Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Retrieve admin access - locked out

    Scheduled Pinned Locked Moved General pfSense Questions
    13 Posts 4 Posters 1.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      SteveITS Rebel Alliance @Brutamontes
      last edited by

      @brutamontes See https://docs.netgate.com/pfsense/en/latest/troubleshooting/locked-out.html

      Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
      When upgrading, allow 10-15 minutes to reboot, or more depending on packages, and device or disk speed.
      Upvote ๐Ÿ‘ helpful posts!

      B 3 Replies Last reply Reply Quote 1
      • B
        Brutamontes @JKnott
        last edited by

        @jknott
        hi,

        I am without access to the console, because this is disabled access via ssh๐Ÿ˜ฒ

        ty

        JKnottJ 1 Reply Last reply Reply Quote 0
        • B
          Brutamontes @JKnott
          last edited by

          This post is deleted!
          1 Reply Last reply Reply Quote 0
          • B
            Brutamontes @SteveITS
            last edited by

            @steveits
            hi

            thanks for the link, I read it carefully, but I didn't see any solution for my case.

            I have the admin password, and the process of this link is to recover the password.

            I need to re-enable web access or console access๐Ÿ˜ง

            ty

            1 Reply Last reply Reply Quote 0
            • B
              Brutamontes @SteveITS
              last edited by

              @steveits

              when I do this procedure it resets the password to the default and
              REACTIVE console and web access?

              ....>
              /etc/rc.initial.password
              ....
              ....

              When the firewall reboots, login with the Default Username and Password.

              S 1 Reply Last reply Reply Quote 0
              • S
                SteveITS Rebel Alliance @Brutamontes
                last edited by

                One of the early lines in /etc/rc.initial.password says:
                "The webConfigurator admin password and privileges will be reset to the default"
                ...so if it's a permission issue that will reset those for you, sounds like.

                SSH would be remote access. Typically "console" refers to plugging in a keyboard and monitor to the device. Netgate has instructions for their devices, e.g. https://docs.netgate.com/pfsense/en/latest/solutions/netgate-2100/connect-to-console.html

                If you can get console access you should be able to edit the configuration file or copy in an old one. https://docs.netgate.com/pfsense/en/latest/config/xml-configuration-file.html#edit-in-place . Older configuration files should be in /conf/backup.

                Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                When upgrading, allow 10-15 minutes to reboot, or more depending on packages, and device or disk speed.
                Upvote ๐Ÿ‘ helpful posts!

                B 1 Reply Last reply Reply Quote 1
                • JKnottJ
                  JKnott @Brutamontes
                  last edited by

                  @brutamontes

                  I was thinking more of a monitor and keyboard or even via serial port. My pfsense firewall is connected to my 4 port HDMI/USB KVM and I can also connect via the serial port.

                  PfSense running on Qotom mini PC
                  i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                  UniFi AC-Lite access point

                  I haven't lost my mind. It's around here...somewhere...

                  M 1 Reply Last reply Reply Quote 0
                  • M
                    mcury Rebel Alliance @JKnott
                    last edited by

                    You can use the console to restore the previous config

                    dead on arrival, nowhere to be found.

                    1 Reply Last reply Reply Quote 0
                    • B
                      Brutamontes @SteveITS
                      last edited by

                      @steveits said in Retrieve admin access - locked out:

                      #edit-in-place

                      I think this is the best solution.
                      I'll try

                      As soon as I can answer

                      1 Reply Last reply Reply Quote 0
                      • B
                        Brutamontes @JKnott
                        last edited by

                        This post is deleted!
                        1 Reply Last reply Reply Quote 0
                        • B
                          Brutamontes @SteveITS
                          last edited by

                          @steveits ๐Ÿ‘ ๐Ÿ‘ ๐Ÿ‘

                          admin password reset procedure worked.
                          In addition to leaving the password as a default, it also restores the admin's access.

                          THANKS๐Ÿ‘ ๐Ÿ‘ ๐Ÿ‘

                          1 Reply Last reply Reply Quote 0
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.