S/N/K-Series cannot Delete or Disable the 'admin' Account

FAQ_User — Sat, 09 Nov 2013 08:53:00 GMT

Article ID: 14144

Products
S-Series
Matrix N-Series DFE
K-Series

Symptoms
Unable to delete or disable the 'admin' account.

When trying to delete or disable the admin account on the local system, the commands fail; for example: S4 Chassis(su)->clear system login admin
Could not delete user: admin
S4 Chassis(su)->set system login admin super-user disable
Set was unsuccessful.
S4 Chassis(su)->Solution/Workaround
Upgrade to firmware 7.41.02.0014 or higher.

The default admin account may manually be disabled after replacing it, as follows:
set system login <my_super_user> super-user enable
set system lockout emergency-access <my_super_user>
set system login admin super-user disable

The 'show system lockout' command output now includes the line...
Account for emergency-access on the console: <account>
Here, the identified account would be <my_super_user>.

Pre-upgrade workaround:
Use radius authentication, as (regardless of firmware version) this will take precedence as long as the server is reachable.

See also: 10316 regarding setting a password on the new account.

topic S/N/K-Series cannot Delete or Disable the 'admin' Account in FAQs

S/N/K-Series cannot Delete or Disable the 'admin' Account