Docker EE administrators can reset user passwords managed in UCP:
Users passwords managed with an LDAP service must be changed on the LDAP server.
Administrators who need a password change can ask another administrator for help or use ssh to log in to a manager node managed by Docker EE and run:
docker run --net=host -v ucp-auth-api-certs:/tls -it "$(docker inspect --format '{{ .Spec.TaskTemplate.ContainerSpec.Image }}' ucp-auth-api)" "$(docker inspect --format '{{ index .Spec.TaskTemplate.ContainerSpec.Args 0 }}' ucp-auth-api)" passwd -i