# Starting PF9-Ostackhost Results in Error: "sudo: Password expired, contact your system administrator

## Problem

* Starting pf9-ostackhost results in "error: sudo: Password expired, contact your system administrator"
* Below messages are recorded in */var/log/pf9/ostackhost.log*

{% tabs %}
{% tab title="None" %}

```none
2020-04-07 15:39:18.446 WARNING oslo.privsep.daemon [-] privsep log: sudo: Password expired, contact your system administrator
```

{% endtab %}
{% endtabs %}

* In */var/log/secure* we see that it appears to be leveraging the root account for which the system is stating the password has expired.

{% tabs %}
{% tab title="None" %}

```none
Apr 7 15:38:25 ladcsoshv01 sudo: root : Password expired, contact your system administrator ; TTY=pts/8 ; PWD=/opt/pf9/home ; USER=root ; ENV=LD_LIBRARY_PATH=/opt/pf9/python/pf9-lib:/opt/pf9/venv/lib/python2.7 PYTHONPATH=/opt/pf9/python/lib/python2.7:/opt/pf9/venv/lib/python2.7 ; COMMAND=/opt/pf9/venv/bin/nova-rootwrap /opt/pf9/etc/nova/rootwrap.conf /opt/pf9/venv/bin/privsep-helper --config-dir /opt/pf9/etc/nova/conf.d --privsep_context vif_plug_ovs.privsep.vif_plug --privsep_sock_path /tmp/tmpItSUnX/privsep.sock
```

{% endtab %}
{% endtabs %}

## Environment

* Platform9 Managed OpenStack - All Versions
* Pf9-ostackhost

## Cause

The root account doesn't appear to be locked because it's an administrative account, but it won't allow any sudo commands to be run as the password has expired. Check the difference "Password expires" date to verify the password validity.

Below is a sample output of the **chage** command

{% tabs %}
{% tab title="None" %}

```none
$ sudo chage -l rootLast password change : Oct 14, 2019Password expires : Jan 12, 2020Password inactive : Feb 11, 2020Account expires : neverMinimum number of days between password change : 7Maximum number of days between password change : 90Number of days of warning before password expires : -1
```

{% endtab %}
{% endtabs %}

## Resolution

Reset the password for the root user on the affected host.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://platform9.com/kb/pmo/solution/starting-pf9-ostackhost-results-in-error-sudo-password-expired.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.