HOWTO: Change oenadmin and serveradmin password in OpenNebula

tech-memo

version

version = 5.9.90

reference

  • oneadmin password change

Managing Users — OpenNebula 5.10.5 documentation

  • serveradmin password change

User Security and Authentication — OpenNebula 5.10.5 documentation

example my env

user list

[oneadmin@opennebula-cp ~]$ oneuser list
  ID NAME                                                                              GROUP    AUTH            VMS     MEMORY        CPU
   1 serveradmin                                                                       oneadmin server_c    0 /   -      0M /   0.0 /   -
   0 oneadmin                                                                          oneadmin core              -          -          -

oneadmin (ID=>0)

[oneadmin@opennebula-cp ~]$ oneuser passwd 0 password000
[oneadmin@opennebula-cp ~]$ echo 'oneadmin:password000' > /var/lib/one/.one/one_auth
[oneadmin@opennebula-cp ~]$ exit
exit
[root@opennebula-cp ~]# systemctl restart opennebula

If mm_sched didnt restart after you restarted opennebula, you might be better to stop it (optional).

[oneadmin@opennebula-cp ~]$ ps auxw | grep mm_sched
oneadmin  2245  0.0  0.0 112712   960 pts/0    S+   22:19   0:00 grep --color=auto mm_sched
oneadmin 29158  0.0  0.3 267504 14184 ?        Ssl  Apr23   3:03 /usr/bin/mm_sched
[oneadmin@opennebula-cp ~]$ kill 29158

Please exec mm_sched in background.

[oneadmin@opennebula-cp ~]$ mm_sched &
[1] 2248
[oneadmin@opennebula-cp ~]$ ps auxw | grep mm_sched
oneadmin  2248  1.0  0.1 193768  6052 pts/0    Sl   22:19   0:00 mm_sched
oneadmin  2254  0.0  0.0 112712   964 pts/0    S+   22:19   0:00 grep --color=auto mm_sched

Please confirm 'oneuser show' command by oneadmin. If you could not show this command, you may failed password change.

[root@opennebula-cp ~]# su oneadmin -
[oneadmin@opennebula-cp root]$ cd
[oneadmin@opennebula-cp ~]$ oneuser show
USER 0 INFORMATION
ID              : 0
NAME            : oneadmin
GROUP           : oneadmin

serveradmin (ID=>1)

*password must enough lengh

[oneadmin@opennebula-cp ~]$ oneuser passwd 1 --sha256 password0123hogehoge999
[oneadmin@opennebula-cp ~]$ echo 'serveradmin:password0123hogehoge999' > /var/lib/one/.one/oneflow_auth
[oneadmin@opennebula-cp ~]$ echo 'serveradmin:password0123hogehoge999' > /var/lib/one/.one/ec2_auth
[oneadmin@opennebula-cp ~]$ echo 'serveradmin:password0123hogehoge999' > /var/lib/one/.one/onegate_auth
[oneadmin@opennebula-cp ~]$ echo 'serveradmin:password0123hogehoge999' > /var/lib/one/.one/occi_auth
[oneadmin@opennebula-cp ~]$ echo 'serveradmin:password0123hogehoge999' > /var/lib/one/.one/sunstone_auth
[oneadmin@opennebula-cp ~]$ exit
exit
[root@opennebula-cp ~]# systemctl restart opennebula-sunstone

Sunstone login

Please confirm login sunstone using new password(oneadmin's password.NOT serveradmin password).

I hope your helpful.