.

________________________________
From: Krzysztof Benedyczak <kb...@un...>
Sent: Friday, January 14, 2022 9:52:58 AM
To: Fernandez Rodriguez Daniel; uni...@li...
Subject: Re: [Unity-idm-discuss] Unity admin interface password lost

Dear Daniel,

W dniu 13.01.2022 o 15:39, Fernandez Rodriguez Daniel via Unity-idm-discuss pisze:

Dear Unity admins,


my name is Daniel Fernandez.

A few werks ago, I inherited a working Unicore/Unity deployment. Unfortunately its configuration is not documented AT ALL and the person who configured it left the company some time ago...

I would like to login into the UNITY administration interface but unfortunately I don't have the admin password.
Is there a way I can reset the password for the admin user? I have full access to the server and the H2 database files.

I tried to connect to the H2 database with the user 'sa' (same password) but it did not work..
We are running Unity 2.6.2 version.

Ouch, that's an old instance. Set those two properties in unityServer.conf (also - worth trying if you still have those, whether the credentials from there work?):


unityServer.core.initialAdminUsername=my-new-admin-user
unityServer.core.initialAdminPassword=my-new-admin-pass


and restart. You have full reference here http://www.unity-idm.eu/documentation/unity-2.6.0/manual.html#configuration


That might not be all. Inspect logs carefully. In general you should have new user added with the above password. However there are two caveats:

1. (unlikely) the password you set need not to be super easy, might be rejected. The best is to use something random and longer than few chars.

2. (possible) the password will be assigned to a credential with id 'sys:password'. Now, your former admin could disable this credential from the authn options enabled on AdminUI. If that is the case you will have to add it in unityServer.conf (there should be authenticator using this credential + the authenticator needs to be enabled on AdminUI endpoint.


HTH,
Krzysztof