# How to reset webui password in chef 11

**URL:** <https://discourse.chef.io/t/how-to-reset-webui-password-in-chef-11/3760>\
**Category:** Chef Infra (archive)\
**Created:** [March 17, 2013, 5:54pm UTC](https://discourse.chef.io/t/how-to-reset-webui-password-in-chef-11/3760 "2013-03-17T17:54:52Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![1113](https://avatars.discourse-cdn.com/v4/letter/1/c89c15/32.png) [@1113](https://discourse.chef.io/u/1113)\
**Post date:** [March 17, 2013, 5:54pm UTC](https://discourse.chef.io/t/how-to-reset-webui-password-in-chef-11/3760/1 "2013-03-17T17:54:52Z")

</div>

as title

thanks

–  
Peng Yong

---

<div class="post-metadata">

**Author:** ![Marco\_Betti](https://sea2.discourse-cdn.com/flex016/user_avatar/discourse.chef.io/marco_betti/32/105_2.png) [@Marco\_Betti](https://discourse.chef.io/u/Marco_Betti)\
**Post date:** [March 19, 2013, 8:31am UTC](https://discourse.chef.io/t/how-to-reset-webui-password-in-chef-11/3760/2 "2013-03-19T08:31:58Z")

</div>

Hi,

Chef 11 works with PostgreSQL, not CouchDB anymore. As a result, one way to  
achieve your obiective is to reset the user credentials inside postgres.

1. log-on to chef-server

2. as opscode-pgsql user, connecto to postgres database

3. delete user admin on table osc\_users

4. create again user admin with a dump taken from an installation with a  
known password...  
(here is mine, for example, where password is 'password')

INSERT INTO osc\_users (id, authz\_id, username, email, public\_key,  
hashed\_password, salt, hash\_type, last\_updated\_by, created\_at,  
updated\_at, external\_authentication\_uid, recovery\_authentication\_enabled,  
admin) VALUES ('00000000000029565f69f272397a0151',  
'00000000000029565f69f272397a0151', 'admin', NULL, '-----BEGIN PUBLIC  
KEY-----  
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlLLAHijW6jxP2bHYDTo  
Y/tXba4VLYc94Hc1ufTbsONSTYxQcD8IVeGDZOIowgZr59LvqVKQYig3b8Zeu5GH  
SNlN+nxSXuvdmjxcOQ4EpCrG1j/RI0Yiysq9BKTkM4104xP6gVNo3x9rVzihT/lU  
ycukAIGuiooWhBQwAjJ9FVynZEBi2ZvaCX81W6MUUyJDbIqRwlDBIXxIcFH8+ke2  
EnNVXj3sOocI/Wij72IDSoJD4iPGbrssX7iQr9NL0dSk2KzXUWU+lzd2+4U0Tpex  
IB6eCVhkpfyFNUmrjy4wWBEMRqjPU0G4rns4AH4Z9DyNjNBLYuZ1A9VKk7K5rtSd  
FwIDAQAB  
-----END PUBLIC KEY-----  
', '$2a$12$y31Wno2MKiGXS3FSgVg5UunKG48gJz0pRV//RMy1osDxVbrb0On4W',  
'$2a$12$y31Wno2MKiGXS3FSgVg5Uu', 'erlang-bcrypt-0.5.0',  
'00000000000029565f69f272397a0151', '2013-02-14 13:17:31', '2013-02-14  
13:34:55', NULL, false, true);

Ciao  
Marco

On Sun, Mar 17, 2013 at 6:54 PM, 彭勇 [ppyy@pubyun.com](mailto:ppyy@pubyun.com) wrote:

> as title
> 
> thanks
> 
> --  
> Peng Yong

--  
Ing. Marco Betti  
RHCE RHEL4 id 804006512121056

---

<div class="post-metadata">

**Author:** ![Peng\_Yong](https://avatars.discourse-cdn.com/v4/letter/p/f4b2a3/32.png) [@Peng\_Yong](https://discourse.chef.io/u/Peng_Yong)\
**Post date:** [March 19, 2013, 8:39am UTC](https://discourse.chef.io/t/how-to-reset-webui-password-in-chef-11/3760/3 "2013-03-19T08:39:53Z")

</div>

thanks for your kindly help!

how can I generate the hashed password?

On Tuesday, March 19, 2013 at 4:31 PM, Marco Betti wrote:

> Hi,
> 
> Chef 11 works with PostgreSQL, not CouchDB anymore. As a result, one way to achieve your obiective is to reset the user credentials inside postgres.
> 
> 1. log-on to chef-server
> 
> 2. as opscode-pgsql user, connecto to postgres database
> 
> 3. delete user admin on table osc\_users
> 
> 4. create again user admin with a dump taken from an installation with a known password...  
> (here is mine, for example, where password is 'password')
> 
> INSERT INTO osc\_users (id, authz\_id, username, email, public\_key, hashed\_password, salt, hash\_type, last\_updated\_by, created\_at,  
> updated\_at, external\_authentication\_uid, recovery\_authentication\_enabled, admin) VALUES ('00000000000029565f69f272397a0151',  
> '00000000000029565f69f272397a0151', 'admin', NULL, '-----BEGIN PUBLIC KEY-----  
> MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlLLAHijW6jxP2bHYDTo  
> Y/tXba4VLYc94Hc1ufTbsONSTYxQcD8IVeGDZOIowgZr59LvqVKQYig3b8Zeu5GH  
> SNlN+nxSXuvdmjxcOQ4EpCrG1j/RI0Yiysq9BKTkM4104xP6gVNo3x9rVzihT/lU  
> ycukAIGuiooWhBQwAjJ9FVynZEBi2ZvaCX81W6MUUyJDbIqRwlDBIXxIcFH8+ke2  
> EnNVXj3sOocI/Wij72IDSoJD4iPGbrssX7iQr9NL0dSk2KzXUWU+lzd2+4U0Tpex  
> IB6eCVhkpfyFNUmrjy4wWBEMRqjPU0G4rns4AH4Z9DyNjNBLYuZ1A9VKk7K5rtSd  
> FwIDAQAB  
> -----END PUBLIC KEY-----  
> ', '$2a$12$y31Wno2MKiGXS3FSgVg5UunKG48gJz0pRV//RMy1osDxVbrb0On4W', '$2a$12$y31Wno2MKiGXS3FSgVg5Uu', 'erlang-bcrypt-0.5.0',  
> '00000000000029565f69f272397a0151', '2013-02-14 13:17:31', '2013-02-14 13:34:55', NULL, false, true);
> 
> Ciao  
> Marco
> 
> On Sun, Mar 17, 2013 at 6:54 PM, 彭勇 \<[ppyy@pubyun.com](mailto:ppyy@pubyun.com) ([mailto:ppyy@pubyun.com](mailto:ppyy@pubyun.com))\> wrote:
> 
> > as title
> > 
> > thanks
> > 
> > --  
> > Peng Yong
> 
> --  
> Ing. Marco Betti  
> RHCE RHEL4 id 804006512121056

---

<div class="post-metadata">

**Author:** ![Marco\_Betti](https://sea2.discourse-cdn.com/flex016/user_avatar/discourse.chef.io/marco_betti/32/105_2.png) [@Marco\_Betti](https://discourse.chef.io/u/Marco_Betti)\
**Post date:** [March 19, 2013, 12:41pm UTC](https://discourse.chef.io/t/how-to-reset-webui-password-in-chef-11/3760/4 "2013-03-19T12:41:24Z")

</div>

I haven't investigated, I wouldn't consider this to be "the way" to manage  
webui password.  
Looking at hash\_type field I see "erlang-bcrypt-0.5.0"  
([GitHub - smarkets/erlang-bcrypt: Erlang wrapper for OpenBSD's Blowfish password hashing code](https://github.com/smarkets/erlang-bcrypt))

The workaround I found is really "quick and dirty"... we tried it when a  
collegue lost its webui password on a local installation and... it worked  
😉

If you copy and paste my example, password is 'password', after you can  
change via webui obviously.

Ciao  
Marco

On Tue, Mar 19, 2013 at 9:39 AM, Peng Yong [ppyy@juyide.com](mailto:ppyy@juyide.com) wrote:

> thanks for your kindly help!
> 
> how can I generate the hashed password?
> 
> On Tuesday, March 19, 2013 at 4:31 PM, Marco Betti wrote:
> 
> Hi,
> 
> Chef 11 works with PostgreSQL, not CouchDB anymore. As a result, one way  
> to achieve your obiective is to reset the user credentials inside postgres.
> 
> 1. log-on to chef-server
> 
> 2. as opscode-pgsql user, connecto to postgres database
> 
> 3. delete user admin on table osc\_users
> 
> 4. create again user admin with a dump taken from an installation with a  
> known password...  
> (here is mine, for example, where password is 'password')
> 
> INSERT INTO osc\_users (id, authz\_id, username, email, public\_key,  
> hashed\_password, salt, hash\_type, last\_updated\_by, created\_at,  
> updated\_at, external\_authentication\_uid, recovery\_authentication\_enabled,  
> admin) VALUES ('00000000000029565f69f272397a0151',  
> '00000000000029565f69f272397a0151', 'admin', NULL, '-----BEGIN PUBLIC  
> KEY-----  
> MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlLLAHijW6jxP2bHYDTo  
> Y/tXba4VLYc94Hc1ufTbsONSTYxQcD8IVeGDZOIowgZr59LvqVKQYig3b8Zeu5GH  
> SNlN+nxSXuvdmjxcOQ4EpCrG1j/RI0Yiysq9BKTkM4104xP6gVNo3x9rVzihT/lU  
> ycukAIGuiooWhBQwAjJ9FVynZEBi2ZvaCX81W6MUUyJDbIqRwlDBIXxIcFH8+ke2  
> EnNVXj3sOocI/Wij72IDSoJD4iPGbrssX7iQr9NL0dSk2KzXUWU+lzd2+4U0Tpex  
> IB6eCVhkpfyFNUmrjy4wWBEMRqjPU0G4rns4AH4Z9DyNjNBLYuZ1A9VKk7K5rtSd  
> FwIDAQAB  
> -----END PUBLIC KEY-----  
> ', '$2a$12$y31Wno2MKiGXS3FSgVg5UunKG48gJz0pRV//RMy1osDxVbrb0On4W',  
> '$2a$12$y31Wno2MKiGXS3FSgVg5Uu', 'erlang-bcrypt-0.5.0',  
> '00000000000029565f69f272397a0151', '2013-02-14 13:17:31', '2013-02-14  
> 13:34:55', NULL, false, true);
> 
> Ciao  
> Marco
> 
> On Sun, Mar 17, 2013 at 6:54 PM, 彭勇 [ppyy@pubyun.com](mailto:ppyy@pubyun.com) wrote:
> 
> as title
> 
> thanks
> 
> --  
> Peng Yong
> 
> --  
> Ing. Marco Betti  
> RHCE RHEL4 id 804006512121056

--  
Ing. Marco Betti  
RHCE RHEL4 id 804006512121056

---

<div class="post-metadata">

**Author:** ![Peng\_Yong](https://avatars.discourse-cdn.com/v4/letter/p/f4b2a3/32.png) [@Peng\_Yong](https://discourse.chef.io/u/Peng_Yong)\
**Post date:** [March 19, 2013, 2:45pm UTC](https://discourse.chef.io/t/how-to-reset-webui-password-in-chef-11/3760/5 "2013-03-19T14:45:46Z")

</div>

sudo -u opscode-pgsql /opt/chef-server/embedded/bin/psql opscode\_chef

update osc\_users set hashed\_password = '$2a$12$y31Wno2MKiGXS3FSgVg5UunKG48gJz0pRV//RMy1osDxVbrb0On4W' , salt ='$2a$12$y31Wno2MKiGXS3FSgVg5Uu' where username ='admin';

and login with user 'admin' and password 'password', it works now.

thanks again

--  
Peng Yong

On Tuesday, March 19, 2013 at 8:41 PM, Marco Betti wrote:

> I haven't investigated, I wouldn't consider this to be "the way" to manage webui password.  
> Looking at hash\_type field I see "erlang-bcrypt-0.5.0"  
> ([GitHub - smarkets/erlang-bcrypt: Erlang wrapper for OpenBSD's Blowfish password hashing code](https://github.com/smarkets/erlang-bcrypt))
> 
> The workaround I found is really "quick and dirty"... we tried it when a collegue lost its webui password on a local installation and... it worked 😉
> 
> If you copy and paste my example, password is 'password', after you can change via webui obviously.
> 
> Ciao  
> Marco
> 
> On Tue, Mar 19, 2013 at 9:39 AM, Peng Yong \<[ppyy@juyide.com](mailto:ppyy@juyide.com) ([mailto:ppyy@juyide.com](mailto:ppyy@juyide.com))\> wrote:
> 
> > thanks for your kindly help!
> > 
> > how can I generate the hashed password?
> > 
> > On Tuesday, March 19, 2013 at 4:31 PM, Marco Betti wrote:
> > 
> > > Hi,
> > > 
> > > Chef 11 works with PostgreSQL, not CouchDB anymore. As a result, one way to achieve your obiective is to reset the user credentials inside postgres.
> > > 
> > > 1. log-on to chef-server
> > > 
> > > 2. as opscode-pgsql user, connecto to postgres database
> > > 
> > > 3. delete user admin on table osc\_users
> > > 
> > > 4. create again user admin with a dump taken from an installation with a known password...  
> > > (here is mine, for example, where password is 'password')
> > > 
> > > INSERT INTO osc\_users (id, authz\_id, username, email, public\_key, hashed\_password, salt, hash\_type, last\_updated\_by, created\_at,  
> > > updated\_at, external\_authentication\_uid, recovery\_authentication\_enabled, admin) VALUES ('00000000000029565f69f272397a0151',  
> > > '00000000000029565f69f272397a0151', 'admin', NULL, '-----BEGIN PUBLIC KEY-----  
> > > MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlLLAHijW6jxP2bHYDTo  
> > > Y/tXba4VLYc94Hc1ufTbsONSTYxQcD8IVeGDZOIowgZr59LvqVKQYig3b8Zeu5GH  
> > > SNlN+nxSXuvdmjxcOQ4EpCrG1j/RI0Yiysq9BKTkM4104xP6gVNo3x9rVzihT/lU  
> > > ycukAIGuiooWhBQwAjJ9FVynZEBi2ZvaCX81W6MUUyJDbIqRwlDBIXxIcFH8+ke2  
> > > EnNVXj3sOocI/Wij72IDSoJD4iPGbrssX7iQr9NL0dSk2KzXUWU+lzd2+4U0Tpex  
> > > IB6eCVhkpfyFNUmrjy4wWBEMRqjPU0G4rns4AH4Z9DyNjNBLYuZ1A9VKk7K5rtSd  
> > > FwIDAQAB  
> > > -----END PUBLIC KEY-----  
> > > ', '$2a$12$y31Wno2MKiGXS3FSgVg5UunKG48gJz0pRV//RMy1osDxVbrb0On4W', '$2a$12$y31Wno2MKiGXS3FSgVg5Uu', 'erlang-bcrypt-0.5.0',  
> > > '00000000000029565f69f272397a0151', '2013-02-14 13:17:31', '2013-02-14 13:34:55', NULL, false, true);
> > > 
> > > Ciao  
> > > Marco
> > > 
> > > On Sun, Mar 17, 2013 at 6:54 PM, 彭勇 \<[ppyy@pubyun.com](mailto:ppyy@pubyun.com) ([mailto:ppyy@pubyun.com](mailto:ppyy@pubyun.com))\> wrote:
> > > 
> > > > as title
> > > > 
> > > > thanks
> > > > 
> > > > --  
> > > > Peng Yong
> > > 
> > > --  
> > > Ing. Marco Betti  
> > > RHCE RHEL4 id 804006512121056
> 
> --  
> Ing. Marco Betti  
> RHCE RHEL4 id 804006512121056