Uploaded image for project: 'CloudStack'
  1. CloudStack
  2. CLOUDSTACK-400

Document procedure to update CloudStack MySQL account password

    XMLWordPrintableJSON

    Details

    • Type: Improvement
    • Status: Closed
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: 4.0.0
    • Fix Version/s: None
    • Component/s: Doc
    • Security Level: Public (Anyone can view this level - this is the default.)

      Description

      An administrator may occasionally want to change the password for the MySQL account used by CloudStack. When password encryption is used as recommended, this procedure is complicated and should be documented. I wrote the following procedure for the "file" encryption type and QA verified it. The procedure for "web" encryption is likely similar. It may also be useful to include a procedure for no encryption.

      1. Stop CloudStack and (if applicable) the usage engine.
      service cloud-management stop
      service cloud-usage stop
      2. Update the password for the CloudStack user on the MySQL server. Open a
      MySQL prompt:
      mysql -u root -p
      Run the following:
      update mysql.user set password=PASSWORD("newpassword123") where User='cloud';
      flush privileges;
      And exit the prompt:
      quit
      3. Encrypt the password and copy the resulting ciphertext:
      java -classpath /usr/share/java/cloud-jasypt-1.8.jar
      org.jasypt.intf.cli.JasyptPBEStringEncryptionCLI encrypt.sh
      input="newpassword123" password="`cat /etc/cloud/management/key`" verbose=false
      Note: If using db.cloud.encryption.type=web, use:
      password="management_server_secret_key"
      4. Update /etc/cloud/management/db.properties with the new ciphertext:
      db.cloud.password=ENC(encrypted_password_from_above)
      db.usage.password=ENC(encrypted_password_from_above)
      5. Start CloudStack and (if applicable) the usage engine.
      service cloud-management start
      service cloud-usage start

        Attachments

          Activity

            People

            • Assignee:
              jzb Joe Brockmeier
              Reporter:
              kirk Kirk Kosinski
            • Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: