Imperva Cyber Community

communities_1.jpg
 View Only
Expand all | Collapse all

Username - admin and password is not taking in CLI remotely

  • 1.  Username - admin and password is not taking in CLI remotely

    Posted 02-27-2023 08:03

    Dear Team,

    We are able to CLI access remotely but after entering username -admin and password it is not taking.

    But with the same username and password if we put using the console then it is working.

    What is the reason for this issue and how can be fixed? 

    My secure sphere version is currently running on 13.2.0_20 for both the gateway and management server.

    Gateway model - X4510

    management model- M120

    Waiting for your reply asap.

    Regards,

    Sagar


    #On-PremisesWAF(formerlySecuresphere)

    ------------------------------
    Sony James
    Head Technical
    Quoinx Technologies Pvt Limited
    Mumbai
    ------------------------------


  • 2.  RE: Username - admin and password is not taking in CLI remotely

    Posted 02-27-2023 12:53

    Why not check the ssh daemon logs?

    console in and run:

    journalctl -uf sshd

    Now try to ssh and see what errors you are getting on console. The logs are pretty self explanatory.

    Additional questions:

    is the box setup yet? if its a new box, it wont likely have ssh access till the ftl commands are ran.



    ------------------------------
    Sarvesh Lad
    Tech Lead @ On-Prem Managed Services (WAF, DAM, DRA & Sonar)
    ------------------------------



  • 3.  RE: Username - admin and password is not taking in CLI remotely

    Posted 03-01-2023 02:24

    Dear Sarvesh,

    The below command need to run on the management server or gateway because on the management server command is not working.

    As for this command, i am running on my VM LAB for testing.

    cmd - 

    journalctl -uf sshd

    Also please confirm where I can find the sshd daemon file path.

    waiting for your reply.

    Regards,

    Sagar



    ------------------------------
    Sony James
    Head Technical
    Quoinx Technologies Pvt Limited
    Mumbai
    ------------------------------



  • 4.  RE: Username - admin and password is not taking in CLI remotely

    Posted 03-01-2023 11:16

    Hi,

    You run the command on the machine that you cannot SSH into.

    You don't need the daemon path for the sshd, the command I provided will work.

    If you still want it, run:

    systemctl status sshd and it will show the path there.

    Regards,



    ------------------------------
    Sarvesh Lad
    Tech Lead @ On-Prem Managed Services (WAF, DAM, DRA & Sonar)
    ------------------------------



  • 5.  RE: Username - admin and password is not taking in CLI remotely

    Posted 02-28-2023 10:00

    Hi Sony,

    To Sarvesh's last point - during initial setup you should create  additional users that can login over SSH. (and then those users can elevate to admin if needed)

    For more information, please see: https://docs.imperva.com/bundle/v14.7-waf-administration-guide/page/7256.htm 



    ------------------------------
    Jaired Anderson
    Imperva
    ------------------------------



  • 6.  RE: Username - admin and password is not taking in CLI remotely

    Posted 03-01-2023 01:28

    Thanks Jaired & Sarvesh,

    We will check the ssh daemon logs and let u know.

    This is an old setup and automatically this issue has occurred.

    To check this issue, we are going to the datacenter and need to take the console, and we will check these logs so this is a very hectic task.

    Is there anything else we can check from GUI for this issue? or From GUI can we take cli access?

    Regards,

    Sagar



    ------------------------------
    Sony James
    Head Technical
    Quoinx Technologies Pvt Limited
    Mumbai
    ------------------------------



  • 7.  RE: Username - admin and password is not taking in CLI remotely

    Posted 03-02-2023 04:02

    Dear Sony,

    There is nothing we can check from GUI for this issue.

    We can't access to the CLI from GUI.

    However, you can obtain the logs from GUI.

    • https://docs.imperva.com/howto/9451c27f

    You may open a case in https://support.imperva.com if the issue persists.

    Please provide the GTI logs and timeline of the issue during support case creation.

    Thank you!



    ------------------------------
    Stefan Sia
    Product Support Engineer
    Imperva Singapore
    ------------------------------



  • 8.  RE: Username - admin and password is not taking in CLI remotely

    Posted 03-03-2023 04:07

    Thank you stefan for your response.

    We will check the logs and, if possible, will raise the case with the support team.

    We have imported the backup configuration in my VM lab of customer's end configuration file so,

    Is there any command to check the policies, configuration and certificate through CLI, not from GUI?

    waiting for your reply

    Regards,

    Sagar



    ------------------------------
    Sony James
    Head Technical
    Quoinx Technologies Pvt Limited
    Mumbai
    ------------------------------



  • 9.  RE: Username - admin and password is not taking in CLI remotely

    Posted 03-03-2023 21:59

    Dear Sony,

    It's not easy to check the policies, configuration and certificate through CLI.

    • This is only for troubleshooting/debugging purpose with the help of Imperva Support.

    End users are advised to check on these information via GUI.

    Thank you.



    ------------------------------
    Stefan Sia
    Product Support Engineer
    Imperva Singapore
    ------------------------------



  • 10.  RE: Username - admin and password is not taking in CLI remotely

    Posted 03-06-2023 00:54

    Dear Stefan,

    Thank for your reply,

    I am not able to take GUI of the management server so that's the reason i need a command to run a CLI.

    As a read-only command, you can provide us with so that I can confirm that all the sites and configuration is reflected on the management server or gateway.

    For ex- show configuration command,is there anything command like that in Imperva CLI or any article regarding this?

    please provide us asap.

    Note- As command will run in only VM lab testing environment only not in production environment.



    ------------------------------
    Sony James
    Head Technical
    Quoinx Technologies Pvt Limited
    Mumbai
    ------------------------------



  • 11.  RE: Username - admin and password is not taking in CLI remotely

    Posted 03-06-2023 01:28

    Dear Sony,

    As far as I know, there is no CLI command to show configuration (e.g. policies) directly.

    From CLI, you will require to access the Db and run queries.

    It seems like your enquiries are getting out of topic. 

    Are you still facing issue while logging in via SSH ?

    If the issue persists, please open a support case as requested earlier.

    Thank you.



    ------------------------------
    Stefan Sia
    Product Support Engineer
    Imperva Singapore
    ------------------------------



  • 12.  RE: Username - admin and password is not taking in CLI remotely

    Posted 03-06-2023 01:53

    Hi Sony,

    it might sound strange but have you ever tried to type slowly (1 character per second).

    Also make sure your ssh client is not enforcing a different keyboard layout then the console does (try typing the special characters you used when the username is prompted).

    In case you restored the machine try the password you used before (just for completeness).

    In general you should avoid characters not available in US keyboard layout and spaces.

    Best Regards

    Michel



    ------------------------------
    Michel Krahl
    Solution Engineering
    Kubus IT
    Dresden
    ------------------------------



  • 13.  RE: Username - admin and password is not taking in CLI remotely

    Posted 03-06-2023 04:05

    Thanks, Kubus for your response.

    We have tried all the passwords but cannot access CLI remotely.

    I think in this version V13.2.20 there is some vulnerability is there. We are trying to upgrade it to the 13.6 version after that we will check.



    ------------------------------
    Sony James
    Head Technical
    Quoinx Technologies Pvt Limited
    Mumbai
    ------------------------------