Update Codar database user or password

If you changed the user or password of the database used by Codar, you must update the JBoss DataSource and other files that store this information.

  1. On the system running Codar, open a command prompt and change to the CSA_HOME\jboss‑as directory.
  2. Run the following command to generate an encoded version of the new database password:

    Windows:

    "CSA_JRE_HOME\bin\java" -cp "modules\org\jboss\logging\main\
    jboss-logging-3.1.2.GA.jar;modules\org\picketbox\main\
    picketbox-4.0.13.Final.jar" org.picketbox.datasource.security.SecureIdentityLoginModule <password>

    Linux:

    CSA_JRE_HOME/bin/java -cp "modules/org/jboss/logging/main/
    jboss-logging-3.1.2.GA.jar;modules/org/picketbox/main/
    picketbox-4.0.13.Final.jar" org.picketbox.datasource.security.SecureIdentityLoginModule <password>

    Copy the encoded password value that is returned (do not include spaces).

  3. Stop the Codar service, see Stop Codar.

    To stop Codar on Windows, complete the following steps:

    1. On the server that hosts Codar, navigate to Start > Administrative Tools > Services.

    2. Right-click on the Codar service and select Stop.

    3. Right-click on the Codar Execution Service service and select Stop.

    4. If you installed an embedded Operations Orchestration instance, right-click on the Operations Orchestration Central service and select Stop.

       

    To stop Codar on Linux, complete the following steps:

    1. Type the following command on the server that hosts Codar:

      service codar stop

    2. If you installed an embedded Operations Orchestration instance, as the root user, type:

      <embeddedOOinstallation>/central/bin/central stop.

      For example, type /usr/local/hpe/codar/OO/central/bin/central stop

  4. In a text editor, open the CSA_HOME\jboss‑as\standalone\
    configuration\standalone.xml
    file.

  5. In the file, locate the following content:

    Microsoft SQL Server

    <security-domain name="codar-encryption-sec" cache-type="default">
       <authentication>
          <login-module code="org.picketbox.datasource.security.SecureIdentityLoginModule" flag="required">
             <module-option name="username" value="<old_user_name>"/>
             <module-option name="password" value="<old_encoded_password>"/>
             <module-option name="managedConnectionFactoryName" value="jboss.jca:service=LocalTxCM,name=mssqlDS"/>
          </login-module>
       </authentication>
    </security-domain>

    Oracle

    <security-domain name="codar-encryption-sec" cache-type="default">
       <authentication>
          <login-module code="org.picketbox.datasource.security.SecureIdentityLoginModule" flag="required">
             <module-option name="username" value="<old_user_name>"/>
             <module-option name="password" value="<old_encoded_password>"/>
             <module-option name="managedConnectionFactoryName" value="jboss.jca:service=LocalTxCM,name=OracleDS"/>
          </login-module>
       </authentication>
    </security-domain>


    PostgreSQL

    <security-domain name="codar-encryption-sec" cache-type="default">
       <authentication>
          <login-module code="org.picketbox.datasource.security.SecureIdentityLoginModule" flag="required">
             <module-option name="username" value="<old_user_name>"/>
             <module-option name="password" value="<old_encoded_password>"/>
             <module-option name="managedConnectionFactoryName" value="jboss.jca:service=LocalTxCM,name=PostgresDS"/>
          </login-module>
       </authentication>
    </security-domain>

  6. Replace <old_encoded_password> with the new encoded password you copied in step 2 and <old_user_name> with the new user name.
  7. Save the standalone.xml file.
  8. Restart the Codar service, see Restart Codar.

  9. If you are using a tool (such as the content archive tool, process definition tool, provider tool, purge tool, or schema installation tool) that uses a database or configuration properties file (for example, db.properties or config.properties), update the appropriate property or properties in the file. By default, the file is located in the CSA_HOME\Tools\<Tool_Name> directory.

    The password property value should be encrypted (see Encrypt password). An encrypted password is preceded by ENC without any separating spaces and is enclosed in parentheses.