I need to reset the password of my admin user

[angelosefs]

Globaleaks 5.0.88 on Debian
I lost my access to the password of the admin user in the console. But i can access the root/admin user in the debian where globaleaks is installed.

How can i change my admin password? I tried everything gl-admin reset-password as i understand now it needs the old password which i dont have, also in the user table there is no column with a password

I understand that this implemented this way for security reasons but I really need a way to recover my admin account without breaking the existing installation, as there are some reports

[evilaliv3]

Hello @angelosefs

We are sorry to ear the situation.

We can guide you recovering configurations but i've to be clear that:

there is no way to recover your account as is
there is no way to recover your encryption keys and escrow keys
if you have users and real submissions and they have their password the best thing right know is to ask to download alll the submissions

In fact at the moment having lost your administrative passwords and your account recovery key, there will be no to eventually recover your users account. For this reason it is proprietary to support them getting access to their data before they possible lose their password.

[evilaliv3]

Thank you @MirokoSan. At the moment such a reset procedure to preserve the configuration but reset users and data does not exist.

We will try to create one later in the year, but unfortunately you could only proceed replicating your setup manually

[MirokoSan]

thank you @evilaliv3, and a procedure to preserve the configuration, without restore user and data exist?

[evilaliv3]

Thank you @MirokoSan, As stated such a procedure does not exist today.

I imagine we could possibly work on a procedure to

• preserve configurations
• delete every user
• create a new user and set a random password

As you may understand such a procedure is very risky and prone to possible abuses and for this reason for the moment we considered to avoid implementing it.

[MirokoSan]

thank you @evilaliv3, but if i remeber the last password but not the secure key(and i had the password of gl-admin) i had some possibilty to recover the user?
i'm sure about the last password is correct and not change but after 3 month i don t understand why the autentication failed

[evilaliv3]

to access you need either a valid password or a key.

if you are sure your password is valid, maybe you are entering the wrong username?
you can check which is the correct username accessing the table 'user' via the sqlitebrowser opening the file /var/globaleaks/globaleaks.db