Moogsoft Docs

Change Passwords for Default Users

Moogsoft AIOps creates users for Linux, MySQL, RabbitMQ, the Moogsoft AIOps UI and Graze API during the installation process. As a security measure, you must change the default passwords for these users. After you change the passwords you may need to update the Moogsoft AIOps configuration to use the new passwords.

If you run in a distributed environment, you can set unique passwords for all components on each host.

Moogsoft recommends you encrypt passwords for use in Moogsoft AIOps configuration files. See Moog Encryptor for more information. In distributed or high availability environments, encrypt passwords on each machine.

Linux Users

The Moogsoft AIOps installation package creates the following Linux users with login privileges:

Execute the passwd command to change the password of these Linux users. For example, to change the password for the moogtoolrunner user:

passwd moogtoolrunner

The Moogsoft AIOps installation package creates the following Linux users without login privileges:

  • elasticsearch

  • mysql

  • nginx

Update Moogsoft AIOps Configuration

After you change the password for moogtoolrunner, update its password in $MOOGSOFT_HOME/config/servlets.conf. You can use either the toolrunnerpassword or encrypted_toolrunnerpassword property. For example:

#toolrunnerpassword: "MyNewPassword",
encrypted_toolrunnerpassword: "rmW2daCwMyI8JGZygfEJj0MZdbIkUqX3tT/OIVfMGyI=",

Restart Apache Tomcat to apply the configuration change:

service apache-tomcat restart

Note

You do not need to update the Moogsoft AIOps configuration after you change the password for other Linux users with login privileges.

MySQL User

The Moogsoft AIOps installation process creates a user to log in to MySQL: ermintrude. Execute the MySQL SET PASSWORD statement for the ermintrude user to change its password:

SET password FOR 'ermintrude'@'localhost'= PASSWORD('<new-password>');

If you are running in a distributed environment, update the password for the ermintrude user on all other nodes:

SET password FOR 'ermintrude'@'<host>'= PASSWORD('<new-password>');

Where <host> is the name of the remote server connecting to the database. For example, if you have the Moogsoft AIOps UI web components running on a separate host named "mywebserver":

SET password FOR 'ermintrude'@'mywebserver'= PASSWORD('MyNewPassword');

After you change the password for ermintrude, grant it priviliges on all the objects in the moogdb and moog_reference databases. For example:

GRANT ALL ON moogdb.* TO ermintrude@'localhost' IDENTIFIED BY '<new-password>';
GRANT ALL ON moog_reference.* TO ermintrude@'localhost' IDENTIFIED BY '<new-password>';

If you are running in a distributed environment, you must grant permissions for the ermintrude user on all nodes. For example:

GRANT ALL ON moogdb.* TO ermintrude@'<host>' IDENTIFIED BY '<new-password>';
GRANT ALL ON moog_reference.* TO ermintrude@'<host>' IDENTIFIED BY '<new-password>';

Where <host> is the name of the remote server connecting to the database. For example, if you have the Moogsoft AIOps UI web components runing on a separate host named "mywebserver":

GRANT ALL ON moogdb.* TO ermintrude@'my' IDENTIFIED BY 'MyNewPassword';

GRANT ALL ON moog_reference.* TO ermintrude@'<host>' IDENTIFIED BY 'MyNewPassword';

Update Moogsoft AIOps Configuration

After you change the password for ermintrude, update its password in $MOOGSOFT_HOME/config/system.conf. For example:

"mysql" :
{
    "host"                      : "localhost",
    "moogdb_database_name"      : "moogdb",
    "referencedb_database_name" : "moog_reference",
    "username"                  : "ermintrude",
    "password"                  : "MyNewPassword"
}

If you are running in a distributed environment, update the password configuration on every host.

RabbitMQ User

The Moogsoft AIOps installation process creates a RabbitMQ user called moogsoft. Execute the rabbitmqctl change_password command to change the password for moogsoft. For example:

rabbitmqctl change_password moogsoft <new-password>
Update Moogsoft AIOps Configuration

After you change the password for moogsoft, update its password in $MOOGSOFT_HOME/config/system.conf. You can use either the password or encrypted_password property. For example:

"username"           : "moogsoft",
#"password"          : "MyNewPassword",
"encrypted_password" : "e5uO0LY3HQJZCltG/caUnVbxVN4hImm4gIOpb4rwpF4=",

If you are running in a distributed environment, update the password configuration on every host.

Graze API and UI Users

The installation process creates the following default users for the UI:

  • admin

  • graze

  • super

You can also use the graze user to log into the Graze API.

To change the default passwords for these users, log into the UI and go to Settings > Users.