How to reset admin password

[vendornet]

For some reason sftpgo is not accepting my admin password. I use a password manager and I changed my password several times. Something might have overridden the actual password.

How can I reset the admin password? I run sftpgo in a docker container.

Thanks!

[drakkan]

I plan to add something about this in future (maybe a reset email if you set an emai address for your admin).

Currently you can update your admin by loading data, take a look here for an example.

You can also delete your admin from the dataprovider and restart SFTPGo, in version 2.1.x, the setup screen will appear and you can create a new admin from there, no user will be lost

[vendornet]

Thanks for the quick reply! I use SQLite and the docker container does not have a SQLite client.

The first link that you have provided.

./sftpgo serve --loaddata-from /tmp/initial.json --loaddata-mode 0

Will this delete my other users as well?

[drakkan]

backup your sftpgo.db just in case, however it will simply update the admin with the username "admin" if found or create a new admin with the username "admin".

[vendornet]

I’ve tried using

sftpgo serve --loaddata-from /var/lib/sftpgo/initial.json --loaddata-mode 0

from the docker container, however I still cannot log in.

Here is the input:

{"level":"info","time":"2021-09-22T20:13:45.352","sender":"service","message":"starting SFTPGo 2.1.0-a09cf5c8-2021-06-16T16:02:16Z +metrics +awskms +gcpkms +vaultkms +azblob +gcs +s3 +bolt +mysql +pgsql +sqlite +portable, config dir: ., config file: , log max size: 10 log max backups: 5 log max age: 28 log verbose: true, log compress: false, load data from: \"/var/lib/sftpgo/initial.json\""}
{"level":"debug","time":"2021-09-22T20:13:45.366","sender":"config","message":"config file used: '\"/var/lib/sftpgo/sftpgo.json\"', config loaded: {Common:{IdleTimeout:15 UploadMode:0 Actions:{ExecuteOn:[] ExecuteSync:[] Hook:} SetstatMode:0 TempPath: ProxyProtocol:0 ProxyAllowed:[] StartupHook: PostConnectHook: MaxTotalConnections:0 MaxPerHostConnections:20 DefenderConfig:{Enabled:true BanTime:30 BanTimeIncrement:50 Threshold:15 ScoreInvalid:2 ScoreValid:1 ScoreLimitExceeded:3 ObservationTime:30 EntriesSoftLimit:100 EntriesHardLimit:150 SafeListFile: BlockListFile:} RateLimitersConfig:[{Average:0 Period:1000 Burst:1 Type:2 Protocols:[SSH FTP DAV HTTP] GenerateDefenderEvents:false EntriesSoftLimit:100 EntriesHardLimit:150}] idleTimeoutAsDuration:0 idleLoginTimeout:0 defender:<nil>} SFTPD:{Banner:SFTPGo_2.1.0 Bindings:[{Address: Port:2022 ApplyProxyConfig:true}] BindPort:0 BindAddress: IdleTimeout:0 MaxAuthTries:0 UploadMode:0 Actions:{ExecuteOn:[] ExecuteSync:[] Hook:} Keys:[] HostKeys:[] KexAlgorithms:[] Ciphers:[] MACs:[] TrustedUserCAKeys:[] LoginBannerFile: SetstatMode:0 EnabledSSHCommands:[md5sum sha1sum cd pwd scp] KeyboardInteractiveHook: PasswordAuthentication:true ProxyProtocol:0 ProxyAllowed:[] certChecker:<nil> parsedUserCAKeys:[]} FTPD:{Bindings:[{Address: Port:0 ApplyProxyConfig:true TLSMode:0 ForcePassiveIP: ClientAuthType:0 TLSCipherSuites:[] ciphers:[]}] BindPort:0 BindAddress: ForcePassiveIP: Banner:SFTPGo 2.1.0 ready BannerFile: CertificateFile: CertificateKeyFile: CACertificates:[] CARevocationLists:[] ActiveTransfersPortNon20:true DisableActiveMode:false EnableSite:false HASHSupport:0 CombineSupport:0 TLSMode:0 PassivePortRange:{Start:50000 End:50100}} WebDAVD:{Bindings:[{Address: Port:0 EnableHTTPS:false ClientAuthType:0 TLSCipherSuites:[] Prefix: ProxyAllowed:[] allowHeadersFrom:[]}] BindPort:0 BindAddress: CertificateFile: CertificateKeyFile: CACertificates:[] CARevocationLists:[] Cors:{AllowedOrigins:[] AllowedMethods:[] AllowedHeaders:[] ExposedHeaders:[] AllowCredentials:false Enabled:false MaxAge:0} Cache:{Users:{ExpirationTime:0 MaxSize:50} MimeTypes:{Enabled:true MaxSize:1000}}} ProviderConf:{Driver:sqlite Name:sftpgo.db Host: Port:0 Username: Password:[redacted] SSLMode:0 ConnectionString: SQLTablesPrefix: TrackQuota:2 PoolSize:0 UsersBaseDir:/srv/sftpgo/data Actions:{ExecuteOn:[] Hook:} ExternalAuthHook: ExternalAuthScope:0 CredentialsPath:credentials PreLoginHook: PostLoginHook: PostLoginScope:0 CheckPasswordHook: CheckPasswordScope:0 UpdateMode:0 PasswordHashing:{BcryptOptions:{Cost:10} Argon2Options:{Memory:65536 Iterations:1 Parallelism:2} Algo:bcrypt} PreferDatabaseCredentials:false SkipNaturalKeysValidation:false PasswordCaching:true DelayedQuotaUpdate:0 CreateDefaultAdmin:false} HTTPDConfig:{Bindings:[{Address: Port:8080 EnableWebAdmin:true EnableWebClient:true EnableHTTPS:false ClientAuthType:0 TLSCipherSuites:[] ProxyAllowed:[172.19.0.0/16] allowHeadersFrom:[]}] BindPort:0 BindAddress: TemplatesPath:/usr/share/sftpgo/templates StaticFilesPath:/usr/share/sftpgo/static BackupsPath:/srv/sftpgo/backups WebRoot: CertificateFile: CertificateKeyFile: CACertificates:[] CARevocationLists:[]} HTTPConfig:{Timeout:20 RetryWaitMin:2 RetryWaitMax:30 RetryMax:3 CACertificates:[] Certificates:[] SkipTLSVerify:false Headers:[] customTransport:<nil> tlsConfig:<nil>} KMSConfig:{Secrets:{URL: MasterKeyPath: masterKey:}} TelemetryConfig:{BindPort:10000 BindAddress:127.0.0.1 EnableProfiler:false AuthUserFile: CertificateFile: CertificateKeyFile: TLSCipherSuites:[]}}"}
{"level":"info","time":"2021-09-22T20:13:45.366","sender":"common","message":"defender initialized with config {Enabled:true BanTime:30 BanTimeIncrement:50 Threshold:15 ScoreInvalid:2 ScoreValid:1 ScoreLimitExceeded:3 ObservationTime:30 EntriesSoftLimit:100 EntriesHardLimit:150 SafeListFile: BlockListFile:}"}
{"level":"debug","time":"2021-09-22T20:13:45.367","sender":"dataprovider_sqlite","message":"sqlite database handle created, connection string: \"file:sftpgo.db?cache=shared&_foreign_keys=1\""}
{"level":"debug","time":"2021-09-22T20:13:45.368","sender":"dataprovider_sqlite","message":"sql database is up to date, current version: 10"}
{"level":"debug","time":"2021-09-22T20:13:45.368","sender":"dataprovider_sqlite","message":"delayed quota update loop started, wait time: 0s"}
{"level":"debug","time":"2021-09-22T20:13:45.368","sender":"dataprovider_sqlite","message":"delayed quota update loop ended, wait time: 0s"}
{"level":"debug","time":"2021-09-22T20:13:45.584","sender":"httpd","message":"restoring existing admin: {ID:2 Status:1 Username:admin Password:[**redacted**] Email: Permissions:[*] Filters:{AllowList:[]} Description: AdditionalInfo:}, dump file: \"/var/lib/sftpgo/initial.json\", error: <nil>"}
{"level":"info","time":"2021-09-22T20:13:45.584","sender":"service","message":"data loaded from file \"/var/lib/sftpgo/initial.json\" mode: 0, quota scan 0"}
{"level":"debug","time":"2021-09-22T20:13:45.584","sender":"service","message":"FTP server not started, disabled in config file"}
{"level":"debug","time":"2021-09-22T20:13:45.584","sender":"service","message":"WebDAV server not started, disabled in config file"}
{"level":"debug","time":"2021-09-22T20:13:45.584","sender":"service","message":"initializing SFTP server with config {Banner:SFTPGo_2.1.0 Bindings:[{Address: Port:2022 ApplyProxyConfig:true}] BindPort:0 BindAddress: IdleTimeout:0 MaxAuthTries:0 UploadMode:0 Actions:{ExecuteOn:[] ExecuteSync:[] Hook:} Keys:[] HostKeys:[] KexAlgorithms:[] Ciphers:[] MACs:[] TrustedUserCAKeys:[] LoginBannerFile: SetstatMode:0 EnabledSSHCommands:[md5sum sha1sum cd pwd scp] KeyboardInteractiveHook: PasswordAuthentication:true ProxyProtocol:0 ProxyAllowed:[] certChecker:<nil> parsedUserCAKeys:[]}"}
{"level":"debug","time":"2021-09-22T20:13:45.584","sender":"telemetry","message":"initializing telemetry server with config {BindPort:10000 BindAddress:127.0.0.1 EnableProfiler:false AuthUserFile: CertificateFile: CertificateKeyFile: TLSCipherSuites:[]}"}
{"level":"debug","time":"2021-09-22T20:13:45.584","sender":"httpd","message":"initializing HTTP server with config &{Bindings:[{Address: Port:8080 EnableWebAdmin:true EnableWebClient:true EnableHTTPS:false ClientAuthType:0 TLSCipherSuites:[] ProxyAllowed:[172.19.0.0/16] allowHeadersFrom:[]}] BindPort:0 BindAddress: TemplatesPath:/usr/share/sftpgo/templates StaticFilesPath:/usr/share/sftpgo/static BackupsPath:/srv/sftpgo/backups WebRoot: CertificateFile: CertificateKeyFile: CACertificates:[] CARevocationLists:[]}"}
{"level":"info","time":"2021-09-22T20:13:45.584","sender":"sftpd","message":"Loading private host key \"id_rsa\""}
{"level":"error","time":"2021-09-22T20:13:45.585","sender":"service","message":"could not start telemetry server: listen tcp 127.0.0.1:10000: bind: address already in use"}

sftpgo version is 2.1.0.

Any ideas?

[drakkan]

In SFTPGo 2.1.0 we have 2 separate UI:

• /web/client/login, is the client UI
• /web/admin/login is the admin UI

I guess you are trying to login to the client UI with the admin credentials.

This confusing behaviour has been fixed, take a look here. The fix will be included in v2.2.x

[vendornet]

That was the reason. I haven’t noticed the different URLs. It works now even with my initial admin user.

Thanks!