Troubleshooting Tip: Password change for admin account via the CLI

Description

This article describes how to address the error 'Old password checking error' when attempting to change password via CLI.

Scope

FortiPAM.

Solution

The enforcement of the old password is required on the GUI when an attempt is made to reset the admin account password; however, this can be bypassed using the CLI.

In the CLI:

The screenshot below exhibits an incorrect old password 'forgot123' which has been entered for illustration purposes. In normal cases, this may be due to a forgotten password scenario.

The error is seen as 'Old password checking error'.

In the screenshot above, 'fortitest123' is the new password. On the next login, this can be used to login to the FortiPAM.

The password change activity can be seen and confirmed under 'Config & Login Logs' on the admin account that changed the password.

The new password is sufficient to be entered, and the old password can be bypassed i.e. there is no need to enter the old password.

Note: To perform this change, log in to the FortiPAM with another super admin account.