Changing PostgreSQL user account passwords

About this task

Experience Portal uses the following PostgreSQL user accounts:

Default account name

Description

postgres

The database administrator can use this account to log in to the local Avaya Experience Portal database and perform database administration tasks.

The password for this account is automatically generated. You cannot add other accounts of this type, delete this account, or change the account name.

	Important:
	Contact the Avaya Services representative to modify the local VoicePortal database as the database contains critical configuration information used to run the system.

report

You can have any number of accounts of this type with any account names.

reportwriter

This user account can only change the data in the tables that store report data in the Experience Portal database on the Auxiliary EPM server.

You can have any number of accounts of this type with any account names.

	Important:
	Contact the Avaya Services representative to modify the tables that store report data in the local VoicePortal database.

vpcommon

This account allows each Auxiliary EPM server limited access to the main Experience Portal database, and it is required if you plan to configure an Auxiliary EPM server.

You can delete this account and set the password for this account, but you cannot add other accounts of this type or change the account name.

Use the SetDbPassword.sh script to change all account passwords and add and delete all accounts except for postgres, which you cannot delete.

Before you begin

If you have installed the EPM software and are still logged in to the EPM server, ensure that the environment variables are properly loaded.

Procedure

Log on to Linux on the Primary or Auxiliary EPM server.
If you are an Avaya Services representative and are using Avaya Enterprise Linux, the Avaya Service accounts will not be available after the Avaya Enterprise Linux upgrade. The Avaya Service accounts will be available through EASG configuration during the Experience Portal upgrade. So,
- Log on to the local Linux console as root.
- Or log on remotely as a non-root user and enter the su - root command to change the user to root.
Navigate to the Support/Security-Tools directory under the Experience Portal installation directory.
Enter the cd $AVAYA_HOME/Support/Security-Tools command, where $AVAYA_HOME is an environmental variable pointing to the name of the installation directory specified during the Experience Portal software installation.

Enter the command bash SetDbPassword.sh followed by the additional parameters to perform the required operation. For details on the supported operations, see the following table. If you want to:

Update the password for the vpcommon user on the local database on the Primary EPM server	Enter the `bash SetDbPassword.sh update_primary_vpcommon` command.
Update the password for the local postgres user on the Primary EPM server	Enter the `bash SetDbPassword.sh update -u postgres` command.
Update the password for the report user name rptuser on the local database on the Primary EPM server	Enter the `bash SetDbPassword.sh update -u <rptuser>` command.
Set random password for local postgres user on the Primary EPM server	Enter the `bash SetDbPassword.sh reset_postgres` command.
Update the password for the Primary EPM's vpcommon user on the Auxilary EPM server	Enter the `bash SetDbPassword.sh update_primary_vpcommon` command.
Update the password for the vpcommon user on the local database on the Auxilary EPM server	Enter the `bash SetDbPassword.sh update_aux_vpcommon` command.
Update password for the local postgres user on the Auxilary EPM server	Enter the `bash SetDbPassword.sh update -u postgres` command.
Update the password for the report user name rptuser on the local database on the Auxilary EPM server	Enter the `bash SetDbPassword.sh update -u <rptuser>` command.
Set random password for local postgres user on the Auxilary EPM server	Enter the `bash SetDbPassword.sh reset_postgres` command.

The script displays a message prompt to enter the password

Enter the password.

After the password is accepted and updated, the script prompts a message indicating the services to be restarted and asks if the user wants to proceed.
Type one of the following:
- Y to restart the services that are listed.
- n to cancel the restarting services.
  
  Note:
  
  If you cancel restating the services, you should manually restart the services for the changes to take effect.

Next Steps

If you change the password for the vpcommon account on the primary EPM server, you must also change the password on the auxiliary EPM server.

	Note:
	If you cancel restating the services, you should manually restart the services for the changes to take effect.