Description

This article describes the issue of being unable to change the password of the SRX device.

Symptoms

Unable to change the password of the SRX device

Solution

  • The password DB might be corrupted.
  • In other instances, recreating the password DB resolved the issue.
Workaround 1 :

  1. Boot the device in the single-user-mode. For more information, refer to the following link:

    http://www.juniper.net/techpubs/software/junos-security/junos-security10.2/junos-security-admin-guide/user-auth-recover-root-pwd-srx.html

  • At the following prompt, type boot -s to start up the system in the single-user mode:
    loader>boot -s

  • Remove the /etc/spwd.db.tmp and /etc/pwd.db.tmp files and perform a commit.

  • Go to the shell prompt after the reboot and make sure that the following two files are not there:
    root@FW-LC-DC-SRX-2% cd /etc
    root@FW-LC-DC-SRX-2% ls -l *pwd*
    lrw-r--r-- 1 root wheel 14 May 4 03:09 pwd.db -> /cf/etc/pwd.db
    lrw-r--r-- 1 root wheel 15 May 4 03:09 spwd.db -> /cf/etc/spwd.db

Workaround 2 :

Upgrade the device to the latest recommended release; as during the upgrade, the device rebuilds the files and during that process, it should recreate the pwd.db.tmp also.