3 Password Administration

This chapter describes changing various STA database and service passwords. To change an STA username password, see the STA Installation and Configuration Guide.

Caution:

Do not change the WebLogic Administration console login password. If you change this password, you will need to reinstall STA.

This chapter includes the following sections:

Change an STA Database Account Password
Change the STA Backup Service and Resource Monitor Passwords

Change an STA Database Account Password

Follow this procedure to change the STA Database Root Account, Application Account, Reports Account, or DBA Account password.

Note:

The STA Database Root Account password should be changed by the MySQL database administrator only.

Begin as follows:
- If you are changing the STA Database Root Account, Reports Account, or DBA Account password, go to Step 11.
- If you are changing the STA Application Account password, go to the next step to first change the password in WebLogic.
  
  Caution:
  Changing the STA Application Account password requires synchronizing the password between WebLogic and the MySQL database and then stopping and re-starting all STA processes. Some library transactions will be lost. Oracle recommends that you back up the STA database before starting this procedure.
Go to the WebLogic console login screen using the HTTP (default is 7001) or HTTPS (default is 7002) port number you selected during STA installation. For example:

https://yourHostName:PortNumber/console
Log in using the WebLogic Administration console username and password.
From the Domain Structure menu, select Services, then select Data Sources.

Description of the illustration dbpass_datasrc.png
In the Name column of the Data Source table, select ORASTADBCONN (select the name itself, not the check box).

Description of the illustration dbpass_orastadbconn.png
Click the Connection Pool tab.

Description of the illustration dbpass_connpool.png
In the Change Center section, click Lock & Edit.

Description of the illustration wl_lockedit.png
Enter and confirm the new password, and then click Save.
In the Change Center section, click Activate Changes.

Description of the illustration wl_activate.png
Log out of the WebLogic Administration Console.
Log in to the MySQL client as the Linux root user.

# mysql -uroot -p

Password: root_password
Type the following command:

mysql> use mysql;
Retrieve the list of STA database usernames.

mysql> select distinct(user) from user order by user;
Take note of the account username for which to change the password. You will use this username in the next step.
Issue the following commands to change the password. Use single quotes around the new_password and username variables.

mysql> update user set password=PASSWORD('new_password') where user='username';

mysql> commit;

mysql> flush privileges;
Exit from the MySQL client.

mysql> quit;
Set the new login path. This step varies depending on which database user password you changed in the previous steps.
- If you changed the STA Database Root Account password:
  1. Obtain a list of root user information.
    
    # mysql -u root -p -e "select user, host, password from mysql.user where user='root'"
    
    Enter password: new_mysql_root_password
    
    Example output:
```
+------+-----------+-------------------------------------------+
| user | host      | password                                  |
+------+-----------+-------------------------------------------+
| root | localhost | *ABCDEF123456789ABCDEF123456789ABCDEF1234 |
| root | server1   | *ABCDEF123456789ABCDEF123456789ABCDEF1234 |
| root | 127.0.0.1 | *1234ABCDEF1234ABCDEF1234ABCDEF1234ABCDEF |
| root | ::1       | *1234ABCDEF1234ABCDEF1234ABCDEF1234ABCDEF |
| root | %         | *1234ABCDEF1234ABCDEF1234ABCDEF1234ABCDEF |
+------+-----------+-------------------------------------------+
```
  2. To set the new login path password, execute the following command for each listed host. For example, if your list of hosts resembled that of the example output above, you would execute this command five times, replacing host with localhost, server1, 127.0.0.1, ::1, and %.
    
    # mysql_config_editor set --login-path=root_path --host=host --user=root --password
    
    Enter password: new_mysql_root_password
    
    WARNING : 'root_path' path already exists and will be overwritten.
    
    Continue? (Press y|Y for Yes, any other key for No) : y
  3. To test the new login path, execute the following command for each listed host.
    
    # mysql --login-path=root_path --host=host
    
    Welcome to the MySQL monitor. Commands end with ; or \g.
    
    Your MySQL connection id is 1234
    
    Server version: 5.6.15-enterprise-commercial-advanced-log MySQL Enterprise Server - Advanced Edition (Commercial)
    
    Copyright (c) 2000, 2013, Oracle and/or its affiliates. All rights reserved.
    
    Oracle is a registered trademark of Oracle Corporation and/or itsaffiliates. Other names may be trademarks of their respectiveowners.
    
    Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.
    
    mysql> quit
    
    Bye
- If you changed the STA Database Application Account, Reports Account, or DBA Account password:
  1. Obtain a list of database users.
    
    # mysql -u root -p -e "select user, host, password from mysql.user where user <> 'root'"
    
    Enter password: mysql_root_password
    
    Example output:
```
+--------+-----------+-------------------------------------------+
| user   | host      | password                                  |
+--------+-----------+-------------------------------------------+
| stadba | localhost | *ABCDEF123456789ABCDEF123456789ABCDEF1234 |
| stadba | %         | *ABCDEF123456789ABCDEF123456789ABCDEF1234 |
| staapp | localhost | *1234ABCDEF1234ABCDEF1234ABCDEF1234ABCDEF |
| staapp | %         | *1234ABCDEF1234ABCDEF1234ABCDEF1234ABCDEF |
| stausr | localhost | *1234ABCDEF1234ABCDEF1234ABCDEF1234ABCDEF |
| stausr | %         | *1234ABCDEF1234ABCDEF1234ABCDEF1234ABCDEF |
+--------+-----------+-------------------------------------------+
```
  2. To set the new login path password, execute the following command for each listed user and associated hosts. For example, if your list of users resembled that of the example output above, you would execute this command six times, replacing user with each user name (stadba, staapp, or stausr), and host with each host name (localhost or %) for each user.
    
    # mysql_config_editor set --login-path=user_path --host=host --user=root --password
    
    Enter password: new_user_password
    
    WARNING : 'root_path' path already exists and will be overwritten.
    
    Continue? (Press y|Y for Yes, any other key for No) : y
  3. To test the new login path, execute the following command for each listed user and associated hosts.
    
    # mysql --login-path=user_path --host=host
```
Welcome to the MySQL monitor.  Commands end with ; or \g.
Your MySQL connection id is 1234
Server version: 5.6.15-enterprise-commercial-advanced-log MySQL Enterprise Server - Advanced Edition (Commercial)
Copyright (c) 2000, 2013, Oracle and/or its affiliates. All rights reserved.
Oracle is a registered trademark of Oracle Corporation and/or itsaffiliates. Other names may be trademarks of their respectiveowners.
Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.
mysql> quit
Bye
```
Proceed as follows:
- If you changed the STA Database DBA Account password, see "Change the STA Backup Service and Resource Monitor Passwords" to synchronize the password for these services.
- If you changed the STA Database Application Account password, proceed to the next step.
- If you changed the STA Database Root Account or Reports Account, you are finished.
As root on the STA server, stop and then start all STA processes by issuing the following commands:

# STA stop all

# STA start all

For STA command usage details, see Chapter 1, "Server Administration."
Verify STA session connectivity:
1. Go to the STA GUI login screen using the HTTP (default is 7021) or HTTPS (default is 7022) port number you selected during STA installation. STA must be uppercase. For example:
  
  https://yourHostName:PortNumber/STA
2. Log in using the STA GUI Login username and password.
  - If you see a fully-populated Dashboard screen, you have successfully reset the STA Database Application Account password on both the WebLogic server and the MySQL database.
  - If you see an Application Error, then the password you defined in WebLogic does not match the STA Database Application Account password in the MySQL database. Ensure the passwords match.

Change the STA Backup Service and Resource Monitor Passwords

If you changed the STA Database DBA Account password in "Change an STA Database Account Password", you must update it in the STA Backup Service and Resource Monitor.

Change directories.

# cd /Oracle_storage_home/StorageTek_Tape_Analytics/common/bin
Ensure the STA Backup Service and Resource Monitor is online.
- Backup Service:
  
  # ./staservadm -Q
  
  Contacting daemon...connected.
  
  ...
- Resource Monitor:
  
  # ./staresmonadm -Q
  
  Contacting daemon...connected.
  
  ...
As the system root user, reset the STA Backup Service and Resource Monitor passwords by issuing the following commands, where dba_user is the STA Database DBA Account username and dba_password is the current STA Database DBA Account password:
- Backup Service:
  
  # ./staservadm -U dba_user -P
  
  Enter database password: dba_password
- Resource Monitor:
  
  # ./staresmonadm -U dba_user -P
  
  Enter database password: dba_password
Note:
You may alternately enter the password on the command line after -P; however, doing so is less secure and is discouraged.