recover password ssh http gaia admin

[nãbru]

Good afternoon.

Guys, there's a way to recover admin password, I can't log in by ssh, http on gaia.

I don't remember the password.

https://support.checkpoint.com/results/sk/sk92347

Would this sk help?

[PhoneBoy · Accepted solution]

If you can log into SmartConsole (either standalone or distributed management), then this SK will help: https://support.checkpoint.com/results/sk/sk106490

[PointOfChecking]

Hi PhoneBoy,

I've followed the SK, but can't seem to log in still.

Entered commands as below, but when I try to log on to the GW, it still fails.

(R81.20)

Tried -1, -5 and -6

[Expert@XXXX]# cpopenssl passwd -1 XXXXXXXXXX
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

[Expert@XXXX]# $CPDIR/bin/cprid_util -server XXX.XXX.XXX.XXX -verbose rexec -rcmd /bin/clish -s -c 'set config-lock on override'
CLICMD0201 Config lock is already turned on.

$CPDIR/bin/cprid_util -server XXX.XXX.XXX.XXX -verbose rexec -rcmd /bin/clish -s -c 'set user admin password-hash XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX'

[Expert@XXXX]#

[PhoneBoy]

Suggest getting the TAC involved. 

[PointOfChecking]

Thanks for the reply PhoneBoy as usual.

I managed to solve the issue in the end and I did remove the post this morning, but seems like it didn't delete properly.

The password I used was too long and that was what caused the problem.  I used a shorter simpler password temporarily to get in, then changed it to a more complex and longer one.

Thank you!

[PhoneBoy]

A longer password shouldn’t have made a difference.
In any case, glad you were able to get back in.

[Emil_T]

In the article it says: It is possible to authenticate to a remote Security Gateway and send commands from a Security Management Server using the Check Point SIC mechanism.

The procedure involves running commands from CLI [Expert@HostName]# but there is no mention of using SmartConsole

[PhoneBoy]

In the Gateways and Servers view in SmartConsole, right click on the relevant gateway, select Scripts > Run One Time Script.
The commands can be entered there.

Another way to accomplish the same task: https://community.checkpoint.com/t5/SmartConsole-Extensions/Execute-Commands-Simultaneously-SmartCon... 

[Blason_R]

Hi,

You lost a login password? 

Of mgmt or firewall?

[Wolfgang · Accepted solution]

follow @PhoneBoy suggestion to reset via SMS or you can do it following How to set the R80.x Gaia Admin and Expert passwords with CentOS 7 LiveUSB 

sk92347 can be used only to reset the expert password

[HeikoAnkenbrand]

Have a look at the following community post:
- Password reset - Collection