VMware
VMware

esxi root user permission

Hi there, root user was changed from Administrator role, to a very privilage role. Is there a way I can rolback this action, because now I can't do any administration task.
Is there a way to change permission from other user, like dcui?

Pochoclo LocoAsked: 2017-03-30

Who is Participating?

Experts Exchange Solution brought to you by

Enjoy your complimentary solution view.

Get this solution by purchasing an Individual license! Start your 7-day free trial.

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

LVL 22

Bradley FoxLAN/WAN Systems AdministratorCommented: 2017-03-30

To resolve this issue you have to manually edit the authorization.xml or authentication.xml file depending on the version of product that you are using. To correct the issue:
Connect to the ESX host's service console via SSH or local console.

Note: ESXi connection to the local console is made using the "unsupported mode"
Open this file in a text editor :
/etc/vmware/hostd/authentication.xml

Note: In ESX4.1 and later the file name is authorization.xml

Change the existing value of the <ACEDataRoleId> </ACEDataRoleID> to -1.
After editing this file, save it and restart the management agents on the host or reboot the host.

From: https://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1031192

Pochoclo LocoAuthor Commented: 2017-03-30

Thank you for the reply. I also saw that I have to change it using nano.
I can't access the ESXi Console:
-I hit Alt+F1
-Type unsupported, hit enter, but nothing ever happend
So I can't access the console.
Can you help me out with that?

LVL 22

Bradley FoxLAN/WAN Systems AdministratorCommented: 2017-03-30

You have to enable the service first.
https://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2004746

Enabling ESXi Shell access using the Direct Console User Interface
Use the direct console user interface to enable the ESXi Shell:

From the Direct Console User Interface, press F2 to access the System Customization menu.
Select Troubleshooting Options and press Enter.
From the Troubleshooting Mode Options menu, select Enable ESXi Shell.
Enable ESXi Shell
Enable SSH

Press Enter to enable the service.

Pochoclo LocoAuthor Commented: 2017-03-30

Thanks for the follow up, now it ask me login and password. I imagine is Root and its password, right?

Pochoclo LocoAuthor Commented: 2017-03-31

I can't get past unsupported mode, I enable both services and when I got to the console to try login, I log with root but it says I don't have authorization.

LVL 22

Bradley FoxLAN/WAN Systems AdministratorCommented: 2017-03-31

If you do not have another user setup on the ESXi host you will have to follow the instructions here to boot from a Linux live CD.

https://community.spiceworks.com/how_to/117082-reset-esxi-root-administrator-rights

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial