topic Re: expert-password-hash in Firewall and Security Management

expert-password-hash

JASPAL_SINGH — Wed, 30 Jan 2019 15:18:14 GMT

Could anyone please guide me like what is the use of command set expert-password-hash ?

Actually when I used this command I am not able to login via expert password that I set before applying this command.

Re: expert-password-hash

Pieter_van_Stok — Wed, 30 Jan 2019 16:11:05 GMT

According to How to reset the Expert mode password in Gaia OS it is used to reset the Expert mode password:

Connect to the CLI on Gaia machine (over SSH or console).
Log in to CLISH as an adminRole user (a user with monitorRole does not have sufficient permissions).
Find the hash of the CLISH password:
HostName:0> show configuration
One line near the end will look similar to this:
set user <USERNAME> password-hash $1$vCbd0F3d$FjawgvrKBN.4Ed27hTPpB0
Set the hash of the CLISH password to be the hash of the Expert mode password
HostName:0> set expert-password-hash <HASH_of_CLISH_PASSWORD>
(in this case: set expert-password-hash $1$vCbd0F3d$FjawgvrKBN.4Ed27hTPpB0 )
Save the configuration:
HostName:0> save config
Set new Expert mode password:
HostName:0> set expert-password
Save the configuration
HostName:0> save config

So you don't use it AFTER you have set a password for Expert mode.

Re: expert-password-hash

PhoneBoy — Thu, 31 Jan 2019 03:14:29 GMT

Much simpler way to generate the expert password hash: cp_openssl passwd -1

Re: expert-password-hash

JASPAL_SINGH — Thu, 31 Jan 2019 12:42:46 GMT

Thanks for the information.

Re: expert-password-hash

LuisSP — Mon, 04 Mar 2019 23:37:47 GMT

Is there something similar command on appliance 1490 ?

Re: expert-password-hash

PhoneBoy — Tue, 05 Mar 2019 05:36:24 GMT

How to set a new Expert password on SMB appliances (600/700/1100/1200R/1400)

Re: expert-password-hash

Abhishek_Singh1 — Mon, 12 Oct 2020 19:12:42 GMT

Hi @PhoneBoy

I have an 1430 appliance running on R77.20 ... tried to reset the expert password with the mentioned command ( with user having admin role) but getting below error --

set expert-password-hash XXXXXXXXXXx
^
Bad parameter starting at 'expert-password-hash XXXXXX

Basically expert-password-hash is not an recognizable command on this appliance , anything else I can try ?

Re: expert-password-hash

PhoneBoy — Mon, 12 Oct 2020 19:18:39 GMT

The equivalent command on SMB appliances appears to be set expert password-hash

Re: expert-password-hash

Abhishek_Singh1 — Mon, 12 Oct 2020 19:22:04 GMT

but thats giving the below error -

"Setting expert password with hash
Expert password already set
Set expert password failed"

I need something to reset expert password 😞

Re: expert-password-hash

Wolfgang — Mon, 12 Oct 2020 19:39:14 GMT

@Abhishek_Singh1

follow How to reset Expert password on a Check Point SMB Appliance

if central managed option 3. should be your choice.

Wolfgang

Re: expert-password-hash

yashs — Fri, 16 Sep 2022 10:29:45 GMT

Please find the updated command:

Connect to the CLI on Gaia machine (over SSH or console).

Find the hash of the CLISH password:

Site-1> show configuration

One line near the end will look similar to this:

Site-1> set user yash type admin password-hash $1$g9SZB3nC$1EN5xU1xMpPk5YLGGwXYb.

Set the hash of the CLISH password to be the hash of the Expert mode password

Site-1> set expert password-hash $1$g9SZB3nC$1EN5xU1xMpPk5YLGGwXYb.

(in this case: set expert password-hash $1$g9SZB3nC$1EN5xU1xMpPk5YLGGwXYb. )

Save the configuration:

Site-1> save config

Set new Expert mode password:

HostName:0> set expert-password

Save the configuration

Site-1> save config

Re: expert-password-hash

TINTIN8 — Fri, 19 Jul 2024 06:43:54 GMT

This worked!!! Thanks bunches!!