FortiSIEM
FortiSIEM provides Security Information and Event Management (SIEM) and User and Entity Behavior Analytics (UEBA)
RuiChang
Staff
Staff
Article Id 409256
Description

 

This article provides a method to fix the Redis WRONGPASS invalid username-password pair or user is disabled error.

 

Scope

 

FortiSIEM.

 

Solution

 

Users may notice an error on Redis in: '/opt/phoenix/log/phoenix.log' during troubleshooting. In some cases, it will have some processes down:

 

[PH_UTIL_REDIS_CONNECTION_ERROR]:[eventSeverity]=PHL_ERROR,[procName]=phMonitorWorker,[fileName]=phCacheThruRedis.cpp,[lineNumber]=272,[errorString]=WRONGPASS invalid username-password pair or user is disabled.,[phLogDetail]=redis connection error

 

In that case, users can update the password with the command below:

 

Backup ithe mportant file:

 

# for f in /opt/node-rest-service/ecosystem.config.js /opt/phoenix/redis/bin/redis_ops.sh /opt/phoenix/redis/conf/6666.conf /opt/phoenix/config/phoenix_config.txt /opt/phoenix/config/svnlite.properties; do cp "$f" "${f}_orig"; done

 

Update the password for all the configurations related to Redis:

 

# /opt/phoenix/deployment/jumpbox/ph_update_dr_configs.py redis_pw_from_license_tool_here

# service httpd restart

# systemctl restart postgresql-13

# rm -f /opt/phoenix/redis/conf/6666.conf

# cd /opt/phoenix/redis/bin/

# ./redis_ops.sh stop

# ./redis_ops.sh start

# su admin

# pm2 restart all

# exit

# killall -9 java

 

Note:

For workers, #killall -9 java is not required:

 

# /opt/phoenix/deployment/jumpbox/ph_update_dr_configs.py redis_pw_from_license_tool_here
# service httpd restart
# systemctl restart postgresql-16
# rm -f /opt/phoenix/redis/conf/6666.conf
# cd /opt/phoenix/redis/bin/
# ./redis_ops.sh stop
# ./redis_ops.sh start
# su admin
# pm2 restart all
# exit

Contributors