4 Administering Passwords

This chapter describes changing various STA database and service passwords. To change an STA username password, see the STA User's Guide.

Caution:

Do not change the WebLogic Administration console login password. If you change this password, you will need to reinstall STA.

This chapter includes the following sections:

Username and Password Requirements

Username requirements are as follows:

  • Must be 1–16 characters in length

  • All usernames must be unique

Password requirements are as follows:

  • Must be 8–32 characters in length

  • Must include at least one uppercase letter and one number

  • Must not include spaces or tabs

  • Must not include any of the following special characters:

    % & ' ( ) < > ? { } * \ ' " ; , + = #

Change an STA Database Account Password

Follow this procedure to change the STA Database Root Account, Application Account, Reports Account, or DBA Account password.

Note:

The STA Database Root Account password should be changed by the MySQL database administrator only.

  1. Begin as follows:

    • If you are changing the STA Application Account password, go to the next step to first change the password in WebLogic.

      Caution:

      Changing the STA Application Account password requires synchronizing the password between WebLogic and the MySQL database and then stopping and re-starting all STA processes. Some library transactions will be lost. Oracle recommends that you back up the STA database before starting this procedure.

  2. Go to the WebLogic console login screen using the HTTP (default is 7001) or HTTPS (default is 7002) port number you selected during STA installation. For example:

    https://yourHostName:PortNumber/console

  3. Log in using the WebLogic Administration console username and password.

  4. From the Domain Structure menu, select Services, then select Data Sources.

    Description of dbpass_datasrc.png follows
    Description of the illustration ''dbpass_datasrc.png''

  5. In the Name column of the Data Source table, select ORASTADBCONN (select the name itself, not the check box).

    Description of dbpass_orastadbconn.png follows
    Description of the illustration ''dbpass_orastadbconn.png''

  6. Click the Connection Pool tab.

    Description of dbpass_connpool.png follows
    Description of the illustration ''dbpass_connpool.png''

  7. In the Change Center section, click Lock & Edit.

    Description of wl_lockedit.png follows
    Description of the illustration ''wl_lockedit.png''

  8. Enter and confirm the new password, and then click Save.

  9. In the Change Center section, click Activate Changes.

    Description of wl_activate.png follows
    Description of the illustration ''wl_activate.png''

  10. Log out of the WebLogic Administration Console.

  11. As root on the STA server, restart the STA application. See "Stop the STA Application" and "Start the STA Application" for instructions.

    # STA stop all
# STA start all

  12. Verify STA session connectivity:

    1. Go to the STA GUI login screen using the HTTP (default is 7021) or HTTPS (default is 7022) port number you selected during STA installation. STA must be uppercase. For example:

      https://yourHostName:PortNumber/STA

    2. Log in using the STA GUI Login username and password.

      • If you see a fully-populated Dashboard screen, you have successfully reset the STA Database Application Account password on both the WebLogic server and the MySQL database.

      • If you see an Application Error, then the password you defined in WebLogic does not match the STA Database Application Account password in the MySQL database. Ensure the passwords match.

Change an STA MySQL Account Password

Use this procedure to change the password for the STA Database Root Account, Reports Account, or DBA Account.

  1. Log in to the MySQL client as the Linux root user.

    # mysql -uroot -p
Password:

  2. Type the following command:

    mysql> use mysql;

  3. Retrieve the list of STA database usernames.

    mysql> select distinct(user) from user order by user;

  4. Take note of the account username for which to change the password. You will use this username in the next step.

  5. Issue the following commands to change the password. Use single quotes around the new_password and username variables.

    mysql> update user set password=PASSWORD('new_password') where user='username';
mysql> commit;
mysql> flush privileges;

  6. Exit from the MySQL client.

    mysql> quit;
#

  7. Set the new login path. This step varies depending on which database user password you changed in the previous steps.

    • If you changed the STA Database Root Account password:

      1. Obtain a list of root user information. Enter the new root user password when prompted.

        # mysql -u root -p -e "select user, host, password from mysql.user where user='root'"
Enter password:

        Example output:

        +------+-----------+-------------------------------------------+
| user | host      | password                                  |
+------+-----------+-------------------------------------------+
| root | localhost | *ABCDEF123456789ABCDEF123456789ABCDEF1234 |
| root | server1   | *ABCDEF123456789ABCDEF123456789ABCDEF1234 |
| root | 127.0.0.1 | *1234ABCDEF1234ABCDEF1234ABCDEF1234ABCDEF |
| root | ::1       | *1234ABCDEF1234ABCDEF1234ABCDEF1234ABCDEF |
| root | %         | *1234ABCDEF1234ABCDEF1234ABCDEF1234ABCDEF |
+------+-----------+-------------------------------------------+

      2. To set the new login path password, execute the following command for each listed host. For example, if your list of hosts resembled that of the example output above, you would execute this command five times, replacing host with localhost, server1, 127.0.0.1, ::1, and %.

        # mysql_config_editor set --login-path=root_path --host=host --user=root --password
Enter password: new_mysql_root_password
WARNING : 'root_path' path already exists and will be overwritten.
Continue? (Press y|Y for Yes, any other key for No) : y

      3. To test the new login path, execute the following command for each listed host.

        # mysql --login-path=root_path --host=host
Welcome to the MySQL monitor.  Commands end with ; or \g.
Your MySQL connection id is 1234
Server version: 5.6.15-enterprise-commercial-advanced-log MySQL Enterprise Server - Advanced Edition (Commercial)
Copyright (c) 2000, 2013, Oracle and/or its affiliates. All rights reserved.
Oracle is a registered trademark of Oracle Corporation and/or itsaffiliates. Other names may be trademarks of their respectiveowners.
Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.
mysql> quit
Bye

    • If you changed the STA Database Application Account, Reports Account, or DBA Account password:

      1. Obtain a list of database users.

        # mysql -u root -p -e "select user, host, password from mysql.user where user <> 'root'"
Enter password: mysql_root_password

        Example output:

        +--------+-----------+-------------------------------------------+
| user   | host      | password                                  |
+--------+-----------+-------------------------------------------+
| stadba | localhost | *ABCDEF123456789ABCDEF123456789ABCDEF1234 |
| stadba | %         | *ABCDEF123456789ABCDEF123456789ABCDEF1234 |
| staapp | localhost | *1234ABCDEF1234ABCDEF1234ABCDEF1234ABCDEF |
| staapp | %         | *1234ABCDEF1234ABCDEF1234ABCDEF1234ABCDEF |
| stausr | localhost | *1234ABCDEF1234ABCDEF1234ABCDEF1234ABCDEF |
| stausr | %         | *1234ABCDEF1234ABCDEF1234ABCDEF1234ABCDEF |
+--------+-----------+-------------------------------------------+

      2. To set the new login path password, execute the following command for each listed user and associated hosts. For example, if your list of users resembled that of the example output above, you would execute this command six times, replacing user with each user name (stadba, staapp, or stausr), and host with each host name (localhost or %) for each user.

        # mysql_config_editor set --login-path=user_path --host=host --user=root --password
Enter password: new_user_password
WARNING : 'root_path' path already exists and will be overwritten.
Continue? (Press y|Y for Yes, any other key for No) : y

      3. To test the new login path, execute the following command for each listed user and associated hosts.

        # mysql --login-path=user_path --host=host
Welcome to the MySQL monitor.  Commands end with ; or \g.
Your MySQL connection id is 1234
Server version: 5.6.15-enterprise-commercial-advanced-log MySQL Enterprise Server - Advanced Edition (Commercial)
Copyright (c) 2000, 2013, Oracle and/or its affiliates. All rights reserved.
Oracle is a registered trademark of Oracle Corporation and/or itsaffiliates. Other names may be trademarks of their respectiveowners.
Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.
mysql> quit
Bye

  8. Proceed as follows:

    • If you changed the STA Database Root Account or Reports Account, you are finished.

    • If you changed the STA Database DBA Account password, see "Change the STA Backup Service and Resource Monitor Passwords" to synchronize the password for these services.

    • If you changed the STA Database Application Account password, proceed to the next step.

  9. As root on the STA server, restart the STA application. See "Stop the STA Application" and "Start the STA Application" for instructions.

    # STA stop all
# STA start all

  10. Verify STA session connectivity:

    1. Go to the STA GUI login screen using the HTTP (default is 7021) or HTTPS (default is 7022) port number you selected during STA installation. STA must be uppercase. For example:

      https://yourHostName:PortNumber/STA

    2. Log in using the STA GUI Login username and password.

      • If you see a fully-populated Dashboard screen, you have successfully reset the STA Database Application Account password on both the WebLogic server and the MySQL database.

      • If you see an Application Error, then the password you defined in WebLogic does not match the STA Database Application Account password in the MySQL database. Ensure the passwords match.

Change the STA Backup Service and Resource Monitor Passwords

Use this procedure to update the STA Backup and Resource Monitor services with the new password for the STA database root user or database administrator. You must use this procedure whenever you use the procedure "Change an STA Database Account Password".

  1. Open a terminal session on the STA server, and log in as the system root user.

  2. Verify that the STA services daemon is running. See "Display the Status of the STA Services Daemon" for instructions.

  3. Update the STA Backup service with the new password. See "Specify the Database Username and Password" for instructions.

  4. Update the STA Resource Monitor service with the new password. See "Specify the Database Username and Password" for instructions.