 |
» |
|
|
 |
This section describes the procedures for changing
the following administrative passwords on an HP XC system: Changing the Superuser Password |  |
The following procedure describes how to change
the root password and propagate that change throughout the HP XC system: Log in as superuser on the head
node. Use the passwd command to change the password locally on the head node. At this time, the root password is changed only on the
head node. Update the golden image to ensure
that the root password change is propagated the next time the nodes
are reinstalled: # updateimage --gc `hostname` --no-netboot |
For additional information on updating the golden
image, see “Updating the Golden Image”. Run the following commands to
update all the appropriate files throughout the HP XC system: # pdcp -a -x `hostname` /etc/passwd /etc/passwd
# pdcp -a -x `hostname` /etc/group /etc/group
# pdcp -a -x `hostname` /etc/shadow /etc/shadow
# pdcp -a -x `hostname` /etc/gshadow /etc/gshadow |
When this step is complete, the root password is
changed on all the nodes in the HP XC system.
Changing the CMDB Password |  |
The configuration and management database (CMDB)
is a mysql database, and you can change its administrative
password by using the mysql tools. Changing the Interconnect Password |  |
The procedure to change the administrative password
of the Interconnect switch depends on the Interconnect switch: The ProCurve (Gigabit
Ethernet) switch has an administrative password and requires an update
to the HP XC configuration and management database (CMDB). The Myrinet Interconnect switch has
no administrative password. The Quadrics Elan4 Interconnect
switch has administrative password and does not require an update
to the HP XC CMDB. The Voltaire InfiniBand
Interconnect switch has administrative password and does not require
an update to the HP XC CMDB. The administrative accounts of
Cisco SFS 7000 Series InfiniBand Server Switches can differ depending
on the model number.
The documentation that came with your model of
the ProCurve switch describes how to set the administrative password. If you change the ProCurve switch administrative
password and the HP XC system has more than one ProCurve switch,
you must change every ProCurve switch to the same password. The documentation that came with your model of
the Quadrics Elan switch describes how to set the administrative password. Generally, you can change the password by logging
in to the switch and using its Quadrics Switch Control main menu as
in the following example: Enter 1-9 and press return: 8
1. Passwd settings
2. Access protocol settings
Enter 1,2 and press return: 1
changing password for quadrics
Current Password:
New password:
Retype new password: |
Voltaire InfiniBand Switch Administrative PasswordThe documentation that came with your model of
the Voltaire InfiniBand switch describes how to set the administrative
password. Generally, you change the Voltaire Infiniband
switch administrative password by logging in to the switch as admin and using its command interface as in the following
example: # telnet IRON00
IR0N00 login: admin
Password:
Welcome to Voltaire Switch IR0N00
connecting
IR0N00> enable
password:
IR0N00# ? pass
password update [admin, enable]password update [admin, enable]
IR0N00# password update admin
Insert new (up to 8 characters)password:
Please retype new password:
OK
IR0N00# password update enable
Insert new (up to 8 characters)password:
Please retype new password:
OK
IR0N00# |
Also, enter the following command to set up ssh as root on the switch, which will enable you to access
the root switch without a password: # cat /root/.ssh/id_dsa.pub | ssh IR0N00 cat '>>' /.ssh/authorized_keys |
Accessing the root switch without a password is
necessary for the proper operation of the ip_prodmode_mon monitoring utility and the sys_check infiniband component. Repeat these steps for each switch controller
card, for example, for IRON00, IRON01, and so on. Additionally, you can access the Voltaire
product documentation at the following web address: http://www.voltaire.com/SupportAndServices/Product_Documentation/Grid_Backbone_Switches Voltaire InfiniBand Switch Root PasswordThe InfiniBand switches run
Linux and have a root password. Occasionally, you might have to
log into the InfiniBand switch as root, so HP recommends
that you use the following procedure to change the default root password
on the InfiniBand switches: Use ssh or telnet to log in to the InfiniBand switch
as root. The default password is br6000. Use the passwd command to change the root password. Make a backup copy of the cliPassWord.crpt file: # cp /mnt/jffs/voltaire/config/cliPassWord.crpt \
/mnt/jffs/voltaire/config/cliPassWord.crpt.orig |
Copy the /etc/shadow file into the cliPassWord.crpt file: # cp /etc/shadow /mnt/jffs/voltaire/config/cliPassWord.crpt |
Cisco SFS 7000 Series InfiniBand Server SwitchesThe instructions for changing the administrative passwords for
Cisco® SFS 7000 Series InfiniBand
Server Switches are located in the documentation for the specific
switch model. Some of this documentation is available at the following
web address: http://docs.hp.com/en/highperfcomp.html Additionally, you can access the full complement of Cisco documentation
for the SFS 7000 Series InfiniBand Server switches at the following
web address: http://www.cisco.com/en/US/products/ps6421/tsd_products_support_series_home.html The following table lists default accounts for three Cisco SFS
7000 Series InfiniBand Server switches. Changing the Console Port Password |  |
When you change the password for an iLO, MP, or IPMI, you must ensure that the console port password matches its counterpart
in the CMDB. The HP XC Hardware Preparation Guide describes changing the console
port password for an iLO, MP, or IPMI. Synchronizing the BMC/IPMI Password for CP6000 Systems |  |
The CP6000 systems require an additional step to
synchronize the IPMI password with the console port. The BMC/IPMI
password must match the console port password on all nodes. You can connect the head node console port either
internally or externally to the HP XC system. Follow the procedures
appropriate for your installation. On HP XC systems whose head node is either
an HP CP6000 system or an HP CP4000 system,
you can only obtain the sensor and System Event Log information remotely. Setting the BMI/IPMI Password Using an External Connection
to the Head Node Management PortAllow access to the head node's management
port through the external IP address, and synchronize the management
port passwords as shown by the following procedure:  |  |  |  |  | NOTE: Substitute the node name (for example, n144) for the headnode variable. |  |  |  |  |
Use the text editor of your
choice to add the following line to the /etc/hosts file: external-ip-address cp-headnode |
For information on the /etc/hosts file, see hosts(5). Use the ipmitool to set the BMC password. If the IPMI password has
been configured previously, enter the following command: # pdsh -a -x "headnode" 'ipmitool -I lan -P "oldpassword" \
-H cp-$(nodename) user set password 1 newpassword' |
If the IPMI password has
never been configured, enter the following command: # pdsh -a -x "headnode" 'ipmitool -I lan -P "" \
-H cp-$(nodename) user set password 1 newpassword' |
The default password setting is a null ("").
Internal Connection to the Head Node's Console PortIf the head node's console port is connected
internally, use the ipmitool command as follows
to synchronize the console port password throughout the HP XC system: # pdsh -a 'ipmitool -I lan -P "oldpassword" \
-H cp-$(nodename) user set password 1 newpassword'
|
Changing the Nagios Administrator Password |  |
Use the Apache server htpassword command to change the Nagios administrator password as follows: # /opt/hptc/nagios/etc/htpasswd.users nagiosadmin |
The nagiosadmin user name and
password are Web authorizations and are not governed by the /etc/password file. If your system runs the Apache server on a backup
node in case of failover, you need to propagate the /opt/hptc/nagios/etc/htpasswd.users database to that backup node. For information on propagating software,
see Chapter 11 . Changing the LSF Administrator Password |  |
Use the following procedure to change the LSF
Administrator password: Log in as superuser (root)
on the head node. Use the passwd command to change the password locally on the head node: At this time, the lsfadmin account
password is changed only on the head node. Update the golden image to
ensure that the lsfadmin password change is propagated
the next time the nodes are reinstalled: # updateimage --gc `hostname` --no-netboot |
For additional information on updating the golden
image, see “Updating the Golden Image”. Run the following commands
to update all the appropriate files throughout the HP XC system: # pdcp -a -x `hostname` /etc/passwd /etc/passwd
# pdcp -a -x `hostname` /etc/group /etc/group
# pdcp -a -x `hostname` /etc/shadow /etc/shadow
# pdcp -a -x `hostname` /etc/gshadow /etc/gshadow |
When this step is complete, the lsfadmin account password is changed on all the nodes in the HP XC system.
|