Secure password hashing algorithm SCRAM-SHA-256 for database users

In earlier releases of Experience Portal, Postgres could only use the default MD5 password hashing algorithm for database users. In Release 7.2.3, Postgres was updated from 9.X to 11.X to support the use of a more secure password hashing algorithm SCRAM-SHA-256.

New script to change to SCRAM-SHA-256 password hashing algorithm

The SetDbPasswordAndHashingAlgorithm.sh script is used to change from the default MD5 password hashing algorithm to the SCRAM-SHA-256 password hashing algorithm. This script is present in the same location as the rest of the security related scripts on EPM at /opt/Avaya/ExperiencePortal/Support/Security-Tools/.

This new shell script automates many of the manual steps required to switch between the password hashing algorithms. For details on how to use the script to change to the newer and more secure SCRAM-SHA-256, see Changing Postgres user password hashing algorithm from MD5 to SCRAM-SHA-256.

For the remaining steps that have to performed manually to change to the new password hashing algorithm, see Changing existing account passwords manually.