Changing Administrative Passwords

Changing the Superuser Password

The following procedure describes how to change the root password and propagate that change throughout the HP XC system:

Changing the CMDB Password

The configuration and management database (CMDB) is a mysql database, and you can change its administrative password by using the mysql tools.

	CAUTION: Changing the CMDB password can cause complications that can corrupt the database and jeopardize system operation; for example, some commands might cease to function. If you must change this password, be sure that you back up the CMDB as described in “Backing Up the Configuration Database”. You also need to update the CMDB manually, which is beyond the scope of this document.

Changing the Interconnect Password

The procedure to change the administrative password of the Interconnect switch depends on the Interconnect switch:

ProCurve Switch

The documentation that came with your model of the ProCurve switch describes how to set the administrative password.

If you change the ProCurve switch administrative password and the HP XC system has more than one ProCurve switch, you must change every ProCurve switch to the same password.

	CAUTION: Changing the ProCurve password can cause complications if you do not also update the configuration and management database (CMDB) manually with the new password. Updating the CMDB is beyond the scope of this document. If you make an error updating the CMDB, you can corrupt the database and jeopardize system operation; for example, some commands might cease to function. If you must update the CMDB, be sure that you back it up as described in “Backing Up the Configuration Database” before changing the ProCurve switch administrative password.

Quadrics Elan4

The documentation that came with your model of the Quadrics Elan switch describes how to set the administrative password.

Generally, you can change the password by logging in to the switch and using its Quadrics Switch Control main menu as in the following example:

Enter 1-9 and press return: 8 1. Passwd settings 2. Access protocol settings Enter 1,2 and press return: 1 changing password for quadrics Current Password: New password: Retype new password:

Voltaire InfiniBand

The documentation that came with your model of the Voltaire InfiniBand switch describes how to set the administrative password.

Generally, you change the Voltaire Infiniband switch administrative password by logging in to the switch as admin and using its command interface as in the following example:

# telnet IRON00 IR0N00 login: admin Password: Welcome to Voltaire Switch IR0N00 connecting IR0N00> enable password: IR0N00# ? pass password update [admin, enable]password update [admin, enable] IR0N00# password update admin Insert new (up to 8 characters)password: Please retype new password: OK IR0N00# password update enable Insert new (up to 8 characters)password: Please retype new password: OK IR0N00#

Also, enter the following command to set up ssh as root on the switch, which will enable you to access the root switch without a password:

# cat /root/.ssh/id_dsa.pub | ssh IR0N00 cat '>>' /.ssh/authorized_keys

Accessing the root switch without a password is necessary for the proper operation of the ip_prodmode_mon monitoring utility and the sys_check infiniband component.

Repeat these steps for each switch controller card, for example, for IRON00, IRON01, and so on.

Changing the Console Port Password

When you change the password for an iLO, MP, or IPMI, you must ensure that the console port password matches its counterpart in the CMDB.

	CAUTION: Changing the console port password can cause complications if you do not also update the CMDB manually with the new password. Updating the CMDB is beyond the scope of this document. If you make an error updating the CMDB, you can corrupt the database and jeopardize system operation; for example, some commands might cease to function. If you must update the CMDB, be sure that you back it up as described in “Backing Up the Configuration Database” before changing the console port password.

The HP XC Hardware Preparation Guide describes changing the console port password for an iLO, MP, or IPMI.

Synchronizing the BMC/IPMI Password for CP6000 Systems

The CP6000 systems require an additional step to synchronize the IPMI password with the console port. The BMC/IPMI password must match the console port password on all nodes.

You can connect the head node console port either internally or externally to the HP XC system. Follow the procedures appropriate for your installation.

On HP XC systems whose head node is either an HP CP6000 system or an HP CP4000 system, you can only obtain the sensor and System Event Log information remotely.

Setting the BMI/IPMI Password Using an External Connection to the Head Node Management Port

Allow access to the head node's management port through the external IP address, and synchronize the management port passwords as shown by the following procedure:

	NOTE: Substitute the node name (for example, n144) for the headnode variable.

1. Use the text editor of your choice to add the following line to the /etc/hosts file:

   external-ip-address cp-headnode

   For information on the /etc/hosts file, see hosts(5).

2. Use the ipmitool to set the BMC password.

   	IMPORTANT: The commands to set the management port password differ depending on whether the IPMI password has been configured or not (that is, whether the password is null):

   • If the IPMI password has been configured previously, enter the following command:

     # pdsh -a -x "headnode" 'ipmitool -I lan -P "oldpassword" \ -H cp-$(nodename) user set password 1 newpassword'

   • If the IPMI password has never been configured, enter the following command:

     # pdsh -a -x "headnode" 'ipmitool -I lan -P "" \ -H cp-$(nodename) user set password 1 newpassword'

     The default password setting is a null ("").

   	NOTE: Setting the password returns a message like the following: Close Session command failed You can ignore this message.

Internal Connection to the Head Node's Console Port

If the head node's console port is connected internally, use the ipmitool command as follows to synchronize the console port password throughout the HP XC system:

# pdsh -a 'ipmitool -I lan -P "oldpassword" \ -H cp-$(nodename) user set password 1 newpassword'

Changing the Nagios Administrator Password

Use the Apache server htpassword command to change the Nagios administrator password as follows:

# /opt/hptc/nagios/etc/htpasswd.users nagiosadmin

The nagiosadmin user name and password are Web authorizations and are not governed by the /etc/password file.

If your system runs the Apache server on a backup node in case of failover, you need to propagate the /opt/hptc/nagios/etc/htpasswd.users database to that backup node. For information on propagating software, see Chapter 10 .

Changing the LSF Administrator Password

Use the following procedure to change the LSF Administrator password: