topic Re: Command set selfpasswd in Firewall and Security Management

Command set selfpasswd

oconnork — Tue, 19 Oct 2021 16:37:01 GMT

Hello team,

I hope someone could help me. I have an issue when I push the command 'set selfpasswd' (on clish) on my appliance, the shell change from clish to expert. Do you know why and how I can avoid this ?

Please see below the version of my appliance.

XXX> show version all
Product version Check Point Gaia R80.20
OS build 101
OS kernel version 2.6.18-92cpx86_64
OS edition 64-bit

Re: Command set selfpasswd

the_rock — Tue, 19 Oct 2021 17:10:03 GMT

Weird...I dont have R80.20 to test, but tried on R81 and I dont have that problem. What is exact command you ran?

Andy

Re: Command set selfpasswd

the_rock — Tue, 19 Oct 2021 17:14:11 GMT

This is what I did in the lab:

R81> set selfpasswd oldpass password@! passwd password@!1

R81> save config

After that, just logged in with new password and set expert password and also enabled winscp with chsh command, thats it.

Re: Command set selfpasswd

oconnork — Wed, 20 Oct 2021 06:56:10 GMT

I type 'set selfpasswd' then put my old password then I put the new password and that's it.

After that, when I disconnect and reconnect with same user, new password, my shell is changed to expert (linux shell) instead of clish as it was before using the command.

Re: Command set selfpasswd

oconnork — Wed, 20 Oct 2021 07:13:36 GMT

Command I run :

R80.20> set selfpasswd
Old password:
New password:
R80.20> save config

R80.20> exit

After that i have exited the console and log in again, my shell is in expert instead of clish.. Any explanation for this ?

Re: Command set selfpasswd

oconnork — Wed, 20 Oct 2021 07:16:45 GMT

and many thanks for your quick reply Andy,

Kindly,

Kalei

Re: Command set selfpasswd

the_rock — Thu, 21 Oct 2021 11:56:31 GMT

Not real sure, sorry. I tried this in R80.20 as well and worked fine, no issues. You may want to contact TAC about it. I also confirmed that BEFORE making the change, my shell was indeed in /bin/bash and not in regular shell.

Re: Command set selfpasswd

PhoneBoy — Thu, 21 Oct 2021 15:14:50 GMT

Sounds like a bug and you should involve TAC.

Re: Command set selfpasswd

oconnork — Fri, 22 Oct 2021 15:31:33 GMT

Well I don't know why but I tried to change my shell in a different way and it worked.

XXX>set user shell admin /etc/cli.sh

XXX>save config

The command set selfpasswd don't change anymore the shell from cli to bash.

Before I was using this command to change my shell : chsh -s /etc/cli.sh admin (in expert shell)

Re: Command set selfpasswd

the_rock — Fri, 22 Oct 2021 16:58:01 GMT

That makes sense, but why you had to do it, its beyond me, because I tried it on 2 R80.20 versions and no issues, though shell was in /bin/bash already.

Re: Command set selfpasswd

PhoneBoy — Fri, 22 Oct 2021 17:45:47 GMT

Changing your shell using chsh is not supported.
Most OS settings are part of a configuration database which updates the various Linux files like /etc/passwd, /etc/hosts, and so on.
Any manually applied changes like that will be overridden.

There are a handful of changes you might need to make that aren't managed via clish/WebUI.
Those you should be able to make safely.

Re: Command set selfpasswd

the_rock — Fri, 22 Oct 2021 18:34:44 GMT

O, interesting...I always used to do it via clish, though lately I just execute it via web UI.