Skip Headers
StorageTek Tape Analytics Administration Guide
Release 2.0
E39010-01
  Go To Table Of Contents
Contents
Go To Index
Index

Previous
Previous
 
Next
Next
 

4 Password Administration

This chapter describes changing various STA database and service passwords. To change STA user passwords (for example, the STA GUI Login password), see "Configuring Users" within the STA Installation and Configuration Guide.


Caution:

Do not change the WebLogic Admin Console Login password. If you change this password, you will need to reinstall STA.

4.1 Change an STA Database Account Password

Follow this procedure to change the STA Database Root AccountFoot 1 , Application Account, Reports Account, or DBA Account password.

  1. Begin as follows:

    • If you are changing the STA Database Root Account, Reports Account, or DBA Account password, skip to Step 11.

    • If you are changing the STA Application Account password, go to the next step to first change the password in WebLogic.


      Caution:

      Changing the STA Application Account password requires synchronizing the password between WebLogic and the MySQL database and then stopping and re-starting all STA processes. Some library transactions will be lost. Oracle recommends that you back up the STA database before starting this procedure.

  2. Go to the WebLogic console login screen using the HTTP (default is 7001) or HTTPS (default is 7002) port number you selected during STA installation.

    http(s)://yourHostName:PortNumber/console/

  3. Log in using the WebLogic Admin Console username and password.

  4. Under Domain Structure > Services, select Data Sources.

    Surrounding text describes dbpass_datasrc.png.
  5. Select the ORASTADBCONN data source name (select the name, not the check box).

    Surrounding text describes dbpass_orastadbconn.png.
  6. Click the Connection Pool tab.

    Surrounding text describes dbpass_connpool.png.
  7. Click the Lock & Edit button in the upper left-hand corner.

    Surrounding text describes wl_lockedit.png.
  8. Enter and confirm the new password, and then click Save.

  9. Click the Activate Changes button in the upper left-hand corner of the screen.

    Surrounding text describes wl_activate.png.
  10. Log out of the WebLogic Administration Console.

  11. Log in to the MySQL client as root user.

    # mysql -uroot -p
    Password: root-password
    
  12. Enter the use mysql command.

    mysql> use mysql;
    
  13. Retrieve the list of STA database usernames.

    mysql> select distinct(user) from user order by user;
    
  14. Take note of the account username for which to change the password. You will use this username in the next step.

  15. Issue the following commands to change the password. Use single quotes around the new-password and username variables.

    mysql> update user set password=PASSWORD('new-password') where user='username';
    mysql> commit;
    mysql> flush privileges;
    
  16. Exit out of the MySQL client.

    mysql> quit;
    
  17. Set the new login path. This step varies depending on which database user password you changed in the previous steps.

    • If you changed the STA Database Root Account password:

      1. Obtain a list of root user information.

        # mysql -u root -p -e "select user, host, password from mysql.user where user='root'"
        Enter password: new-mysql-root-password
        

        Example output:

        +------+-----------+-------------------------------------------+
        | user | host      | password                                  |
        +------+-----------+-------------------------------------------+
        | root | localhost | *ABCDEF123456789ABCDEF123456789ABCDEF1234 |
        | root | server1   | *ABCDEF123456789ABCDEF123456789ABCDEF1234 |
        | root | 127.0.0.1 | *1234ABCDEF1234ABCDEF1234ABCDEF1234ABCDEF |
        | root | ::1       | *1234ABCDEF1234ABCDEF1234ABCDEF1234ABCDEF |
        | root | %         | *1234ABCDEF1234ABCDEF1234ABCDEF1234ABCDEF |
        +------+-----------+-------------------------------------------+
        
      2. To set the new login path password, execute the following command for each listed host. For example, if your list of hosts resembled that of the example output above, you would execute this command five times, replacing host with localhost, server1, 127.0.0.1, ::1, and %.

        # mysql_config_editor set --login-path=root_path --host=host --user=root --password
        Enter password: new-mysql-root-password
        WARNING : 'root_path' path already exists and will be overwritten.
        Continue? (Press y|Y for Yes, any other key for No) : y
        
      3. To test the new login path, execute the following command for each listed host.

        # mysql --login-path=root_path --host=host
        Welcome to the MySQL monitor.  Commands end with ; or \g.
        Your MySQL connection id is 1234
        Server version: 5.6.15-enterprise-commercial-advanced-log MySQL Enterprise Server - Advanced Edition (Commercial)
        
        Copyright (c) 2000, 2013, Oracle and/or its affiliates. All rights reserved.
        
        Oracle is a registered trademark of Oracle Corporation and/or itsaffiliates. Other names may be trademarks of their respectiveowners.
        
        Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.
        
        mysql> quit
        Bye
        
    • If you changed the STA Database Application Account, Reports Account, or DBA Account password:

      1. Obtain a list of database users.

        # mysql -u root -p -e "select user, host, password from mysql.user where user <> 'root'"
        Enter password: mysql-root-password
        

        Example output:

        +--------+-----------+-------------------------------------------+
        | user   | host      | password                                  |
        +--------+-----------+-------------------------------------------+
        | stadba | localhost | *ABCDEF123456789ABCDEF123456789ABCDEF1234 |
        | stadba | %         | *ABCDEF123456789ABCDEF123456789ABCDEF1234 |
        | staapp | localhost | *1234ABCDEF1234ABCDEF1234ABCDEF1234ABCDEF |
        | staapp | %         | *1234ABCDEF1234ABCDEF1234ABCDEF1234ABCDEF |
        | stausr | localhost | *1234ABCDEF1234ABCDEF1234ABCDEF1234ABCDEF |
        | stausr | %         | *1234ABCDEF1234ABCDEF1234ABCDEF1234ABCDEF |
        +--------+-----------+-------------------------------------------+
        
      2. To set the new login path password, execute the following command for each listed user and associated host(s). For example, if your list of users resembled that of the example output above, you would execute this command six times, replacing user with each user name (stadba, staapp, or stausr), and host with each host name (localhost or %) for each user.

        # mysql_config_editor set --login-path=user_path --host=host --user=root --password
        Enter password: new-user-password
        WARNING : 'root_path' path already exists and will be overwritten.
        Continue? (Press y|Y for Yes, any other key for No) : y
        
      3. To test the new login path, execute the following command for each listed user and associated host(s).

        # mysql --login-path=user_path --host=host
        Welcome to the MySQL monitor.  Commands end with ; or \g.
        Your MySQL connection id is 1234
        Server version: 5.6.15-enterprise-commercial-advanced-log MySQL Enterprise Server - Advanced Edition (Commercial)
        
        Copyright (c) 2000, 2013, Oracle and/or its affiliates. All rights reserved.
        
        Oracle is a registered trademark of Oracle Corporation and/or itsaffiliates. Other names may be trademarks of their respectiveowners.
        
        Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.
        
        mysql> quit
        Bye
        
  18. Proceed as follows:

    • If you changed the STA Database DBA Account password, see "Change the STA Backup Service and Resource Monitor Passwords" to synchronize the password for these services.

    • If you changed the STA Database Application Account password, proceed to the next step.

    • If you changed the STA Database Root Account or Reports Account, you are finished.

  19. As root on the STA server, stop and then start all STA processes by issuing the following commands:

    # STA stop all
    # STA start all
    

    For STA command usage details, see Chapter 2, "Server Administration."

  20. Verify STA session connectivity:

    1. Go to the STA GUI login screen using the HTTP (default is 7021) or HTTPS (default is 7022) port number you selected during STA installation. "STA" must be uppercase.

      http(s)://yourHostName:PortNumber/STA/

    2. Log in using the STA GUI Login username and password.

      • If you see a fully-populated Dashboard screen, you have successfully reset the STA Database Application Account password on both the WebLogic server and the MySQL database.

      • If you see an Application Error, then the password you defined in WebLogic does not match the STA Database Application Account password in the MySQL database. Ensure the passwords match.

4.2 Change the STA Backup Service and Resource Monitor Passwords

If you changed the STA Database DBA Account password in "Change an STA Database Account Password", you must update it in the STA Backup Service and Resource Monitor.

  1. Change directories.

    # cd /Oracle/StorageTek_Tape_Analytics/common/bin
    
  2. Ensure the STA Backup Service and Resource Monitor is online.

    • Backup Service:

      # ./staservadm -Q
      Contacting daemon...connected.
      ...
      
    • Resource Monitor:

      # ./staresmonadm -Q
      Contacting daemon...connected.
      ...
      
  3. As the system root user, reset the STA Backup Service and Resource Monitor passwords by issuing the following commands, where dba_user is the STA Database DBA Account username and dba_password is the current STA Database DBA Account password:

    • Backup Service:

      # ./staservadm -U dba_user -P
      Enter database password: dba_password
      
    • Resource Monitor:

      # ./staresmonadm -U dba_user -P
      Enter database password: dba_password
      

    Note:

    You may alternately enter the password on the command line after -P; however, doing so is less secure and is discouraged.



Footnote Legend

Footnote 1: Should only be changed by the MySQL database administrator.