Changing Component Passwords

Oracle recommends that you change the passwords for the various rack components after the initial hardware and software configuration:

See Also:

Default User Accounts for Oracle Zero Data Loss Recovery Appliance for a list of default users and passwords of the various Recovery Appliance components.

Changing the Compute Server Passwords

You can change the user accounts and GRUB passwords on the compute servers. default user accounts on a compute server are root and the software owner account. Typically the software owner account is oracle.

Changing the User Account Password

A compute server has two default user accounts: root and the software owner (typically oracle).

To change a user account password on a compute server:

  1. Log in to the compute server as root.
  2. Use the Linux passwd command. This example changes the password of the oracle account:
    # passwd oracle
Changing password for user oracle.
Changing password for oracle
(current) UNIX password: old_password
New UNIX password: new_password
Retype new UNIX password: new_password

Changing the GRUB Account Password

To change the GRUB account password on a compute server:

  1. Log in to the compute server as root.
  2. Use the following command:
    # grub-md5-crypt

    The system prompts for a new password twice.

  3. Copy the string generated by grub-md5-crypt to the copy buffer.
  4. Open the /boot/grub/grub.conf file in a text editor and locate the password setting. It looks similar to the following:
    password --md5 hashed_string
  5. Replace the existing hashed string with the one copied from the grub-md5-crypt command output.
  6. Save the file.

Changing the Storage Server Passwords

The default user accounts on storage servers are root, celladmin, and cellmonitor.

To change a user account password on a storage server:

  1. Log in to the compute server as root.
  2. Use the Linux passwd command. This example changes the password of the celladmin account:
    # passwd celladmin
Changing password for user celladmin.
Changing password for celladmin
(current) UNIX password: old_password
New UNIX password: new_password
Retype new UNIX password: new_password

Creating New Users and Changing Passwords on a PDU

The default account user for the power distribution unit (PDU) is admin. You can create up to five users and set their passwords.

To create users and passwords on a PDU:

  1. Open a web browser and enter the IP address of the PDU in the address field.

    The Current Measurement page appears.

  2. Click Network Configuration in the upper left of the page.
  3. Log in as the admin user on the PDU metering unit.
  4. Locate the Admin/User fields. Only letters and numbers are allowed for user names and passwords.
  5. Enter up to five user names and passwords in the Admin/Users fields.
  6. Designate each user as either an administrator or a user.
  7. Click Submit to set the user names and passwords.

Changing the Oracle ILOM Password

The default user account for Oracle Integrated Lights Out Manager (ILOM) is root.

To change the password for an Oracle ILOM user:

  1. Connect to Oracle ILOM using SSH, and log in as root.
  2. Use the following command to change the password:
    set /SP/users/user_name password

This example changes the password for user1: 

set /SP/users/user1 password

Changing password for user /SP/users/user1/password...
Enter new password:********
Enter new password again:********
New password was successfully set for user /SP/users/user1

Changing an InfiniBand Switch Password

The default user accounts on the InfiniBand switches are root, ilom-admin, ilom-user, ilom-operator, and nm2user.

To change a password for a user on an InfiniBand switch:

  1. Connect to the InfiniBand switch using SSH and log in:
    ssh user_name@switch_name

    In the preceding command, user_name is the name of the user, and switch_name is the name of the InfiniBand switch.

  2. Check the firmware version of the switch.
  3. Use Oracle ILOM to change the password:
    ssh -l ilom-admin switch_name

set /SP/users/user_name password

See Also:

Sun Datacenter InfiniBand Switch 36 User's Guide at

http://docs.oracle.com/cd/E36265_01/index.html

Changing the Cisco Ethernet Switch Password

There are no user accounts on the Cisco Ethernet switch. The password, which is called the "enable" password, is not specific to a user account.

To change the password for the Cisco Ethernet switch:

  1. Change to enable mode:
    Switch> enable
  2. Set the password:
    rasw-ip# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
rasw-ip(config)# enable password password
rasw-ip(config)# enable secret password
rasw-ip(config)# end
rasw-ip# write memory 
*Sep 15 14:25:05.893:%SYS-5-CONFIG_I:Configured from console by console
Building configuration...
Compressed configuration from 2502 bytes to 1085 bytes [OK ]
  3. Save the current configuration:
    rasw-ip# copy running-config startup-config
  4. Exit from the session:
    rasw-ip# exit

Changing the Recovery Appliance Database User Password

Oracle recommends that you change the password of the Recovery Appliance default database user account.

To change the Recovery Appliance database user password:

  1. Log in to the compute server as rasys.

  2. Issue the following RACLI command.

    racli alter rasys_user --password

  3. When prompted, enter and confirm the new password.

    Enter rasys Password:
Confirm new rasys Password:

    The password specified for the Recovery Appliance user account must contain eight or more characters. Strong password authentication is used, so simple passwords are not allowed.

See Also:

Default User Accounts for Oracle Zero Data Loss Recovery Appliance for information about the default Recovery Appliance database accounts and passwords.

Changing OSB Tape Backup Passwords

The OSB tape backup default accounts include the application users admin and oracle, and the encryption key wallet account.

To change an OSB tape backup application user password:

  1. Log in to the compute server as root.

  2. Use the obtool chuser command.

    This example changes the password of the admin account: 

    # obtool chuser -q admin
Password:********
Password (again):********
#

To change the password for the OSB tape backup encryption key wallet:

  1. Log in to the compute server as root.

  2. Run the following commands:

    # export OBCONFIG=/osbcat/etc/obconfig
# obcm chpass --keywallet
Old wallet password:********
New wallet password:********
New wallet password (again):********
Wallet password has been reset
#

See Also:

Default User Accounts for Oracle Zero Data Loss Recovery Appliance for information about the default OSB tape backup accounts and passwords for Recovery Appliance.