13 Reconfiguring the Hardware

This chapter describes how to make basic adjustments. It contains the following topics:

Changing Component Passwords

Oracle recommends that you change the passwords for the various rack components after the initial hardware and software configuration:

See Also:

Default User Accounts for a list of default users and passwords of the various Recovery Appliance components.

Changing the Compute Server Passwords

You can change the user accounts and GRUB passwords on the compute servers. default user accounts on a compute server are root and the software owner account. Typically the software owner account is oracle.

Changing the User Account Password

A compute server has two default user accounts: root and the software owner (typically oracle).

To change a user account password on a compute server:

  1. Log in to the compute server as root.
  2. Use the Linux passwd command. This example changes the password of the oracle account:
    # passwd oracle
    Changing password for user oracle.
    Changing password for oracle
    (current) UNIX password: old_password
    New UNIX password: new_password
    Retype new UNIX password: new_password
Changing the GRUB Account Password

To change the GRUB account password on a compute server:

  1. Log in to the compute server as root.
  2. Use the following command:
    # grub-md5-crypt 
    

    The system prompts for a new password twice.

  3. Copy the string generated by grub-md5-crypt to the copy buffer.
  4. Open the /boot/grub/grub.conf file in a text editor and locate the password setting. It looks similar to the following:
    password --md5 hashed_string
    
  5. Replace the existing hashed string with the one copied from the grub-md5-crypt command output.
  6. Save the file.

Changing the Storage Server Passwords

The default user accounts on storage servers are root, celladmin, and cellmonitor.

To change a user account password on a storage server:

  1. Log in to the compute server as root.
  2. Use the Linux passwd command. This example changes the password of the celladmin account:
    # passwd celladmin
    Changing password for user celladmin.
    Changing password for celladmin
    (current) UNIX password: old_password
    New UNIX password: new_password
    Retype new UNIX password: new_password

Creating New Users and Changing Passwords on a PDU

The default account user for the power distribution unit (PDU) is admin. You can create up to five users and set their passwords.

To create users and passwords on a PDU:

  1. Open a web browser and enter the IP address of the PDU in the address field.

    The Current Measurement page appears.

  2. Click Network Configuration in the upper left of the page.
  3. Log in as the admin user on the PDU metering unit.
  4. Locate the Admin/User fields. Only letters and numbers are allowed for user names and passwords.
  5. Enter up to five user names and passwords in the Admin/Users fields.
  6. Designate each user as either an administrator or a user.
  7. Click Submit to set the user names and passwords.

Changing the Oracle ILOM Password

The default user account for Oracle Integrated Lights Out Manager (ILOM) is root.

To change the password for an Oracle ILOM user:

  1. Connect to Oracle ILOM using SSH, and log in as root.
  2. Use the following command to change the password:
    set /SP/users/user_name password
    

This example changes the password for user1:

set /SP/users/user1 password

Changing password for user /SP/users/user1/password...
Enter new password:********
Enter new password again:********
New password was successfully set for user /SP/users/user1

Changing an InfiniBand Switch Password

The default user accounts on the InfiniBand switches are root, ilom-admin, ilom-user, ilom-operator, and nm2user.

To change a password for a user on an InfiniBand switch:

  1. Connect to the InfiniBand switch using SSH and log in:
    ssh user_name@switch_name
    

    In the preceding command, user_name is the name of the user, and switch_name is the name of the InfiniBand switch.

  2. Check the firmware version of the switch.
  3. Use Oracle ILOM to change the password:
    ssh -l ilom-admin switch_name
    
    set /SP/users/user_name password
    

See Also:

Sun Datacenter InfiniBand Switch 36 User's Guide at

http://docs.oracle.com/cd/E36265_01/index.html

Changing the Cisco Ethernet Switch Password

There are no user accounts on the Cisco Ethernet switch. The password, which is called the "enable" password, is not specific to a user account.

To change the password for the Cisco Ethernet switch:

  1. Change to enable mode:
    Switch> enable
    
  2. Set the password:
    rasw-ip# configure terminal
    Enter configuration commands, one per line. End with CNTL/Z.
    rasw-ip(config)# enable password password
    rasw-ip(config)# enable secret password
    rasw-ip(config)# end
    rasw-ip# write memory 
    *Sep 15 14:25:05.893:%SYS-5-CONFIG_I:Configured from console by console
    Building configuration...
    Compressed configuration from 2502 bytes to 1085 bytes [OK ]
    
  3. Save the current configuration:
    rasw-ip# copy running-config startup-config
    
  4. Exit from the session:
    rasw-ip# exit

Changing the Recovery Appliance Database User Password

Oracle recommends that you change the password of the Recovery Appliance default database user account.

To change the Recovery Appliance database user password:

  1. Log in to the compute server as oracle.

  2. Start SQL*Plus and connect to the Recovery Appliance database with the SYSDBA privilege:

    $ sqlplus / as sysdba
  3. Run the alter user command to set the new password for the RASYS account:

    SQL> ALTER USER RASYS IDENTIFIED BY **********;

See Also:

Default User Accounts for information about the default Recovery Appliance database accounts and passwords.

Changing OSB Tape Backup Passwords

The OSB tape backup default accounts include the application users admin and oracle, and the encryption key wallet account.

To change an OSB tape backup application user password:

  1. Log in to the compute server as root.

  2. Use the obtool chuser command.

    This example changes the password of the admin account:

    # obtool chuser -q admin
    Password:********
    Password (again):********
    #

To change the password for the OSB tape backup encryption key wallet:

  1. Log in to the compute server as root.

  2. Run the following commands:

    # export OBCONFIG=/osbcat/etc/obconfig
    # obcm chpass --keywallet
    Old wallet password:********
    New wallet password:********
    New wallet password (again):********
    Wallet password has been reset
    #

See Also:

Default User Accounts for information about the default OSB tape backup accounts and passwords for Recovery Appliance.

Changing the DNS Servers

You can change the configuration settings for the Domain Name System (DNS) servers after the initial setup. All servers and switches in Recovery Appliance must reference the same DNS servers. This section explains how to set the servers and switches to the same DNS servers. Oracle recommends changing the servers one at a time.

Changing the DNS Server Address on an InfiniBand Switch

To change the DNS server address on an InfiniBand switch, connect to Oracle ILOM and log in as the ilom-admin user. You can choose from one of the following methods:

  • Oracle ILOM web interface

    Select the Configuration tab and set the DNS server addresses.

  • Oracle ILOM CLI

    Use the following command to set the DNS:

    set /SP/clients/dns nameserver=dns_ip
    

    In the preceding command, dns_ip is the IP address of the DNS server. For multiple servers, enter a comma-separated list. For example:

    set /SP/clients/dns nameserver=dns_ip1,dns_ip2,dns_ip3

Changing the DNS Server Address on the Cisco Ethernet Switch

To change the DNS server address on the Cisco Ethernet switch:

  1. Access the Ethernet switch using SSH, and log in as the admin user with the administrator password.

    If SSH is not configured, then use Telnet to access the switch.

  2. Change to enable mode:
    Switch> enable
    
  3. List the DNS IP addresses currently in use:
    Switch# show running-config
    
  4. Erase the current DNS server addresses and any invalid IP addresses. This example erases three IP addresses:
    Switch# configure terminal
    Enter configuration commands,one per line. End with CNTL/Z.
    Switch(config)# no ip name-server 10.7.7.2
    Switch(config)# no ip name-server 129.148.5.4
    Switch(config)# no ip name-server 10.8.160.2
    Switch(config)# end
    Switch# write memory
    Building configuration...
    Compressed configuration from 2603 bytes to 1158 bytes [OK ]
    
  5. Configure up to three DNS servers. The following example configures three new DNS servers:
    Switch# configure terminal
    Enter configuration commands,one per line. End with CNTL/Z.
    Switch(config)# ip name-server 10.7.7.3
    Switch(config)# ip name-server 129.148.5.5
    Switch(config)# ip name-server 10.8.160.1
    Switch(config)# write memory 
    Building configuration...
    Compressed configuration from 2603 bytes to 1158 bytes [OK ]
    
  6. Verify the changes:
    Switch# show running-config
    Building configuration...
    ...
    ip domain-name example.com
    ip name-server 192.168.10.2
    ip name-server 192.168.10.3
    ip name-server 192.168.10.4
    ...
    
  7. Save the running configuration as the startup configuration:
    Switch# copy running-config startup-config
    Destination filename [startup-config]? 
    Building configuration...
    Compressed configuration from 14343 bytes to 3986 bytes[OK]
    
  8. End the session:
    Switch# exit

Changing the DNS Server Address on the Compute Server

To change the DNS server address on the compute servers:

  1. Log in as the root user.
  2. Open /etc/resolv.conf file in a text editor.
  3. Locate the name server setting for the DNS server and change it to the new value. For example:
    search        example.com
    nameserver    10.7.7.3
    
  4. Save the file and close the editor.
  5. Set the DNS server in the server ILOM:
    ipmitool sunoem cli 'set /SP/clients/dns nameserver=dns_ip'
    

    In the preceding command, dns_ip is the IP address of the DNS server. For multiple DNS servers, enter a comma-separated list. For example:

    set /SP/clients/dns nameserver=dns_ip1,dns_ip2,dns_ip3
    
  6. Repeat this procedure for each compute server.

Changing the DNS Server on Storage Servers

To change the DNS server or NTP settings on a storage server:

  1. Log in to the storage server as the root user.
  2. Follow steps 1 through 5 of My Oracle Support Doc ID 1188080.1 to take the server offline.
  3. Shut down the cell services and ocrvottargetd service:
    # cellcli -e alter cell shutdown services all
    # service ocrvottargetd stop
    
  4. Use the ipconf utility to change the DNS settings:
    # /usr/local/bin/ipconf
    
  5. Restart the server:
    # shutdown -r now
    
  6. Follow steps 7 through 9 of My Oracle Support note 1188080.1 to put the server back online.
  7. Repeat this procedure for each storage server.

Changing the NTP Servers

You can change the configuration settings for the Network Time Protocol (NTP) servers after the initial setup. All servers and switches in Recovery Appliance must reference the same NTP servers, so that they are synchronized to the same time. This section explains how to set the Recovery Appliance servers and switches to the same NTP server addresses. Oracle recommends changing each server one at a time.

This section contains the following tasks:

Note:

  • You must restart Recovery Appliance after completing these tasks.

  • You can configure one or two NTP servers for use with Recovery Appliance.

Setting the NTP Server Address on the Compute Servers

To set the NTP server address on a compute server:

  1. Log in to a compute server as root.
  2. Stop the NTP services on the server:
    service ntpd stop
    
  3. Open /etc/ntp.conf in a text editor and enter the IP address of the new NTP server.
  4. Restart the NTP services on the compute server:
    service ntpd start
    
  5. Repeat this task for the second compute server.

Setting the NTP Server Address on the InfiniBand Switches

Note:

Do not manually edit the files on the InfiniBand switches.

To set the NTP server address on a Sun Datacenter InfiniBand Switch 36:

  1. Log in to the switch as the ilom-admin user.
  2. Set the date, time zone, and Network Time Protocol (NTP), using one of the following methods:
    • The Configuration page of the ILOM graphical interface.

    • The following CLI commands:

      set /SP/clock timezone=preferred_tz
      set /SP/clients/ntp/server/1 address=ntp_ip1
      set /SP/clients/ntp/server/2 address=ntp_ip2
      set /SP/clock usentpserver=enabled 
      

      In the preceding commands, preferred_tz is the preferred time zone, and ntp_ip1 and ntp_ip2 are the NTP server IP addresses. You must configure at least one NTP server; the second one is optional.

  3. Repeat this task for the other InfiniBand switches.

Set the NTP Server Address on the Cisco Ethernet Switch

To set the NTP server on the Cisco Ethernet switch:

  1. Open a connection to the Ethernet switch using SSH, and log in as admin. If SSH is not configured, then use Telnet.
  2. Change to enable mode.
    Switch> enable
    
  3. Review the current configuration:
    Switch# show running-config
    
  4. Erase the current NTP server configuration and any invalid NTP addresses. In the following example, the current IP addresses are 10.10.10.1 and 10.8.8.1.
    Switch# configure terminal
    Enter configuration commands,one per line. End with CNTL/Z.
    Switch(config)# no ntp server 10.10.10.1
    Switch(config)# no ntp server 10.8.8.1
    Switch(config)# end
    Switch# write memory
    Building configuration...
    Compressed configuration from 2603 bytes to 1158 bytes [OK ]
    
  5. Configure up to two NTP servers. The following example uses 10.7.7.1 and 10.9.9.1 as the new IP addresses:
    Switch# configure terminal
    Enter configuration commands,one per line. End with CNTL/Z.
    Switch(config)# ntp server 10.7.7.1 prefer
    Switch(config)# ntp server 10.9.9.1
    Switch(config)# end
    Switch# write memory
    Building configuration...
    Compressed configuration from 2603 bytes to 1158 bytes [OK ]
    
  6. Verify the changes:
    Switch# show running-config
    
    Building configuration...
    ...
    ntp server 192.168.10.10 prefer
    ...
    
  7. Save the configuration:
    Switch# copy running-config startup-config
    Destination filename [startup-config]? 
    Building configuration...
    Compressed configuration from 14343 bytes to 3986 bytes[OK]
    
  8. Exit from the session:
    Switch# exit

Setting the NTP Server on the Storage Servers

To set the NTP server on a storage server:

  1. Log in to the storage server as the root user.
  2. Follow steps 1 through 5 of My Oracle Support note 1188080.1, to take the server offline.
  3. Shut down the cell services and ocrvottargetd service:
    # cellcli -e alter cell shutdown services all
    # service ocrvottargetd stop
    
  4. Use the ipconf utility to change the NTP settings:
    # /usr/local/bin/ipconf
    
  5. Restart the server:
    # shutdown -r now
    
  6. Follow steps 7 through 9 of My Oracle Support note 1188080.1, to bring the server back online.

Restart Recovery Appliance

After changing the servers and switches, restart Recovery Appliance.

Changing the Time Zone Settings

This section provides information about changing the time zones on Recovery Appliance after the initial configuration and deployment. You must modify the following components when changing the time zone settings:

  • Storage servers

  • Compute servers

  • Sun Datacenter InfiniBand Switch 36 switches

  • Cisco switch

Note:

Before changing the time zone settings, you must stop the cell services on the storage servers and the Oracle Clusterware Services.

The following tasks describe how to change the time zone settings on the components:

Changing the Time Zone Settings on the Storage Servers

Complete the setting changes to all storage servers before changing the settings on the compute servers.

To change the time zone setting on a storage server:

  1. Log in as the root user on the storage server.
  2. Stop the processes on the cells:
    # cellcli -e alter cell shutdown services all
    
  3. Run the ipconf script:
    # /opt/oracle.cellos/ipconf
    
  4. Proceed through the script prompts until you see the time zone prompts. Do not change any other settings.

    The following example changes the time zone from McMurdo, Antarctica, to New York City, USA. The number for the United States is 230.

    The current timezone: Antarctica/McMurdo
    Do you want to change it (y/n) [n]: y
     
    Setting up local time...
     
    1) Andorra
    2) United Arab Emirates
    3) Afghanistan
    .
    .
    .
    15) Aruba
    16) Aaland Islands
    Select country by number, [n]ext, [l]ast: 230
    
    Selected country: United States (US). Now choose a zone
     
    1) America/New_York
    2) America/Detroit
    3) America/Kentucky/Louisville
    .
    .
    .
    15) America/North_Dakota/New_Salem
    16) America/Denver
    Select zone by number, [n]ext: 1
    
    Selected timezone: America/New_York
    Is this correct (y/n) [y]:
    
  5. Proceed through the remaining prompts, but do not change any other values.
  6. Ensure that the time zone changes appear in the following files. Examples of the changes are shown for the files.
    • /opt/oracle.cellos/cell.conf

      $VAR1 = {
                'Hostname' => 'xdserver.us.example.com',
                'Ntp servers' => [
                                   '10.141.138.1'
                                 ],
                'Timezone' => 'America/New_York',
      
    • /etc/sysconfig/clock

      ZONE="America/New_York"
      UTC=false
      ARC=false
      #ZONE="Antarctica/McMurdo"
      #ZONE="America/New_York"
      #ZONE="America/Los_Angeles"
      

      The uncommented value (not preceded by #) is the current setting.

    • /etc/localtime

      Use the strings /etc/localtime command to see the printable characters in the file. The last line includes the time zone setting.

      EST5EDT,M3.2.0,M11.1.0
      
  7. Restart the server.
  8. Use the date command to see the current time zone. The following is an example of the output from the command:
    # date
    Thu Jun 12 16:43:47 EDT 2014
    
  9. Review the $ADR_BASE/diag/asm/cell/host_name/alert.log file. Verify that the time that you restarted the processes matches the current and correct time.

Change Time Zone Settings on the Compute Servers

To change the time zone setting on a compute server:

  1. Log in as the root user on the compute server.
  2. Shut down Oracle Clusterware Services:
    # GI/bin/crsctl stop crs
    
  3. Copy the clock file from one of the storage servers:
    # scp root@storage_cell:/etc/sysconfig/clock /etc/sysconfig/clock
    
  4. Disable Cluster Ready Services (CRS):
    # GI/bin/crsctl disable crs
    

    This step prevents Cluster Ready Services (CRS) from restarting automatically when you restart the server.

  5. Restart the compute server.
  6. Use the date command verify the change for the time zone.
  7. Enable CRS:
    # GI/bin/crsctl enable crs
    

    This step restores CRS to its previous configuration setting.

  8. Start CRS:
    # GI/bin/crsctl start crs

Change the Time Zone Settings on the InfiniBand Switches

The following procedure describes how to change the time zone setting on a Sun Datacenter InfiniBand Switch 36:

  1. Connect to the switch using SSH, and log in as the root user.
  2. Log in to Oracle ILOM using the web address:
    http://switch_alias
    
  3. Select the Configuration tab.
  4. Select the Clock tab.
  5. Ensure the Synchronize Time Using NTP field is enabled.
  6. Enter the correct IP address for the servers.
  7. Click Save.

Change the Time Zone Settings on the Cisco Switch

To change the time zone setting on the Cisco switch:

  1. Use Telnet to connect to the Cisco switch as the root user.
  2. Use the enable command to enter privileged mode.
  3. Use the configure terminal command to begin configuration.
  4. Set the clock using the following command:
    clock timezone zone hours_offset [minutes_offset]
    

    In the preceding command, zone is the name of the time zone to be displayed when standard time is in effect, hours_offset is the hours offset from UTC, and minutes_offset are the minutes offset from UTC. The default time zone is UTC.

    To set summer time (daylight savings time), use the following command:

    clock summer-time zone recurring [week day month hh:mm week day month   \
          hh:mm [offset]]
    

    In the preceding command, week is the week of the month, between 1 to 5, day is the day of the week, such as Sunday or Monday, month is the month, such as January or June, hh:mm is the time in 24-hour format, and offset is the number of minutes to add during summer time. The default for hh:mm is 60. Summer time is disabled by default.

    The following is an example of setting the time zone to US Eastern time with summer time enabled:

    $ telnet raeth-ip
    Connected to raeth-ip
    Escape Character is 'CTRL+]'
    
    User Access Verification
    
    Password: password
    raeth-ip> enable
    Password: password
    raeth-ip# configure terminal
    Enter configuration commands, one per line. End with CNTL/Z.
    raeth-ip(config)# clock timezone EST -5
    raeth-ip(config)# clock summer-time EDT recurring
    raeth-ip(config)# end
    raeth-ip# write memory
    Building configuration...
    Compressed configuration from 6421 bytes to 2041 bytes[OK]
    raeth-ip# show clock
    12:03:43.516 EDT Wed May 12 2012