Sonarqube admin password reset

kotireddy478 · March 10, 2020, 11:17am

Must-share information (formatted with Markdown):

which versions are you using (SonarQube, Scanner, Plugin, and any relevant extension)
what are you trying to achieve
what have you tried so far to achieve this

SonarQube - 8.1.0.31237

I’m trying to change admin password with ansible:

command: psql -c “update users set crypted_password = ‘{{ admin_password | password_hash(‘bcrypt’, rounds=10) }}’ where login = ‘admin’” sonarqube

Ansible updating users table but starts with $2b

I’m getting below error:

2020.03.10 10:58:56 ERROR web[o.s.s.p.w.RootFilter] Processing of request /api/authentication/login failed
java.lang.IllegalArgumentException: Invalid salt revision
at org.mindrot.jbcrypt.BCrypt.hashpw(BCrypt.java:665)
at org.mindrot.jbcrypt.BCrypt.checkpw(BCrypt.java:764)
at org.sonar.server.authentication.CredentialsLocalAuthentication$BcryptFunction.checkCredentials(CredentialsLocalAuthentication.java:188)
at org.sonar.server.authentication.CredentialsLocalAuthentication$HashMethod.checkCredentials(CredentialsLocalAuthentication.java:113)
at org.sonar.server.authentication.CredentialsLocalAuthentication.authenticate(CredentialsLocalAuthentication.java:78)
at org.sonar.server.authentication.CredentialsAuthentication.authenticate(CredentialsAuthentication.java:61)
at org.sonar.server.authentication.CredentialsAuthentication.authenticate(CredentialsAuthentication.java:54)
at org.sonar.server.authentication.ws.LoginAction.authenticate(LoginAction.java:121)
at org.sonar.server.authentication.ws.LoginAction.doFilter(LoginAction.java:100)
at org.sonar.server.platform.web.MasterServletFilter$GodFilterChain.doFilter(MasterServletFilter.java:139)
at org.sonar.server.platform.web.MasterServletFilter.doFilter(MasterServletFilter.java:108)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
at org.sonar.server.platform.web.UserSessionFilter.doFilter(UserSessionFilter.java:88)
at org.sonar.server.platform.web.UserSessionFilter.doFilter(UserSessionFilter.java:72)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
at org.sonar.server.platform.web.CacheControlFilter.doFilter(CacheControlFilter.java:76)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
at org.sonar.server.platform.web.SecurityServletFilter.doHttpFilter(SecurityServletFilter.java:76)
at org.sonar.server.platform.web.SecurityServletFilter.doFilter(SecurityServletFilter.java:48)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
at org.sonar.server.platform.web.RedirectFilter.doFilter(RedirectFilter.java:58)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
at org.sonar.server.platform.web.RequestIdFilter.doFilter(RequestIdFilter.java:66)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
at org.sonar.server.platform.web.RootFilter.doFilter(RootFilter.java:62)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
at org.apache.catalina.filters.SetCharacterEncodingFilter.doFilter(SetCharacterEncodingFilter.java:109)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:199)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:96)
at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:493)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:137)
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:81)
at ch.qos.logback.access.tomcat.LogbackValve.invoke(LogbackValve.java:256)
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:87)
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:343)
at org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:798)
at org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:66)
at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:808)
at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1498)
at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)
at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128)
at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628)
at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
at java.base/java.lang.Thread.run(Thread.java:834)

what i’m doing wrong here? Please help me?

Rebse · March 10, 2020, 11:30am

Welcome

see Sonarqube doc https://docs.sonarqube.org/latest/instance-administration/security/
Reinstating Admin Access.

Gilbert

kotireddy478 · March 10, 2020, 11:39am

Hi Gilbert,

Thanks for the update. I’ve already come across the doc but i would like set the admin password to completely different? how to generate crypted_password for new password?

Thanks

Rebse · March 10, 2020, 11:42am

regarding the error message it might work if using salt=null like the snippet in the docs ?

kotireddy478 · March 10, 2020, 12:13pm

Hi Gilbert,

I’ve tried to salt=null but it didn’t work, gave me the same error.

Thanks

kotireddy478 · March 13, 2020, 11:42am

Hi Gilbert,

Does Sonarqube able to handle '$2b$10$XXXXXXXXXXXXXXXXXXXX crypted_password?

Thanks

Rebse · March 13, 2020, 12:07pm

Hi,

sorry, don’t know. Have only used the admin reset from the sonarqube documentation
and it worked.
But why not simply use the admin reset and then change the password in Sonarqube web ui.
Changing the admin password should not happen that often ?

Gilbert

kotireddy478 · March 13, 2020, 12:21pm

Hi,

We are trying to change admin default password to something new using Ansible.

It’s ok, hard coded encrypted password is working fine.

Thanks for your reply.

Rebse · March 13, 2020, 12:35pm

Hi,

you may also use the web api api/users/change_password !?