> For the complete documentation index, see [llms.txt](https://platform9.com/kb/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://platform9.com/kb/pmo/solution/starting-pf9-ostackhost-results-in-error-sudo-password-expired.md).

# Starting PF9-Ostackhost Results in Error: "sudo: Password expired, contact your system administrator

## Problem

* Starting pf9-ostackhost results in "error: sudo: Password expired, contact your system administrator"
* Below messages are recorded in */var/log/pf9/ostackhost.log*

{% tabs %}
{% tab title="None" %}

```none
2020-04-07 15:39:18.446 WARNING oslo.privsep.daemon [-] privsep log: sudo: Password expired, contact your system administrator
```

{% endtab %}
{% endtabs %}

* In */var/log/secure* we see that it appears to be leveraging the root account for which the system is stating the password has expired.

{% tabs %}
{% tab title="None" %}

```none
Apr 7 15:38:25 ladcsoshv01 sudo: root : Password expired, contact your system administrator ; TTY=pts/8 ; PWD=/opt/pf9/home ; USER=root ; ENV=LD_LIBRARY_PATH=/opt/pf9/python/pf9-lib:/opt/pf9/venv/lib/python2.7 PYTHONPATH=/opt/pf9/python/lib/python2.7:/opt/pf9/venv/lib/python2.7 ; COMMAND=/opt/pf9/venv/bin/nova-rootwrap /opt/pf9/etc/nova/rootwrap.conf /opt/pf9/venv/bin/privsep-helper --config-dir /opt/pf9/etc/nova/conf.d --privsep_context vif_plug_ovs.privsep.vif_plug --privsep_sock_path /tmp/tmpItSUnX/privsep.sock
```

{% endtab %}
{% endtabs %}

## Environment

* Platform9 Managed OpenStack - All Versions
* Pf9-ostackhost

## Cause

The root account doesn't appear to be locked because it's an administrative account, but it won't allow any sudo commands to be run as the password has expired. Check the difference "Password expires" date to verify the password validity.

Below is a sample output of the **chage** command

{% tabs %}
{% tab title="None" %}

```none
$ sudo chage -l rootLast password change : Oct 14, 2019Password expires : Jan 12, 2020Password inactive : Feb 11, 2020Account expires : neverMinimum number of days between password change : 7Maximum number of days between password change : 90Number of days of warning before password expires : -1
```

{% endtab %}
{% endtabs %}

## Resolution

Reset the password for the root user on the affected host.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://platform9.com/kb/pmo/solution/starting-pf9-ostackhost-results-in-error-sudo-password-expired.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
