Launching soon: The world's first vendor agnostic bug scrubLearn more & join waitlist
OPERATIONAL DEFECT DATABASE
...
...
HPE M-Series with NVIDIA Cumulus Linux switch version 5.9.1 and later utilizes an enhanced security method where the user password is converted into a hashed string. Users will be affected by this change only when attempting to manually restore the Cumulus switch configuration by copying and pasting NVIDIA NVUE CLI commands. NOTE : This does not affect upgrading from Cumulus Linux 5.6.0 to Cumulus 5.9.1 or later. The recommended method to restore the configuration on the switch after an installation of version 5.9.1 or later is to utilize the Cumulus patch command with a saved startup.yaml file. IMPORTANT : Before upgrading, save the configuration on the switch using the nv config save command. Navigate to the /etc/nvue.d folder on the switch and copy the startup.yaml file off the switch to a safe location that can be accessed later. Once the binary install of the NOS is complete, copy the startup.yaml file to the /home/cumulus directory using Secure Copy (SCP). Once the startup file is transferred to the directory, run the nv config patch /home/cumulus/startup.yaml command to restore the configuration on the switch. Finally, issue the nv config apply command to apply the configuration:
This document applies to the following HPE M-Series Cumulus switches in an MLAG configuration: HPE SN2010M 25GbE 18SFP28 4QSFP28 Power to Connector Airflow Half Width Switch SN2010M with NVIDIA Cumulus [S2T75A] HPE SN2100M 100GbE 16QSFP28 Power to Connector Airflow Half Width Switch SN2100M with NVIDIA Cumulus [S2T76A] HPE SN3420M 25GbE 48SFP28 12QSFP28 Power to Connector Airflow Switch SN3420M with NVIDIA Cumulus [S2T77A] HPE SN3700cM 100GbE 32QSFP28 Power to Connector Airflow Switch SN3700cM with NVIDIA Cumulus [S2T78A] HPE SN4600cM 100GbE 64QSFP28 Power to Connector Airflow Switch SN4600cM with NVIDIA Cumulus [S2T80A] HPE SN3700M 200GbE 32QSFP56 Power to Connector Airflow Switch SN3700M with NVIDIA Cumulus [S2T79A] HPE SN4700M 400GbE 32QSFPDD Power to Connector Airflow Switch SN4700M with NVIDIA Cumulus [S2T81A]
IMPORTANT : If the switch is restored using the copy/paste method and the user logs out of the switch or closes the SSH session, there is no way to access the switch again and the OS will need to be reinstalled on the switch via Open Network Installer Environment (ONIE). If the switch configuration is already restored, for a 5.9.1 or later NOS using the copy/paste method and has access to the switch via console/SSH, then run the following commands to unset the hashed password: cumulus@cumulus:mgmt:~$ nv unset system aaa user cumulus full-name cumulus,,, cumulus@cumulus:mgmt:~$ nv unset system aaa user cumulus hashed-password '*' cumulus@cumulus:mgmt:~$ nv config apply Now, change the cumulus password using the following command: cumulus@cumulus:mgmt:~$ passwd This method will successfully update the password for the "cumulus" user and the customers can login using the new credentials.