expert-password-hash

[JASPAL_SINGH]

Could anyone please guide me like what is the use of command set expert-password-hash ?

Actually when I used this command I am not able to login via expert password that I set before applying this command.

[Pieter_van_Stok · Accepted solution]

According to How to reset the Expert mode password in Gaia OS  it is used to reset the Expert mode password:

1. Connect to the CLI on Gaia machine (over SSH or console).

2. Log in to CLISH as an adminRole user (a user with monitorRole does not have sufficient permissions).

3. Find the hash of the CLISH password:

   HostName:0> show configuration

   One line near the end will look similar to this:
   set user <USERNAME> password-hash $1$vCbd0F3d$FjawgvrKBN.4Ed27hTPpB0

4. Set the hash of the CLISH password to be the hash of the Expert mode password

   HostName:0> set expert-password-hash <HASH_of_CLISH_PASSWORD>
   (in this case: set expert-password-hash $1$vCbd0F3d$FjawgvrKBN.4Ed27hTPpB0 )
5. Save the configuration:
   HostName:0> save config
6. Set new Expert mode password:
   HostName:0> set expert-password
7. Save the configuration
   HostName:0> save config
   

So you don't use it AFTER you have set a password for Expert mode. 

[yashs]

Please find the updated command:

Connect to the CLI on Gaia machine (over SSH or console).

Log in to CLISH as an adminRole user (a user with monitorRole does not have sufficient permissions).

Find the hash of the CLISH password:

Site-1> show configuration

One line near the end will look similar to this:

Site-1> set user yash type admin password-hash $1$g9SZB3nC$1EN5xU1xMpPk5YLGGwXYb.

Set the hash of the CLISH password to be the hash of the Expert mode password

Site-1> set expert password-hash $1$g9SZB3nC$1EN5xU1xMpPk5YLGGwXYb.

(in this case: set expert password-hash $1$g9SZB3nC$1EN5xU1xMpPk5YLGGwXYb. )

Save the configuration:

Site-1> save config

Set new Expert mode password:

HostName:0> set expert-password

Save the configuration

Site-1> save config

[TINTIN8]

This worked!!! Thanks bunches!!

[PhoneBoy]

Much simpler way to generate the expert password hash: cp_openssl passwd -1

[JASPAL_SINGH]

Thanks for the information.

[LuisSP]

Is there something similar command on appliance 1490 ? 

[PhoneBoy]

How to set a new Expert password on SMB appliances (600/700/1100/1200R/1400) 

[Abhishek_Singh1]

Hi @PhoneBoy 

I have an 1430 appliance running on R77.20 ... tried to reset the expert password with the mentioned command ( with user having admin role) but getting below error --

set expert-password-hash XXXXXXXXXXx
      ^
Bad parameter starting at 'expert-password-hash XXXXXX

Basically expert-password-hash is not an recognizable command on this appliance , anything else I can try ? 

[PhoneBoy]

The equivalent command on SMB appliances appears to be set expert password-hash

[Abhishek_Singh1]

but thats giving the below error -

"Setting expert password with hash
Expert password already set
Set expert password failed"

I need something to reset expert password 😞

[Wolfgang · Accepted solution]

@Abhishek_Singh1 

follow How to reset Expert password on a Check Point SMB Appliance 

if central managed option 3. should be your choice.

Wolfgang