This post illustrates steps to change engine database password for RHVM engine.
1. Before modification, you can run below commands to check the current ENGINE_DB_PASSWORD for RHEVM engine interacting with the engine database. By default, ENGINE_DB_PASSWORD is a random string which is auto-generated by engine-config during the setup process. The ENGINE_DB_PASSWORD is used by below files:
[root@rhevm-engine ~]# cat /etc/ovirt-engine/engine.conf.d/10-setup-database.conf |grep "ENGINE_DB_PASSWORD" ENGINE_DB_PASSWORD="xxxxxxxx" [root@rhevm-engine ~]# cat /etc/ovirt-engine-dwh/ovirt-engine-dwhd.conf.d/10-setup-database.conf |grep "ENGINE_DB_PASSWORD" ENGINE_DB_PASSWORD="xxxxxxxx" [root@rhevm-engine ~]# cat /etc/ovirt-engine/aaa/internal.properties |grep dbpassword config.datasource.dbpassword=xxxxxxxx
2. Follow below steps to change engine database password:
a. Stop the ovirt-engine process:
[root@rhevm-engine ~]# systemctl stop ovirt-engine
b. Stop oVirt Engine Data Warehouse service:
[root@rhevm-engine ~]# systemctl stop ovirt-engine-dwhd
c. Change the credentials that the engine process sends to the database by modifying ENGINE_DB_PASSWORD with the new password:
[root@rhevm-engine ~]# vi /etc/ovirt-engine/engine.conf.d/10-setup-database.conf ENGINE_DB_PASSWORD="YourNewPassword" [root@rhevm-engine ~]# vi /etc/ovirt-engine-dwh/ovirt-engine-dwhd.conf.d/10-setup-database.conf ENGINE_DB_PASSWORD="YourNewPassword"
d. Change internal domain dbpassword:
[root@rhevm-engine ~]# vi /etc/ovirt-engine/aaa/internal.properties config.datasource.dbpassword=YourNewPassword
e. Change the postgres database credentials:
By default, the name of the user in ENGINE_DB_USER and database in ENGINE_DB_DATABASE are both “engine”:
[root@rhevm-engine ~]# cat /etc/ovirt-engine/engine.conf.d/10-setup-database.conf ENGINE_DB_HOST="localhost" ENGINE_DB_PORT="5432" ENGINE_DB_USER="engine" ENGINE_DB_DATABASE="engine"
Connect to the ‘Postgres’ database to alter the engine db user and postgres passwords:
[root@rhevm-engine ~]# su - postgres Last login: Thu Apr 30 15:29:48 AEST 2020 on pts/1 -bash-4.2$ scl enable rh-postgresql95 -- psql psql (9.5.14) Type "help" for help. postgres=# alter user engine with password 'YourNewPassword'; ALTER ROLE postgres-# alter user postgres with password 'YourNewPassword'; ALTER ROLE postgres=# \q -bash-4.2$ exit logout
f. Start ovirt-engine and Data Warehouse service to take effect:
[root@rhevm-engine ~]# systemctl start ovirt-engine [root@rhevm-engine ~]# systemctl start ovirt-engine-dwhd
Now you can use now use the new credentials to access the engine database.