Description

This article provides instructions for unblocking a cspadmin user from the Installer VM.

Symptoms

A user was unable to log in to the CSO Administration and Customer Portal even after entering valid user credentials.

The user account might be locked due to maximum failed login attempts. The default value for maximum failed login attempts is five. Users can also reset the password with the registered email address.

Solution

For CSO Version < 5

  1. Log in to the Installer VM.

  2. Navigate to /root/Contrail_Service_Orchestration_Installer_directory/scripts .

  3. Change mode to access the unlock_account.py utility by using the command chmod a+x unlock_account.py .

    Usage: python unlock_account.py <admin_portal_ui_ip> <keystone_admin_password>

    To retrieve the keystone password, check KB34353 - [CSO] Command to retrieve encrypted passwords automatically generated during installation [juniper.net] .

Snippet 

root@installervm:~/Contrail_Service_Orchestration_4.1.0/scripts# python unlock_account.py <CSO IP or Hostname> keystone_admin_password
cspadmin user is successfully Unlocked!

For CSO Version > 5

  1. Log in to the startupserver1 VM. (To know the IP address, log in to the CSO CLI and execute the script ./get_vm_details.sh at /root/Contrail_Service_Orchestration_5.1.2/ .)

  2. Navigate to /root/Contrail_Service_Orchestration_5.1.2/deploy_manager/utils/ .

  3. Change mode to access the unlock_account.py utility by using the command chmod a+x unlock_account.py .

    Usage: python unlock_account.py <admin_portal_ui_ip> <keystone_admin_password>

    To retrieve the keystone password, check KB34353 - [CSO] Command to retrieve encrypted passwords automatically generated during installation [juniper.net] .

Snippet 
root@startupserver1:~/Contrail_Service_Orchestration_5.1.2/deploy_manager/utils# python unlock_account.py <CSO IP /Hostname> HfRcApKXAdx0
/usr/local/lib/python2.7/dist-packages/requests/__init__.py:83: RequestsDependencyWarning: Old version of cryptography ([1, 2, 3]) may cause slowdown.
  warnings.warn(warning, RequestsDependencyWarning)
cspadmin user is successfully Unlocked!

Verification: Log in to the Admin portal with the username cspadmin and the correct password.

If the issue still persists, contact your JTAC Representative.

Modification History

2021-04-23: Updated steps for CSO Version 5 and later