Admin password in default authentication

The Admin user password is used by the default authentication system.

The Admin password for default authentication is set as a part of the initial bootstrap. This is located in config\alfresco\bootstrap\alfrescoUserStore.xml. The password is MD4 encoded, as required by NTLM.

Note: Choose a strong, unique password for your admin account, and consider changing it regularly.

How to reset the Admin password?

If you lose or forget the password for the Admin user, you can reset the password in the database using one of the following methods:

If you know the password of at least one user, then:

Assign Admin rights to this known user by adding the following line in the SkyVault-global.properties file.
```
SkyVault_user_store.adminusername=username
```
where, username is the user name of the user whose password is known.
Restart the repository.
Log in as the known user.
Reset the Admin user's password.
Reset the configuration.

Reset the Admin password without knowing any user password:

Configure the authentication component to accept all logins using org.alfresco.repo.security.authentication.SimpleAcceptOrRejectAllAuthenticationComponentImpl.
Login as a user with Admin rights.
Reset the Admin user's password.
Revert the configuration.

Change the password directly in the database (for SkyVault version 3.1 to 5.0):

Run the following command to find out the identifying parameters for how the Admin password is stored. Check that you have only one row in the output.

SELECT anp1.node_id,
       anp1.qname_id,       
       anp1.string_value       
FROM alf_node_properties anp1  
   INNER JOIN alf_qname aq1 ON aq1.id = anp1.qname_id   
   INNER JOIN alf_node_properties anp2 ON anp2.node_id = anp1.node_id    
   INNER JOIN alf_qname aq2 ON aq2.id = anp2.qname_id                    
WHERE aq1.local_name = 'password'
AND aq2.local_name = 'username'
AND anp2.string_value = 'admin'

The output shows the current MD4 hashed password for the Admin user. Here's an example output:

+---------+----------+----------------------------------+
| node_id | qname_id | string_value |                     
+---------+----------+----------------------------------+
| 4 | 10 | 209c6174da490caeb422f3fa5a7ae634 |                
+---------+----------+----------------------------------+
1 row in set (0.00 sec)

To update the password, use the following command:
```
UPDATE alf_node_properties  
 SET string_value='209c6174da490caeb422f3fa5a7ae634'
 WHERE  
 node_id=THENODEIDABOVE
 and
 qname_id=THEQNAMEVALUEABOVE
```
Replace THENODEIDABOVE and THEQNAMEVALUEABOVE with the result values of node_id and qname_id, obtained in the previous step. In this example, it is 4 and 10, respectively.
Note: Ensure that you use appropriate AND conditions in the UPDATE query.
Restart SkyVault.

Change the password directly in the database (for SkyVault version 5.1 onwards):

Run the following query to find out which encoder is being used to store the Admin password. Check that you have only one row in the output.

Note: You must encode the password using the result of the query.

SELECT anp1.node_id,
       anp1.qname_id,
       anp1.string_value
FROM alf_node_properties anp1
   INNER JOIN alf_qname aq1 ON aq1.id = anp1.qname_id
   INNER JOIN alf_node_properties anp2 ON anp2.node_id = anp1.node_id
   INNER JOIN alf_qname aq2 ON aq2.id = anp2.qname_id
WHERE aq1.local_name = 'hashIndicator'
AND aq2.local_name = 'username'
AND anp2.string_value = 'admin';

The output shows the current password encoding being used.

+---------+----------+--------------+
| node_id | qname_id | string_value |
+---------+----------+--------------+
|       4 |       94 | bcrypt10   |
+---------+----------+--------------+
1 row in set (0.01 sec)

If no rows are returned, set the password using the instructions shown above (md4 encoding).

If a row is returned, encode the password using the result of the query, which can either be md4 or sha256 or bcrypt10 encoding.

Run the following query to find the identifying parameters for how the Admin password is stored.

SELECT anp1.node_id,
       anp1.qname_id,       
       anp1.string_value       
FROM alf_node_properties anp1  
   INNER JOIN alf_qname aq1 ON aq1.id = anp1.qname_id   
   INNER JOIN alf_node_properties anp2 ON anp2.node_id = anp1.node_id    
   INNER JOIN alf_qname aq2 ON aq2.id = anp2.qname_id                    
WHERE aq1.local_name = 'passwordHash'
AND aq2.local_name = 'username'
AND anp2.string_value = 'admin';

The output shows the current hashed password for the Admin user. Here's an example output:

+---------+----------+--------------------------------------------------------------+
| node_id | qname_id | string_value                                                 |
+---------+----------+--------------------------------------------------------------+
|       4 |       93 |$2a$10$dq/2zNUA.MmECYipl1WMoOyGHYbaygh23PUa3Ox5xDHH7Z0guqF42|
+---------+----------+--------------------------------------------------------------+
1 row in set (0.00 sec)

To update the password, use the following command:
```
UPDATE alf_node_properties  
 SET string_value='209c6174da490caeb422f3fa5a7ae634'
 WHERE  
 node_id=THENODEIDABOVE
 and
 qname_id=THEQNAMEVALUEABOVE
```
Replace THENODEIDABOVE and THEQNAMEVALUEABOVE with the result values of node_id and qname_id, obtained in the previous step. In this example, it is 4 and 93, respectively.
Note: Ensure that you use appropriate AND conditions in the UPDATE query.
Restart SkyVault.

Search form

Search form

You are here

Admin password in default authentication