How to recover admin password for SonarQube

Question

I forgot the admin password for SonarQube. Googled and found that the value for crypted_password should be updated to 8b1254c1c684c5dc904f3f174cea1cacbde4ad84 which will reset the password to admin. But still I am not able to login. Any advice?

Answer 1

Just an update to this the new link is here:

https://docs.sonarqube.org/latest/instance-administration/security/#header-3

As it says on the link you can do this:

In case you lost the admin password of your SonarQube instance, you can reset it by executing the following query:

PostgreSQL and Microsoft SQL Server

update users set crypted_password='100000$t2h8AtNs1AlCHuLobDjHQTn9XppwTIx88UjqUm4s8RsfTuXQHSd/fpFexAnewwPsO6jGFQUv/24DnO55hY6Xew==', salt='k9x9eN127/3e/hf38iNiKwVfaVk=', hash_method='PBKDF2', reset_password='true', user_local='true' where login='admin';

Oracle

update users set crypted_password='100000$t2h8AtNs1AlCHuLobDjHQTn9XppwTIx88UjqUm4s8RsfTuXQHSd/fpFexAnewwPsO6jGFQUv/24DnO55hY6Xew==', salt='k9x9eN127/3e/hf38iNiKwVfaVk=', hash_method='PBKDF2', reset_password=1, user_local=1 where login='admin';

This will reset the password for admin user to admin.

Answer 2

I'm not sure where you got the info. Here's the official documentation to reset the password and to recreate an admin user

Answer 3

You need to connect to sonar DB and change the admin password from there. For postgresql:

psql -h mysonar.dc9wocad9da.us-west-1.rds.amazonaws.com -p 5432 -U sonaruser sonardb

Then run the query:

update users set crypted_password = '88c991e39bb88b94178123a849606905ebf440f5', salt='6522f3c5007ae910ad690bb1bdbf264a34884c6d' where login = 'admin';

Your new admin pass is:

user: admin
pass admin

Don't forget to change the admin pass after you log in.

Source: https://docs.sonarqube.org/display/SONAR/Authentication

Answer 4

I would like to share the way how I recovered admin user password for Bitnami SonarQube hosted on AWS EC2 but I think it will be as well valid for any other cases.

In my case I do not have admin password and no database password. Here's list of steps that I took to reset admin password.

1. SSH to EC2 Instance
2. Find sonar.properties file. In my case it was located at /opt/bitnami/apps/sonarqube/sonarqube/conf/
3. In DATABASE section I found properties sonar.jdbc.username and sonar.jdbc.password which were in my case mysql credentials as plain text.
4. Connect to mysql using credentials

mysql -uSONARQUBE_USER -p -D bitnami_sonarqube

5. On documentation page in section Reinstating Admin Access you'll find query which allows you from database level reset admin user password to default password which is simply admin.

update users set crypted_password = '$2a$12$uCkkXmhW5ThVK8mpBvnXOOJRLd64LJeHTeCkSuB3lfaR2N0AYBaSi', salt=null, hash_method='BCRYPT' where login = 'admin'

6. Go to SonarQube in your browser and try to login using credentials admin/admin
7. Do not forget to change password after successful login.

Answer 5

The password reset is working fine with postgres DB users table update when you lost the admin user password. You can reset password with the following encrypted value and salt for any user in sonar DB.

Login to Sonar DB:

psql -U sonar_user -W
sonar_db=# select * from users;

Check the table login column and select the user you want to reset the password. If you don't have sonar admin console access.

update users set crypted_password = '88c991e39bb88b94178123a849606905ebf440f5', salt='6522f3c5007ae910ad690bb1bdbf264a34884c6d' where login = 'sonara_user_name';

Then the password will be admin. After you log in to the system please make sure to reset the password to your own password.

Answer 6

Official documentation : https://docs.sonarqube.org/latest/instance-administration/security/#header-3

update users set crypted_password='100000$t2h8AtNs1AlCHuLobDjHQTn9XppwTIx88UjqUm4s8RsfTuXQHSd/fpFexAnewwPsO6jGFQUv/24DnO55hY6Xew==', salt='k9x9eN127/3e/hf38iNiKwVfaVk=', hash_method='PBKDF2', reset_password='true', user_local='true' where login='admin';

Answer 7

How to generate sonarqube password hash ?

private static final class Sha1Function implements HashFunction {
@Override
public AuthenticationResult checkCredentials(UserDto user, String password) {
  if (user.getCryptedPassword() == null) {
    return new AuthenticationResult(false, "null password in DB");
  }
  if (user.getSalt() == null) {
    return new AuthenticationResult(false, "null salt");
  }
  if (!user.getCryptedPassword().equals(hash(user.getSalt(), password))) {
    return new AuthenticationResult(false, "wrong password");
  }
  return new AuthenticationResult(true, "");
}

private static String hash(String salt, String password) {
  return DigestUtils.sha1Hex("--" + salt + "--" + password + "--");
}

---

#!/usr/bin/env python3
# -*- coding: utf-8 -*-

import hashlib


def hash(salt, password):
    """calc sonar crypted_password
    """

    return hashlib.new(
        'sha1',
        bytes(f"--{salt}--{password}--", 'utf-8')
    ).hexdigest()



if __name__ == '__main__':
    # admin: admin

    password = 'admin'
    salt = '6522f3c5007ae910ad690bb1bdbf264a34884c6d'
    crypted_password = '88c991e39bb88b94178123a849606905ebf440f5'

    if crypted_password == hash(salt, password):
        print(f"{password} -> sonarqube hash algorithm-> {crypted_password}")

Answer 8

If you have Sonarqube running in Docker, and you have mounted a volume for data persistence, then you can delete the e7 folder, and the sonar.mv.db database file before spinning up the container.

This will reset your Sonarqube instance back to a fresh install.

An example of a docker container that is running Community Edition v8.9

docker container run -e SONARQUBE_HOME=/opt/sonarqube/data -e SQ_DATA_DIR=/opt/sonarqube/data -e PWD=/opt/sonarqube/data -v c:/src/data/sonarqube/:/opt/sonarqube/data -dp 9000:9000 --name sonarqube sonarqube:8.9-community

Where c:/src/data/sonarqube/ is the local folder (bound to container /opt/sonarqube/data) that will have the e7 folder and the sonar.mv.db file that can be deleted.

Beware: you will lose all your projects and tokens by following these instructions, but you will gain admin access to a fresh installation of Sonarqube.

Answer 9

The official documentation when writing this answer currently states:

Reinstating Admin Access

If you changed and then lost the admin password, you can reset it using the following query:

update users set crypted_password='100000$t2h8AtNs1AlCHuLobDjHQTn9XppwTIx88UjqUm4s8RsfTuXQHSd/fpFexAnewwPsO6jGFQUv/24DnO55hY6Xew==', salt='k9x9eN127/3e/hf38iNiKwVfaVk=', hash_method='PBKDF2', reset_password='true', user_local='true' where login='admin';

If you've deleted admin and subsequently locked out the other users with global administrative permissions, you'll need to re-grant admin to a user with the following query:

INSERT INTO user_roles(uuid, user_uuid, role) 
VALUES ('random-uuid',
(select uuid from users where login='mylogin'), 
'admin');

---

It worked like a charm on my sonarqube instance version 8.9.7

Also, if you're using kubernetes you can start a psql container easily with the following commands:

kubectl run --restart=Never --image=governmentpaas/psql --command=true psql -- sleep infinity
kubectl exec -it psql -- sh

Then connect to the database with the following command

psql -h yourhostname --user sonarqubeuser -d sonarqubedb

Answer 10

As official docs of sonarqube said that

If you changed and then lost the admin password, you can reset it using the following query:

update users 
set crypted_password = '$2a$12$uCkkXmhW5ThVK8mpBvnXOOJRLd64LJeHTeCkSuB3lfaR2N0AYBaSi', 
    salt=null, 
    hash_method='BCRYPT' 
where login = 'admin'