Security

Allowed characters in passwords via the cli

Blu3fish
Path Finder

Hello,

When issuing the following command on an initial install of Splunk (Splunk is running) I receive the expected "User admin edited" confirmation but when I try to log on to the web ui it appears that the password won't take.

When changing the password via the webui it works every time.

./splunk edit user admin -password 7eyRa$# -roles admin Your session is invalid. Please login. Splunk username: admin Password: changeme User admin edited.

(Also tried with quotes surrounding the new password: ./splunk edit user admin -password "7eyRa$#" -roles admin)

I was able to get the password to stick (via the cli) if I removed the final "#" character. Is there any way around this?

Thanks, Brennan

Tags (1)
1 Solution

hexx
Splunk Employee
Splunk Employee

We have a bug currently open against this issue. It will be fixed in a future release. The work-around in the meantime is to use the UI to set passwords that contain characters such as "$" or "#", or simply to avoid using those characters to set a password.

View solution in original post

hexx
Splunk Employee
Splunk Employee

We have a bug currently open against this issue. It will be fixed in a future release. The work-around in the meantime is to use the UI to set passwords that contain characters such as "$" or "#", or simply to avoid using those characters to set a password.

jawaharas
Motivator

Even in Splunk 7.1 , login is failed while using CLI, when the symbols are in password.

0 Karma

ejharts2015
Communicator

Still exists in Splunk 6.3 as well... 😞

0 Karma

ianformanek
Explorer

This problem is still present in the current version, I cannot use password with a dollar sign if I want to use the CLI (./splunk install app xxx -auth admin:my$pass fails)

0 Karma
Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Splunk Community Dashboard Challenge for Your Chance to Win!

The Splunk Community Dashboard Challenge is underway! This is your chance to showcase your skills in creating ...

.conf24 | Session Scheduler is Live!!

.conf24 is happening June 11 - 14 in Las Vegas, and we are thrilled to announce that the conference catalog ...