Locked out of Kerio Administration

This is a support problem I hear fairly often: a Kerio demo was setup with a fake domain and then later the real domain is added and set as the primary. The administrator logs out, but when he tries to login again the next day, he can't. Panic! He's certain he knows the password, but it keeps refusing to let him login!

Actually this is almost always simple. The password is correct; it's the user name that is wrong because it needs the domain. If your fake domain was called "localhost", that's where the default admin user was created. You can login as "[email protected]" (or whatever name you used).

You can also stop the mail server and manually edit the "users.cfg" file. You'll be looking for the section that looks something like this:


  <listitem>
    <variable name="Name">Admin</variable>
    <variable name="Domain">localhost</variable>
    <variable name="Account_enabled">1</variable>
    <variable name="Guid">4234551A-E3FF-4573-8B1B-E1646BEFFFD7</variable>
    <variable name="Auth_type">0</variable>
    <variable name="Password">D3S:22f2cd1e9dbf80f0bc09c221169bdba92d4ab7445c3daeca</variable>    <variable name="PIN"></variable>
    <variable name="Rights">3</variable>
    <variable name="ForwardMode">0</variable>
    <variable name="HomeServer"></variable>
    <variable name="MailboxLocation"></variable>
    <variable name="Qstorage">0</variable>
    <variable name="Qmessage">0</variable>
    <variable name="MaxOutgoingMessageSize">0</variable>
    <variable name="DefSpamFilter">1</variable>
    <variable name="PreferredAddress"></variable>
    <variable name="ReplyToAddress"></variable>
    <variable name="Fullname">Administrator</variable>
    <variable name="Description"></variable>
    <variable name="KrbUserPrincipalName"></variable>
  </listitem> 
 

See that "<variable name="Domain">localhost</variable>" ? You'd want to change that to whatever your primary domain is. If you have other users here that you want to transfer, you want to change those also.

As of Kerio Connect 7.0, you could have just renamed "localhost" to what you want it to be.

As long as you are in here, you could also reset the password if you have forgotten it. You'd change

D3S:22f2cd1e9dbf80f0bc09c221169bdba92d4ab7445c3daeca

to

NUL:NewPassword

That "NUL" lets you use plain text. You should then change it through the admin to restore it as encrypted.

Note: if you are using Unix/Linux "vi", you have to be aware that this is a "dos" file. Your session should recognize that, but if you are creating sections to read into the file, you need to ":set ff=dos" to set NL/CR correctly.

Restart the server after your changes and you are set to go.



Got something to add? Send me email.





(OLDER) <- More Stuff -> (NEWER)    (NEWEST)   

Printer Friendly Version

-> -> kerio admin password


3 comments



Increase ad revenue 50-250% with Ezoic


More Articles by

Find me on Google+

© Anthony Lawrence







Fri Oct 7 10:09:59 2011: 9933   anonymous

gravatar


its not working





Fri Oct 7 13:20:08 2011: 9937   TonyLawrence

gravatar


Then you don't know your password.



Fri Jan 24 09:30:36 2014: 12406   sash

gravatar


hero. thats what you are for me now :)
could't find anything in the manual that points this out, so nothing helped...
thx a lot

------------------------
Kerio Connect Mailserver

Kerio Samepage

Kerio Control Firewall

Have you tried Searching this site?

Unix/Linux/Mac OS X support by phone, email or on-site: Support Rates

This is a Unix/Linux resource website. It contains technical articles about Unix, Linux and general computing related subjects, opinion, news, help files, how-to's, tutorials and more.

Contact us





Keeping URIs so that they will still be around in 2, 20 or 200 or even 2000 years is clearly not as simple as it sounds ... However, all over the Web, webmasters are making decisions which will make it really difficult for themselves in the future. (Tim Berners-Lee)

Doing linear scans over an associative array is like trying to club someone to death with a loaded Uzi. (Larry Wall)







This post tagged: