topic Re: Reset RO user with RWA user in ExtremeSwitching (VSP/Fabric Engine)

Reset RO user with RWA user

jeronimo — Tue, 25 Nov 2025 16:42:18 GMT

Hello,

I have one switch where an ro user has been set up (username changed from the default) and noone remembers the password.

Using "cli password newro read-only" it asks for the current password!? Even though I am logged in as RWA administrator!

User cannot be deleted since it is a "default" user.

How do I reset the account? (UPDATE: obviously without rebooting or wiping anything else. The GUI can do it)

If that's not possible, what is the reason for it!? except for the fact that it has not been implemented 😉

Thanks

(FE 9.x)

Re: Reset RO user with RWA user

Manoj_Kumar — Tue, 04 Nov 2025 14:44:26 GMT

In CLI it asks for current password. Try alternate method using EDM.

Login to switch using EDM
Security -> Control Path -> General and the click CLI tab. Modify the ROPassword and click Apply

Test the new password via SSH session.

Re: Reset RO user with RWA user

jeronimo — Tue, 04 Nov 2025 19:15:03 GMT

What sense would it make for GUI to allow to do this and CLI not?

Re: Reset RO user with RWA user

mario779petri — Tue, 18 Nov 2025 09:23:54 GMT

Hello,

The device's CLI command structure is designed to only allow a password change for a specific user by that user, or it requires a command that operates at an even higher privilege level (like a dedicated root or super-administrator command) to reset another user's credentials. The cli password newro read-only command may be interpreted as "change the password for user newro," which logically requires the current password for newro to prevent an administrative mistake or lower-level admin from changing a higher-level admin's password accidentally.

Re: Reset RO user with RWA user

mneumann — Fri, 21 Nov 2025 13:14:10 GMT

Worst case you can delete the "/intflash/.shadovnonfedmoc_512.txt" file, reboot the box and start with rwa/rwa 😉

Re: Reset RO user with RWA user

jeronimo — Tue, 25 Nov 2025 16:41:39 GMT

The requirement would be not to wipe all the users, and not to have to reboot.

The GUI can do it. Why can't the CLI? That's inconsistent behavior.