docs/ee/ucp/authorization/reset-user-password.md

48 lines
1.9 KiB
Markdown

---
title: Reset a user password
description: Learn how to recover your Docker Enterprise Edition credentials.
keywords: ucp, authentication, password
---
## Change user passwords
### Managed in UCP
Docker EE administrators can reset user passwords managed in UCP:
1. Log in to UCP with administrator credentials.
2. Navigate to **Access Control > Users**.
3. Select the user whose password you want to change.
![](../images/recover-a-user-password-1.png){: .with-border}
4. Click **Edit**. Once on the "Update User" view, select **Security** from the left navigation.
5. Enter the new password, confirm, and click **Update Password**.
![](../images/recover-a-user-password-2.png){: .with-border}
### Managed through LDAP
User passwords managed with an LDAP service must be changed on the LDAP server.
## Change administrator passwords
Administrators who need to update their passwords can ask another administrator for help
or SSH into a Docker Enterprise [manager node](/engine/swarm/how-swarm-mode-works/nodes/#manager-nodes) and run:
{% raw %}
```bash
docker run --net=host -v ucp-auth-api-certs:/tls -it "$(docker inspect --format '{{ .Spec.TaskTemplate.ContainerSpec.Image }}' ucp-auth-api)" "$(docker inspect --format '{{ index .Spec.TaskTemplate.ContainerSpec.Args 0 }}' ucp-auth-api)" passwd -i
```
{% endraw %}
### With DEBUG Global Log Level
{% raw %}
If you have DEBUG set as your global log level within UCP, running `$(docker inspect --format '{{ index .Spec.TaskTemplate.ContainerSpec.Args 0 }}` returns `--debug` instead of `--db-addr`. Pass `Args 1` to `$docker inspect` instead to reset your admin password.
{% endraw %}
{% raw %}
```bash
docker run --net=host -v ucp-auth-api-certs:/tls -it "$(docker inspect --format '{{ .Spec.TaskTemplate.ContainerSpec.Image }}' ucp-auth-api)" "$(docker inspect --format '{{ index .Spec.TaskTemplate.ContainerSpec.Args 1 }}' ucp-auth-api)" passwd -i
```
{% endraw %}