Samour Absent Member.
Absent Member.
3159 views

admin user disabled in ESM 6.5c; resetpwd does not re-enable user

Jump to solution

Has anyone had this issue before?

Any suggestions?

Labels (1)
0 Likes
1 Solution

Accepted Solutions
Acclaimed Contributor.. balahasan.v1 Acclaimed Contributor..
Acclaimed Contributor..

Re: admin user disabled in ESM 6.5c; resetpwd does not re-enable user

Jump to solution

Hi Samer,

1. Try setting this values in manager/config server.defaults.properties

# Maximum number of failed logins to allow. A value of -1 means that there is

# no limitation.

auth.failed.max=-1

# Time in minutes after which accounts that were disabled after a number of

# failed login attempts will be re-enabled automatically. Set this value to

# -1 if you wish to manually re-enable user accounts.

auth.auto.reenable.time=-1

2. Restart Manager. Then try below

3. Then try arcsight reenableuser admin

4. Then try arcsight resetpwd admin


Or If it didn't work after that follow vice versa order from step 4->1


And reset the server.defaults.properties back to normal

0 Likes
8 Replies
kreed7 Absent Member.
Absent Member.

Re: admin user disabled in ESM 6.5c; resetpwd does not re-enable user

Jump to solution

This is from the ESM 5.5 Admin Guide Documentation. I am not sure if it has changed, but I am doubtful.

arcsight reenableuser username

0 Likes
Highlighted
Samour Absent Member.
Absent Member.

Re: admin user disabled in ESM 6.5c; resetpwd does not re-enable user

Jump to solution

I wish it were that simple

./arcsight reenableuser admin

Assuming ARCSIGHT_HOME: /opt/arcsight/manager

Assuming JAVA_HOME: /opt/arcsight/manager/jre

ArcSight user account re-enabler starting...

Sending request to re-enable user 'admin' to Manager ... done.

Waiting for response from Manager ... User account was already enabled.

I'm not sure how the user got disabled in the first place.

If I recall there is a way to reset it directly from the DB.

0 Likes
Acclaimed Contributor.. balahasan.v1 Acclaimed Contributor..
Acclaimed Contributor..

Re: admin user disabled in ESM 6.5c; resetpwd does not re-enable user

Jump to solution

Hi Samer,

Can u share us what log u are getting while trying to Authenticate from Manager

0 Likes
Samour Absent Member.
Absent Member.

Re: admin user disabled in ESM 6.5c; resetpwd does not re-enable user

Jump to solution

It just says something like:

The user has been disabled. Please contact the System Administrator.

0 Likes
Acclaimed Contributor.. balahasan.v1 Acclaimed Contributor..
Acclaimed Contributor..

Re: admin user disabled in ESM 6.5c; resetpwd does not re-enable user

Jump to solution

Hi Samer,

1. Try setting this values in manager/config server.defaults.properties

# Maximum number of failed logins to allow. A value of -1 means that there is

# no limitation.

auth.failed.max=-1

# Time in minutes after which accounts that were disabled after a number of

# failed login attempts will be re-enabled automatically. Set this value to

# -1 if you wish to manually re-enable user accounts.

auth.auto.reenable.time=-1

2. Restart Manager. Then try below

3. Then try arcsight reenableuser admin

4. Then try arcsight resetpwd admin


Or If it didn't work after that follow vice versa order from step 4->1


And reset the server.defaults.properties back to normal

0 Likes
Samour Absent Member.
Absent Member.

Re: admin user disabled in ESM 6.5c; resetpwd does not re-enable user

Jump to solution

Great!

Thanks that worked.

I didn't even have to reset the password.

0 Likes
Acclaimed Contributor.. balahasan.v1 Acclaimed Contributor..
Acclaimed Contributor..

Re: admin user disabled in ESM 6.5c; resetpwd does not re-enable user

Jump to solution

Hi Samer,

Have u reset the default settings in the server.defaults.properties back to normal, If u r using the ArcSight in Production

# Maximum number of failed logins to allow. A value of -1 means that there is

# no limitation.

auth.failed.max=3

# Time in minutes after which accounts that were disabled after a number of

# failed login attempts will be re-enabled automatically. Set this value to

# -1 if you wish to manually re-enable user accounts.

auth.auto.reenable.time=10

0 Likes
Samour Absent Member.
Absent Member.

Re: admin user disabled in ESM 6.5c; resetpwd does not re-enable user

Jump to solution

Yup.

It's a DEV instance so no issue.

Thanks again

-S

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.