How To Reset Password for nsroot account for VPX On SDX

How To Reset Password for nsroot account for VPX On SDX

book

Article ID: CTX322860

calendar_today

Updated On:

Description

SVM UI does show VPX instance as “Out of Service” due to the password change done directly within VPX instance (password set in admin profile currently assigned to VM does not match to nsroot password on VPX)
In addition, password for VPX instance has been lost and admin needs to reset it to new one and correct the VM Instance State in SVM UI.



 

Resolution

Complete the following steps to reset the nsroot password for VPX instance:
1. Access the VPX Console :
a) You can either access virtual console connection from within dom0 (refer to CTX136121 - How to Open a Session to a Citrix ADC VPX Instance via SDX console)
or
b) You can use built-in Console option within SVM GUI:
First make sure open SVM GUI using https (Console option does not work if logged in using http)
Select the VPX instance and click on “Console


Separate browser window will pop up with console connection to selected VPX

 
  1. Reboot the Citrix ADC VPX instance:
You can either do it from SVM GUI


Or dom0 (virtual console connection from Xen)


 
  1. Press CTRL+C when the following message appears:
Press [Ctrl-C] for command prompt, or any other key to boot immediately

 
  1. Run the following command to start the Citrix ADC in a single user mode:
boot -s

After the appliance boots, it displays the following message:
Enter full path name of shell or RETURN for /bin/sh:
Press Enter to go into command prompt

 
  1. Run the following commands to mount the file system:
    1. First to check the disk consistency:
fsck_ufs /dev/ad0s1a

 
    1. Run the following command to display the mounted partitions:

 
    1. Run the following command to mount the flash drive:
mount /dev/ad0s1a /flash


 
  1. Run the following command to change to the nsconfig directory:
cd /flash/nsconfig


 
  1. Run the following commands to rewrite the ns.conf file and remove the "set system user" command defaulting the password for nsroot.
  1. Run the following command to create a configuration file that does not have commands for nsroot account:
grep –v “set system user nsroot” ns.conf > new.conf

  1. Run the following command to make a backup of the existing configuration file:
mv ns.conf old.ns.conf

  1. Run the following command to rename the new.conf file to ns.conf:
mv new.conf ns.conf


 
  1. Run the following command to reboot the Citrix ADC:
reboot


 
  1. After the VPX reboots, log on to ADC VPX instance using the default nsroot password
  2. Run the following command to set the new password for nsroot account:

 
  1. Create new admin profile in SVM GUI , containing the newly set password.
 



 
 
  1. In SVM GUI - edit the VPX instance in question and change/set the newly created admin profile.
 
 







 
 
  1. Once the new admin profile has been applied, after couple of seconds SVM will show our instance as UP/UP and accessible:


 

Problem Cause

Password change done directly within VPX instance (password set in admin profile currently assigned to VM does not match to nsroot password on VPX) - resulted in lack of communication between SVM and VPX VM