Jump to content United States-English
HP.com Home Products and Services Support and Drivers Solutions How to Buy
» Contact HP
More options
HP.com home
HP XC System Software : Administration Guide > Chapter 14 Managing Local User Accounts and Passwords

Changing Administrative Passwords

» 

Technical documentation

Complete book in PDF
» Feedback
Content starts here

 » Table of Contents

 » Glossary

 » Index

This section describes the procedures for changing the following administrative passwords on an HP XC system:

Changing the Superuser Password

The following procedure describes how to change the root password and propagate that change throughout the HP XC system:

  1. Log in as superuser on the head node.

  2. Use the passwd command to change the password locally on the head node.

    At this time, the root password is changed only on the head node.

  3. Update the golden image to ensure that the root password change is propagated the next time the nodes are reinstalled:

    # updateimage --gc `hostname` --no-netboot

    For additional information on updating the golden image, see “Updating the Golden Image”.

  4. Run the following commands to update all the appropriate files throughout the HP XC system:

    # pdcp -a -x `hostname` /etc/passwd /etc/passwd
    # pdcp -a -x `hostname` /etc/group /etc/group
    # pdcp -a -x `hostname` /etc/shadow /etc/shadow
    # pdcp -a -x `hostname` /etc/gshadow /etc/gshadow

    When this step is complete, the root password is changed on all the nodes in the HP XC system.

Changing the CMDB Password

The configuration and management database (CMDB) is a mysql database, and you can change its administrative password by using the mysql tools.

CAUTION: Changing the CMDB password can cause complications that can corrupt the database and jeopardize system operation; for example, some commands might cease to function.

If you must change this password, be sure that you back up the CMDB as described in “Backing Up the Configuration Database”. You also need to update the CMDB manually, which is beyond the scope of this document.

Changing the Interconnect Password

The procedure to change the administrative password of the Interconnect switch depends on the Interconnect switch:

  • The ProCurve (Gigabit Ethernet) switch has an administrative password and requires an update to the HP XC configuration and management database (CMDB).

  • The Myrinet Interconnect switch has no administrative password.

  • The Quadrics Elan4 Interconnect switch has administrative password and does not require an update to the HP XC CMDB.

  • The Voltaire InfiniBand Interconnect switch has administrative password and does not require an update to the HP XC CMDB.

  • The administrative accounts of Cisco SFS 7000 Series InfiniBand Server Switches can differ depending on the model number.

ProCurve Switch

The documentation that came with your model of the ProCurve switch describes how to set the administrative password.

If you change the ProCurve switch administrative password and the HP XC system has more than one ProCurve switch, you must change every ProCurve switch to the same password.

CAUTION: Changing the ProCurve password can cause complications if you do not also update the configuration and management database (CMDB) manually with the new password. Updating the CMDB is beyond the scope of this document.

If you make an error updating the CMDB, you can corrupt the database and jeopardize system operation; for example, some commands might cease to function.

If you must update the CMDB, be sure that you back it up as described in “Backing Up the Configuration Database” before changing the ProCurve switch administrative password.

Quadrics Elan4

The documentation that came with your model of the Quadrics Elan switch describes how to set the administrative password.

Generally, you can change the password by logging in to the switch and using its Quadrics Switch Control main menu as in the following example:

Enter 1-9  and press return: 8



                          1. Passwd settings
                          2. Access protocol settings

Enter 1,2  and press return: 1
changing password for quadrics
Current Password:
New password:
Retype new password:

Voltaire InfiniBand Switch Administrative Password

The documentation that came with your model of the Voltaire InfiniBand switch describes how to set the administrative password.

Generally, you change the Voltaire Infiniband switch administrative password by logging in to the switch as admin and using its command interface as in the following example:

# telnet IRON00
IR0N00 login: admin
Password:

Welcome to Voltaire Switch IR0N00

connecting
IR0N00> enable
password:
IR0N00# ? pass
password update [admin, enable]password update [admin, enable]
IR0N00# password update admin
Insert new (up to 8 characters)password:
Please retype new password:
OK
IR0N00# password update enable
Insert new (up to 8 characters)password:
Please retype new password:
OK
IR0N00#

Also, enter the following command to set up ssh as root on the switch, which will enable you to access the root switch without a password:

# cat /root/.ssh/id_dsa.pub | ssh IR0N00 cat '>>' /.ssh/authorized_keys

Accessing the root switch without a password is necessary for the proper operation of the ip_prodmode_mon monitoring utility and the sys_check infiniband component.

Repeat these steps for each switch controller card, for example, for IRON00, IRON01, and so on.

Additionally, you can access the Voltaire product documentation at the following web address:

http://www.voltaire.com/SupportAndServices/Product_Documentation/Grid_Backbone_Switches

Voltaire InfiniBand Switch Root Password

The InfiniBand switches run Linux and have a root password. Occasionally, you might have to log into the InfiniBand switch as root, so HP recommends that you use the following procedure to change the default root password on the InfiniBand switches:

  1. Use ssh or telnet to log in to the InfiniBand switch as root. The default password is br6000.

  2. Use the passwd command to change the root password.

  3. Make a backup copy of the cliPassWord.crpt file:

    # cp /mnt/jffs/voltaire/config/cliPassWord.crpt \
    /mnt/jffs/voltaire/config/cliPassWord.crpt.orig
  4. Copy the /etc/shadow file into the cliPassWord.crpt file:

    # cp /etc/shadow /mnt/jffs/voltaire/config/cliPassWord.crpt

Cisco SFS 7000 Series InfiniBand Server Switches

The instructions for changing the administrative passwords for Cisco® SFS 7000 Series InfiniBand Server Switches are located in the documentation for the specific switch model. Some of this documentation is available at the following web address:

http://docs.hp.com/en/highperfcomp.html

Additionally, you can access the full complement of Cisco documentation for the SFS 7000 Series InfiniBand Server switches at the following web address:

http://www.cisco.com/en/US/products/ps6421/tsd_products_support_series_home.html

The following table lists default accounts for three Cisco SFS 7000 Series InfiniBand Server switches.

SwitchAccountDescription
Cisco 7000D (24 port) switchsuper

Primary privileged account for switch management

 admin

Account for switch management with limited privileges

 guest

Guest account with view-only privileges

Cisco 7012D (144 port) and Cisco 7024D (288 port)admin

Primary privileged account for switch management

 operator

Account for switch management with limited privileges

Changing the Console Port Password

When you change the password for an iLO, MP, or IPMI, you must ensure that the console port password matches its counterpart in the CMDB.

CAUTION: Changing the console port password can cause complications if you do not also update the CMDB manually with the new password. Updating the CMDB is beyond the scope of this document.

If you make an error updating the CMDB, you can corrupt the database and jeopardize system operation; for example, some commands might cease to function.

If you must update the CMDB, be sure that you back it up as described in “Backing Up the Configuration Database” before changing the console port password.

The HP XC Hardware Preparation Guide describes changing the console port password for an iLO, MP, or IPMI.

Synchronizing the BMC/IPMI Password for CP6000 Systems

The CP6000 systems require an additional step to synchronize the IPMI password with the console port. The BMC/IPMI password must match the console port password on all nodes.

You can connect the head node console port either internally or externally to the HP XC system. Follow the procedures appropriate for your installation.

On HP XC systems whose head node is either an HP CP6000 system or an HP CP4000 system, you can only obtain the sensor and System Event Log information remotely.

Setting the BMI/IPMI Password Using an External Connection to the Head Node Management Port

Allow access to the head node's management port through the external IP address, and synchronize the management port passwords as shown by the following procedure:

NOTE: Substitute the node name (for example, n144) for the headnode variable.
  1. Use the text editor of your choice to add the following line to the /etc/hosts file:

    external-ip-address  cp-headnode

    For information on the /etc/hosts file, see hosts(5).

  2. Use the ipmitool to set the BMC password.

    IMPORTANT:

    The commands to set the management port password differ depending on whether the IPMI password has been configured or not (that is, whether the password is null):

    • If the IPMI password has been configured previously, enter the following command:

      # pdsh -a -x "headnode" 'ipmitool -I lan -P "oldpassword" \
      -H cp-$(nodename) user set password 1 newpassword'
    • If the IPMI password has never been configured, enter the following command:

      # pdsh -a -x "headnode" 'ipmitool -I lan -P "" \
      -H cp-$(nodename) user set password 1 newpassword'

      The default password setting is a null ("").

    NOTE: Setting the password returns a message like the following:
    Close Session command failed

    You can ignore this message.

Internal Connection to the Head Node's Console Port

If the head node's console port is connected internally, use the ipmitool command as follows to synchronize the console port password throughout the HP XC system:

# pdsh -a 'ipmitool -I lan -P "oldpassword" \
  -H cp-$(nodename) user set password 1 newpassword'

Changing the Nagios Administrator Password

Use the Apache server htpassword command to change the Nagios administrator password as follows:

# /opt/hptc/nagios/etc/htpasswd.users nagiosadmin

The nagiosadmin user name and password are Web authorizations and are not governed by the /etc/password file.

If your system runs the Apache server on a backup node in case of failover, you need to propagate the /opt/hptc/nagios/etc/htpasswd.users database to that backup node. For information on propagating software, see Chapter 11 .

Changing the LSF Administrator Password

Use the following procedure to change the LSF Administrator password:

  1. Log in as superuser (root) on the head node.

  2. Use the passwd command to change the password locally on the head node:

    # passwd lsfadmin

    At this time, the lsfadmin account password is changed only on the head node.

  3. Update the golden image to ensure that the lsfadmin password change is propagated the next time the nodes are reinstalled:

    # updateimage --gc `hostname` --no-netboot

    For additional information on updating the golden image, see “Updating the Golden Image”.

  4. Run the following commands to update all the appropriate files throughout the HP XC system:

    # pdcp -a -x `hostname` /etc/passwd /etc/passwd
    # pdcp -a -x `hostname` /etc/group /etc/group
    # pdcp -a -x `hostname` /etc/shadow /etc/shadow
    # pdcp -a -x `hostname` /etc/gshadow /etc/gshadow

    When this step is complete, the lsfadmin account password is changed on all the nodes in the HP XC system.

Printable version
Privacy statement Using this site means you accept its terms Feedback to webmaster
© 2003 Hewlett-Packard Development Company, L.P.