This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Using CLI to add allowed users

Hi,

I have access using root to the UTM CLI. Is there a way to use the CLI to add the superadmin user back to the list of allowed users?

Context:

In my WebAdmin, under allowed users - I have allowed Active Directory (AD) login for a group of firewall admins. However, I have removed the superadmin (Admin) user from the allowed list of users to log in.

However, now my connection to the AD server is broken, and I would like to access my UTM Webadmin again to add the superadmin user to log in.

I cannot login now to the UTM, as the connection to AD is broken, hence there can be no authentication.

Is there a way to use the CLI to add the superadmin user back to the list of allowed users so I can login to the Webadmin to do the necessary changes to restore the connection?

Thank you!



This thread was automatically locked due to age.
Parents
  • ...and now you know why to leave the default local admin account in-place. This goes for any networked system btw. Otherwise if there's a problem with AD, you lose access to everything :)

    That being said. Login to shell via ssh as loginuser, then su - to root.
    Now run the following commands. Each command on its' own separate line, hit enter after each.:

    cc
    OBJS
    role
    role
    REF_SuperadminRole
    members=['REF_DefaultSuperAdmin']
    w

    If you prefer the builtin SuperAdmins Group instead of just the admin account, replace REF_DefaultSuperAdmin with REF_DefaultSuperAdminGroup

    The single line version from shell for the above would be:

    cc change_object REF_SuperadminRole members 'REF_DefaultSuperAdmin'

    Also, moved the thread to the correct forum, as this would fall under Management (Webadmin).  Please post in the correct forum in future instead of General Discussion.  Thanks.  :)

    __________________
    ACE v8/SCA v9.3

    ...still have a v5 install disk in a box somewhere.

    http://xkcd.com
    http://www.tedgoff.com/mb
    http://www.projectcartoon.com/cartoon/1
Reply
  • ...and now you know why to leave the default local admin account in-place. This goes for any networked system btw. Otherwise if there's a problem with AD, you lose access to everything :)

    That being said. Login to shell via ssh as loginuser, then su - to root.
    Now run the following commands. Each command on its' own separate line, hit enter after each.:

    cc
    OBJS
    role
    role
    REF_SuperadminRole
    members=['REF_DefaultSuperAdmin']
    w

    If you prefer the builtin SuperAdmins Group instead of just the admin account, replace REF_DefaultSuperAdmin with REF_DefaultSuperAdminGroup

    The single line version from shell for the above would be:

    cc change_object REF_SuperadminRole members 'REF_DefaultSuperAdmin'

    Also, moved the thread to the correct forum, as this would fall under Management (Webadmin).  Please post in the correct forum in future instead of General Discussion.  Thanks.  :)

    __________________
    ACE v8/SCA v9.3

    ...still have a v5 install disk in a box somewhere.

    http://xkcd.com
    http://www.tedgoff.com/mb
    http://www.projectcartoon.com/cartoon/1
Children
No Data