Docker EE administrators can reset user passwords managed in UCP:
User passwords managed with an LDAP service must be changed on the LDAP server.
Administrators who need to update their passwords can ask another administrator for help or SSH into a Docker Enterprise manager node and run:
docker run --net=host -v ucp-auth-api-certs:/tls -it "$(docker inspect --format '{{ .Spec.TaskTemplate.ContainerSpec.Image }}' ucp-auth-api)" "$(docker inspect --format '{{ index .Spec.TaskTemplate.ContainerSpec.Args 0 }}' ucp-auth-api)" passwd -i
If you have DEBUG set as your global log level within UCP, running
$(docker inspect --format '{{ index .Spec.TaskTemplate.ContainerSpec.Args 0
}}
returns --debug
instead of --db-addr
. Pass Args 1
to
$docker inspect
instead to reset your admin password.
docker run --net=host -v ucp-auth-api-certs:/tls -it "$(docker inspect
--format '{{ .Spec.TaskTemplate.ContainerSpec.Image }}' ucp-auth-api)"
"$(docker inspect --format '{{ index .Spec.TaskTemplate.ContainerSpec.Args 1
}}' ucp-auth-api)" passwd -i