rbac_control

New in version 4.6.0.

The rbac_control tool allows managing resources from the Wazuh RBAC database and resetting the DB to its default state. For more information about the Wazuh RBAC resources and database, please visit the How it works section.

Usage

Option name	Option description
`-h, --help`	Display the help message.
`change-password`	Change the password for each default user.
`factory-reset`	Reset the RBAC database to its default state. Ask for confirmation unless the -f/--force flag is used.

Examples

-h argument:

# /var/ossec/bin/rbac_control -h

usage: rbac_control.py [-h] {change-password,factory-reset} ...

Wazuh RBAC tool: manage resources from the Wazuh RBAC database

Arguments:
  {change-password,factory-reset}
    change-password     Change the password for each default user. Empty values will leave the password unchanged.
    factory-reset       Reset the RBAC database to its default state. This will completely wipe your custom RBAC information.

optional arguments:
  -h, --help            show this help message and exit

factory-reset example:

# /var/ossec/bin/rbac_control factory-reset

This action will completely wipe your RBAC configuration and restart it to default values. Type RESET to proceed: RESET
    Successfully reset RBAC database

factory-reset example (aborted):

# /var/ossec/bin/rbac_control factory-reset

This action will completely wipe your RBAC configuration and restart it to default values. Type RESET to proceed: aa
    RBAC database reset aborted.

change-password example with an insecure password:

# /var/ossec/bin/rbac_control change-password

New password for 'wazuh' (skip):
New password for 'wazuh-wui' (skip):
    wazuh: FAILED | Error 5007 - Insecure user password provided

change-password example where the wazuh user password was changed successfully (to skip any of the user, leave the new password blank):

# /var/ossec/bin/rbac_control change-password

New password for 'wazuh' (skip):
New password for 'wazuh-wui' (skip):
    wazuh: UPDATED