Administrator password

A member’s forgotten password is reset by the administrator in the portal (see Users). The administrator’s own password cannot be reset in the portal. It is reset on the box itself.

Who can do this

Someone who can run commands as root on the box:

at the box, with a keyboard and screen, signed in on its console; or
the operator, over SSH, with a key listed under Administration, General, Operator SSH access, while SSH is switched on.

Before you start

A keyboard and screen on the box, or SSH access.
The office network, for the sign-in afterwards.

Steps

Sign in on the box (console or SSH).
Run:
```
sudo company-os-people reset-admin
```
The command prints the administrator’s name, e-mail address and a one-time password.
In the office, open https://myai.local/ and sign in with the administrator’s e-mail address and the one-time password.
The portal asks for a new password at once: at least 12 characters, with upper-case and lower-case letters and a number.

What you see afterwards

Every browser still signed in as the administrator is signed out.
Failed sign-ins of the administrator are cleared, so a 15-minute lock-out ends at once.
Company activity shows “Administrator password of … reset on the box console”, by System. The password itself is never written anywhere.

If something goes wrong

What you see	What to do
“run this as root on the box”	Start the command with `sudo`.
“this box has no accounts yet; create the administrator in the portal”	The administrator was never created. Use the one-time setup code instead; see First run.
“This box has more than one administrator: name one with –email.”	Add `--email` and the administrator’s address to the command.

Your choices

Choice	What it does	When to pick it	Can you undo it?
reset-admin	A one-time password for the administrator; every session of the administrator ends.	The administrator forgot the password.	No, but the administrator chooses a new one.