How to Reset Hardened Repository ISO Appliance Account Lockout
Oops! Something went wrong.
Please, try again later.
This article discusses the Hardened Repository ISO, which is currently in Community Preview release state.
As a Community Preview feature, the ISO and resulting appliance are not supported by Veeam Support. For assistance with issues or to share feedback, please use the Veeam R&D forums.
Purpose
This article documents how to unlock the accounts used with the Veeam Hardened Repository ISO, veeamsvc or vhradmin, when they become locked out.
The Veeam Hardened Repository ISO deploys Rocky Linux with the DISA STIG security profile, which utilizes faillock to lock user accounts after 3 incorrect password attempts. For security reasons the root account is disabled, which means the only way reset the faillock state is to boot the appliance into single user mode.
Solution
Note: Unlocking requires console access and an appliance reboot.
- Disable all jobs to the repository, if any.
- Connect to the host with the console.
- With the console open and visible so you can watch it boot, reboot the appliance.
- When the GRUB boot menu appears, use the arrow keys to highlight the first item and press 'e' to edit the entry.
- At the end of the line that starts with linux add the following:
- Press Ctrl+x to boot with the specified parameters.
- After booting, mount the necessary partitions:
- Delete from the faillock folder the file named after the user.
- Reboot the appliance:
- The system will boot and the account will no longer be locked out.
To report a typo on this page, highlight the typo with your mouse and press CTRL + Enter.
Spelling error in text
Thank you!
Your feedback has been received and will be reviewed.
KB Feedback/Suggestion
This form is only for KB Feedback/Suggestions, if you need help with the software open a support case
Thank you!
Your feedback has been received and will be reviewed.
Oops! Something went wrong.
Please, try again later.