Starting PF9-Ostackhost Results in Error: "sudo: Password expired, contact your system administrator

Problem

• Starting pf9-ostackhost results in "error: sudo: Password expired, contact your system administrator"

• Below messages are recorded in /var/log/pf9/ostackhost.log

None

2020-04-07 15:39:18.446 WARNING oslo.privsep.daemon [-] privsep log: sudo: Password expired, contact your system administrator

• In /var/log/secure we see that it appears to be leveraging the root account for which the system is stating the password has expired.

None

Apr 7 15:38:25 ladcsoshv01 sudo: root : Password expired, contact your system administrator ; TTY=pts/8 ; PWD=/opt/pf9/home ; USER=root ; ENV=LD_LIBRARY_PATH=/opt/pf9/python/pf9-lib:/opt/pf9/venv/lib/python2.7 PYTHONPATH=/opt/pf9/python/lib/python2.7:/opt/pf9/venv/lib/python2.7 ; COMMAND=/opt/pf9/venv/bin/nova-rootwrap /opt/pf9/etc/nova/rootwrap.conf /opt/pf9/venv/bin/privsep-helper --config-dir /opt/pf9/etc/nova/conf.d --privsep_context vif_plug_ovs.privsep.vif_plug --privsep_sock_path /tmp/tmpItSUnX/privsep.sock

Environment

• Platform9 Managed OpenStack - All Versions

• Pf9-ostackhost

Cause

The root account doesn't appear to be locked because it's an administrative account, but it won't allow any sudo commands to be run as the password has expired. Check the difference "Password expires" date to verify the password validity.

Below is a sample output of the chage command

None

$ sudo chage -l rootLast password change : Oct 14, 2019Password expires : Jan 12, 2020Password inactive : Feb 11, 2020Account expires : neverMinimum number of days between password change : 7Maximum number of days between password change : 90Number of days of warning before password expires : -1

Resolution

Reset the password for the root user on the affected host.