Skip to main content
one_co_il
New Member
September 26, 2016
Solved

Lock Out of My FG800C, Missing "admin" User

  • September 26, 2016
  • 1 reply
  • 14023 views

I have a FG 800C that was working fine

I Backup my configuration, edit it and restore it

now I cannot login to the unit,

every try resolve i wrong user and password

I Try to Login using Fortiexplorer with user "maintainer" to recover my password.

I can login, but when trying to reset password i get this massage:

 

FG800C # config system admin

FG800C (admin) # edit admin 'maintainer' account can only edit existing admins. node_check_object fail! for name admin

value parse error before 'admin' Command fail. Return code -37

 

It seems like there is no user name "admin"

is there any way to recover the user? or even restore everything to default?

 

    Best answer by ede_pfau

    You've got a (hopefully) valid backup config file. There is no other way to break into a FGT than using the maintainer access (physical access required).

    Check the config file (text file) for gross mistakes, like missing routing section (at the end), and especially that the 'config system admin' section is complete and valid.

     

    Then I would

    - reboot

    - interrupt boot sequence

    - format flash disk

    - reload the same firmware via TFTP

    - reload the config

     

    1 reply

    ede_pfau
    SuperUser
    ede_pfauAnswer
    SuperUser
    September 26, 2016

    You've got a (hopefully) valid backup config file. There is no other way to break into a FGT than using the maintainer access (physical access required).

    Check the config file (text file) for gross mistakes, like missing routing section (at the end), and especially that the 'config system admin' section is complete and valid.

     

    Then I would

    - reboot

    - interrupt boot sequence

    - format flash disk

    - reload the same firmware via TFTP

    - reload the config

     

    emnoc
    New Member
    September 26, 2016

    I would double check that admin is or is not present

     

    show sys admin | grep admin

     

    It would not hurt to see what other accounts are present at the same time.