Error:
An unexpected error occurred. Please click Reload to try again.
Error:
An unexpected error occurred. Please click Reload to try again.
Why is the firewall displaying "__openconfig" as one of the admin user when it is not configured?

Why is the firewall displaying "__openconfig" as one of the admin user when it is not configured?

13914
Created On 05/09/24 12:40 PM - Last Modified 03/16/25 19:13 PM


Question


Why is the user named "__openconfig" displayed when running "show admin local all" command?



Environment


  • VM Series Firewalls and Panorama
  • PANOS 10.1 and above


Answer


  1. User "__openconfig" with "Device Administratorrole is a result of PANOS OpenConfig Plugin installation.
  2. For PANOS version is 11.1 and above, the plugin comes prepackaged automatically, in turn, creating the user.
  3. For PANOS versions prior to 11.1, the plugin needs to be installed manually for the user to be created.
    1. OpenConfig plugin version 2.0.1 and later, The plugin is automatically installed on PAN-OS version 11.0.4 and later.
    2. OpenConfig plugin version 2.0.2 and later, The plugin is automatically installed on PAN-OS version 10.2.11 and later versions of 10.2.
  4. Seeing messages in the logs such as password changes, authenticated user or unable to create API key for the __openconfig user with IP 127.0.0.1, this is normal.openconfig logs
  5. You may manually upgrade the openconfig plugin by following these steps.
  6. If you do not use the OpenConfig plugin, disable or uninstall it by following these steps:
    1. Select Device > Plugins.
    2. Locate the installed OpenConfig plugin.
    3. Remove Config to disable the OpenConfig plugin
      OR
      Uninstall the OpenConfig plugin.


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u0000010yx8CAA&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language