Get your encryption key from /etc/cloud/management/key   (default is
'password')

# Encrypt the new password 'dave-says-hi' with key 'password'
java -classpath /usr/share/java/cloud-jasypt-1.8.jar
org.jasypt.intf.cli.JasyptPBEStringEncryptionCLI encrypt.sh
input="dave-says-hi" password="password" verbose=false

# Decrypt the ciphertext with the same key 'password'
 java -classpath /usr/share/java/cloud-jasypt-1.8.jar
org.jasypt.intf.cli.JasyptPBEStringDecryptionCLI decrypt.sh
input="S0TXOpxss68b2/RHicePqyXwrMje+OaI" password="password" verbose=false

Interestingly the encryption command will spit out different output every
time you run it. Well I think that's interesting anyway.

Regards,
Dave Comerford

On 4 April 2013 19:30, Fabrice Brazier <fabrice.braz...@apalia.net> wrote:

> Thanks David and Geoff. In my environment the password is the same for
> every hosts.
> But in the host_details table the password seems to be encrypted and the
> value is different for each host.
>
> What is the encryption process ?
>
> Thanks,
> Fabrice
>
>
> -----Message d'origine-----
> De : David Comerford [mailto:davest...@gmail.com]
> Envoyé : jeudi 4 avril 2013 20:22
> À : users@cloudstack.apache.org
> Objet : Re: reopened - "CS failed after changing vcenter password"
>
> Fabrice,
>
> The vCenter password is stored in cloud.host_details table.
> > select * from host_details WHERE name='password';
>
> Sorry I can't get at my lab to give you the exact UPDATE query at the
> moment.
>
> Regards,
> Dave Comerford
>
> On 4 April 2013 18:23, Geoff Higginbottom
> <geoff.higginbot...@shapeblue.com>wrote:
>
> > Hi Fabrice,
> >
> > These were taken from a set of instructions we did for a CloudPlatform
> > build a while back, it looks like the DB Schema may have changed a
> > little since then, but the latest admin guide still has the same example
> in it.
> >
> > The actual password is stored in cloud.host.details, and you need to
> > cross reference the 'host_id' with the id from the cloud.host table
> >
> > Regards
> >
> > Geoff Higginbottom
> >
> > D: +44 20 3603 0542 | S: +44 20 3603 0540 | M: +447968161581
> >
> > geoff.higginbot...@shapeblue.com
> >
> >
> > -----Original Message-----
> > From: Fabrice Brazier [mailto:fabrice.braz...@apalia.net]
> > Sent: 04 April 2013 18:18
> > To: users@cloudstack.apache.org
> > Subject: RE: reopened - "CS failed after changing vcenter password"
> >
> > Hi Geoff,
> >
> > This command doesn't work:
> > update cloud.host set password='password' where id=5 or id=10 or
> > id=12;
> >
> > There is no "password" column in the host table.
> >
> > Regards,
> > Fabrice
> >
> > -----Message d'origine-----
> > De : Geoff Higginbottom [mailto:geoff.higginbot...@shapeblue.com]
> > Envoyé : jeudi 4 avril 2013 18:47
> > À : users@cloudstack.apache.org
> > Objet : RE: reopened - "CS failed after changing vcenter password"
> >
> > Hi Fabrice,
> >
> > To change the Passwords for ESXi try this procedure.
> >
> > To change host passwords the password must be changed on both the host
> > and in the CloudStack database.
> >
> > ESXi
> > 1.      Connect to the vCenter server using the vSphere client.
> > 2.      Navigate to Home > Management > Host Profiles
> > 3.      Right-click on the host profile and select Edit Profile
> > 4.      Expand 'Security Configuration' and select 'Administrator
> > password'
> > 5.      Select 'configure a fixed administrator password' and enter and
> > confirm the new password and click OK.
> > 6.      Click on the 'Hosts and Clusters' tab
> > 7.      Right click on each of the clusters and select 'check
> compliance'
> > in turn.
> > 8.      Hold down the CTRL key and select all of the clusters and select
> > Apply Profile.
> > 9.      Review the tasks which are displayed on screen and confirm (by
> > clicking Finish).
> >
> >
> > CloudStack
> > The password for a XenServer Node, KVM Node, or vSphere Node may be
> > changed in the database. Note that all Nodes in a Cluster must have
> > the same password. To change a Node's password:
> >
> > 1.      Identify all hosts in the cluster.
> > 2.      Change the password on all hosts in the cluster. Now the
> password
> > for the host and the password known to CloudStack will not match.
> > Operations on the cluster will fail until the two passwords match.
> > 3.      Get the list of host IDs for the host in the cluster where you
> are
> > changing the password. You will need to access the database to
> > determine these host IDs. For each hostname "h" (or vSphere cluster)
> > that you are changing the password for, execute:
> >
> >  mysql> select id from cloud.host where name like '%h%'; This should
> > return a single ID. Record the set of such IDs for these hosts.
> > 4.      Update the passwords for the host in the database. In this
> > example, we change the passwords for hosts with IDs 5, 10, and 12 to
> > "password".
> > mysql> update cloud.host set password='password' where id=5 or id=10
> > mysql> or id=12;
> >
> >
> > Regards
> >
> > Geoff Higginbottom
> >
> > D: +44 20 3603 0542 | S: +44 20 3603 0540 | M: +447968161581
> >
> > geoff.higginbot...@shapeblue.com
> >
> >
> > -----Original Message-----
> > From: Fabrice Brazier [mailto:fabrice.braz...@apalia.net]
> > Sent: 04 April 2013 17:38
> > To: cloudstack-us...@incubator.apache.org
> > Subject: reopened - "CS failed after changing vcenter password"
> >
> > Hi All,
> >
> > I'm using CloudStack 3.0.2. I need to update the vCenter password for
> > every hosts in the zone.
> > I tried using API updateHostPassword:
> > http://download.cloud.com/releases/3.0.0/api_3.0.0/root_admin/updateHo
> > stPa
> > ssword.html
> > http://wiki.cloudstack.org/pages/viewpage.action?pageId=14322288
> >
> > Everytime the same result:
> > <errorcode>431</errorcode>
> > <cserrorcode>4490</cserrorcode>
> > <errortext>This operation is not supported for this hypervisor
> > type</errortext>
> >
> > I tried to manually update the cluster_details table but the previous
> > password is still used (I can see the old password first letter in the
> > cloud-management log file after restarting cloud-management service).
> > Does someone know the correct process for VMware ?
> >
> > Thanks,
> > Fabrice
> >
> > -----Message d'origine-----
> > De : Koushik Das [mailto:koushik....@citrix.com] Envoyé : lundi 25
> > février
> > 2013 18:54 À : cloudstack-us...@incubator.apache.org; 'asicando'
> > Objet : RE: CS failed after changing vcenter password
> >
> > One way is to update the vcenter password stored in CS db. Check
> > cluster_details table.
> >
> > > -----Original Message-----
> > > From: Jerry Jiang [mailto:jerry.ji...@tyxtech.com]
> > > Sent: Monday, February 25, 2013 3:25 PM
> > > To: cloudstack-us...@incubator.apache.org; 'asicando'
> > > Subject: CS failed after changing vcenter password
> > >
> > > Hello all,
> > >
> > > Assumed I am using CS to manage vCenter host, if I changed vCenter
> > > password from vcenter's UI.
> > >
> > > I found CS have to delete and re-add the vcenter back into CS. But I
> > > can't operate the instances because UUID modified.
> > >
> > > How can I handle this situation?
> > >
> > > Thanks
> > >
> > > Jerry Jiang
> > >
> > >
> >
> > This email and any attachments to it may be confidential and are
> > intended solely for the use of the individual to whom it is addressed.
> > Any views or opinions expressed are solely those of the author and do
> > not necessarily represent those of Shape Blue Ltd or related
> > companies. If you are not the intended recipient of this email, you
> > must neither take any action based upon its contents, nor copy or show
> > it to anyone. Please contact the sender if you believe you have
> > received this email in error. Shape Blue Ltd is a company incorporated
> > in England & Wales. ShapeBlue Services India LLP is operated under
> > license from Shape Blue Ltd. ShapeBlue is a registered trademark.
> >
> > This email and any attachments to it may be confidential and are
> > intended solely for the use of the individual to whom it is addressed.
> > Any views or opinions expressed are solely those of the author and do
> > not necessarily represent those of Shape Blue Ltd or related
> > companies. If you are not the intended recipient of this email, you
> > must neither take any action based upon its contents, nor copy or show
> > it to anyone. Please contact the sender if you believe you have
> > received this email in error. Shape Blue Ltd is a company incorporated
> > in England & Wales. ShapeBlue Services India LLP is operated under
> > license from Shape Blue Ltd. ShapeBlue is a registered trademark.
> >
> >
>

Reply via email to