- Starting pf9-ostackhost results in "error: sudo: Password expired, contact your system administrator"
- Below messages are recorded in /var/log/pf9/ostackhost.log
2020-04-07 15:39:18.446 WARNING oslo.privsep.daemon [-] privsep log: sudo: Password expired, contact your system administrator
- In /var/log/secure we see that it appears to be leveraging the root account for which the system is stating the password has expired.
Apr 7 15:38:25 ladcsoshv01 sudo: root : Password expired, contact your system administrator ; TTY=pts/8 ; PWD=/opt/pf9/home ; USER=root ; ENV=LD_LIBRARY_PATH=/opt/pf9/python/pf9-lib:/opt/pf9/venv/lib/python2.7 PYTHONPATH=/opt/pf9/python/lib/python2.7:/opt/pf9/venv/lib/python2.7 ; COMMAND=/opt/pf9/venv/bin/nova-rootwrap /opt/pf9/etc/nova/rootwrap.conf /opt/pf9/venv/bin/privsep-helper --config-dir /opt/pf9/etc/nova/conf.d --privsep_context vif_plug_ovs.privsep.vif_plug --privsep_sock_path /tmp/tmpItSUnX/privsep.sock
- Platform9 Managed OpenStack - All Versions
The root account doesn't appear to be locked because it's an administrative account, but it won't allow any sudo commands to be run as the password has expired. Check the difference "Password expires" date to verify the password validity.
Below is a sample output of the chage command
$ sudo chage -l root
Last password change : Oct 14, 2019
Password expires : Jan 12, 2020
Password inactive : Feb 11, 2020
Account expires : never
Minimum number of days between password change : 7
Maximum number of days between password change : 90
Number of days of warning before password expires : -1
Reset the password for the root user on the affected host.