FusionCube Fusioncompute 忘记admin密码重置步骤

软件版本

FusionCube 8.0.0.SPC100 

Fusioncompute  8.1.1.1

此处的FusionCube 管理IP为10.81.20.2，主机名为FCV01,为虚拟机，

此处的Fusioncompute  管理IP为10.81.20.5，主机名为VRM01，为虚拟机

远程登录了时候不要登录主机节点，注意是需要登录到fcv和vrm虚拟机上。

FusionCube  重置admin账户密码

FusionCude 登录虚拟机节点，管理IP为10.81.20.2，主机名为FCV01


使用manageromm 用户登录密码是系统初始化后的自行设置的密码

1· 登录高斯数据库(xxx替换高斯数据库密码)
 su gaussdba -s /bin/bash
 zsql gaussdba/'xxx'@127.0.0.1:1888
2· schema切成framework
 ALTER SESSION SET current_schema=framework;
3· 将admin密码或secadmin密码设置成默认密码(默认密码为Huawei @4321)
 update framework.IAM_ACCOUNT set PASSWORD='10000:6d424367fb2d3620141b24971bf02cce:b049522b21e2a8959214835162e25749fc584b5a68b895693c7efe7844bc17a9ab028135b9b2b1bbed716a2e65ec44216ec013af18f4160efdcb647cf3874dc9' where USER_NAME='admin';
 4、commit;命令提交更改，更新数据 回到FCV前台登录界面，重新登录

操作步骤如下

获取数据库的guassdba密码

[root@fcv01 ~]# python -c "import kmc.kmc as K;import os;os.environ['KMC_DATA_USER']='gaussdba';print(K.API().decrypt(0,'$(cat /opt/huawei/fce/runtime/security/priv/gaussdb.conf |grep ^gaussdba= |awk -F '=' '{print $2}')'))"
fc2HW@CLOUD8!

完整操作步骤如下

[root@fcv01 ~]# python -c "import kmc.kmc as K;import os;os.environ['KMC_DATA_USER']='gaussdba';print(K.API().decrypt(0,'$(cat /opt/huawei/fce/runtime/security/priv/gaussdb.conf |grep ^gaussdba= |awk -F '=' '{print $2}')'))"
fc2HW@CLOUD8!
[root@fcv01 ~]# su - gaussdba -s /bin/bash
Last login: Thu Oct 10 14:17:51 CST 2024
[gaussdba@fcv01 ~]$  zsql gaussdba/'xxx'@127.0.0.1:1888

GS-00329, Incorrect user or password

[gaussdba@fcv01 ~]$
[gaussdba@fcv01 ~]$
[gaussdba@fcv01 ~]$
[gaussdba@fcv01 ~]$ zsql gaussdba/'fc2HW@CLOUD8!'@127.0.0.1:1888

connected.


SQL> ALTER SESSION SET current_schema=framework;

Succeed.

SQL> update framework.IAM_ACCOUNT set PASSWORD='10000:6d424367fb2d3620141b24971bf02cce:b049522b21e2a8959214835162e25749fc584b5a68b895693c7efe7844bc17a9ab028135b9b2b1bbed716a2e65ec44216ec013af18f4160efdcb647cf3874dc9' where USER_NAME='admin';

1 rows affected.

SQL> commit;

Succeed.

SQL> select user_name,password from framework.IAM_ACCOUNT where user_name='secadmin';

USER_NAME                                                        PASSWORD
---------------------------------------------------------------- ----------------------------------------------------------------
secadmin                                                         10000:602b4caef17026ce1c6a75d69cc5d5e6:4a09a45c661c621702cb7ba65a08c83a97c7545e988cccf0bab6ebed688fb1bd66fe2b573c5b4cd4d476626aa697e6e7d0b30490097ab69a5a721317a69b6801

1 rows fetched.

SQL> select user_name,password from framework.IAM_ACCOUNT where user_name='admin';

USER_NAME                                                        PASSWORD
---------------------------------------------------------------- ----------------------------------------------------------------
admin                                                            10000:6d424367fb2d3620141b24971bf02cce:b049522b21e2a8959214835162e25749fc584b5a68b895693c7efe7844bc17a9ab028135b9b2b1bbed716a2e65ec44216ec013af18f4160efdcb647cf3874dc9

1 rows fetched.

SQL>

SQL> update framework.IAM_ACCOUNT set PASSWORD='10000:602b4caef17026ce1c6a75d69cc5d5e6:4a09a45c661c621702cb7ba65a08c83a97c7545e988cccf0bab6ebed688fb1bd66fe2b573c5b4cd4d476626aa697e6e7d0b30490097ab69a5a721317a69b6801' where USER_NAME='admin';


1 rows affected.

SQL> commit
  2
  3
  4
  5
  6 ;

Succeed.

SQL> select user_name,password from framework.IAM_ACCOUNT where user_name='admin';

USER_NAME                                                        PASSWORD
---------------------------------------------------------------- ----------------------------------------------------------------
admin                                                            10000:602b4caef17026ce1c6a75d69cc5d5e6:4a09a45c661c621702cb7ba65a08c83a97c7545e988cccf0bab6ebed688fb1bd66fe2b573c5b4cd4d476626aa697e6e7d0b30490097ab69a5a721317a69b6801

1 rows fetched.

Fusioncompute  重置admin账户密码

Fusioncompute  重置步骤
1.以gandalf用户登录VRM虚拟机节点，管理IP为10.81.20.5，主机名为VRM01


然后执行su – root切换用户

2.执行如下命令将admin用户的密码修改为Huawei@123!

# psql -U galax vrm -c "update sm.tbl_user set password='75832dd7fb530fc7f574d61d49cadf20rF86+JEaDx02'  where username='admin' and usertype='0'; "

当提示需要输入数据库密码时，默认为SingleLOUD!1

然后重启下服务即可service vrmd restart；

修改过后，重新登录平台

完整操作步骤如下

C:\Users\LT>ssh gandalf@10.81.20.5

Authorized users only. All activities may be monitored and reported.
gandalf@10.81.20.5's password:
Last login: Thu Oct 10 14:01:01 2024
[gandalf@VRM01 ~]$
[gandalf@VRM01 ~]$
[gandalf@VRM01 ~]$
[gandalf@VRM01 ~]$ psql -U galax vrm -c "update sm.tbl_user set password='75832dd7fb530fc7f574d61d49cadf20rF86+JEaDx02'  where username='admin' and usertype='0'; "
-bash: psql: command not found
[gandalf@VRM01 ~]$ su - root
Password:
Last login: Thu Oct 10 14:01:01 CST 2024
VRM01:~ #
VRM01:~ # psql -U galax vrm -c "update sm.tbl_user set password='75832dd7fb530fc7f574d61d49cadf20rF86+JEaDx02'  where username='admin' and usertype='0'; "
Password for user galax:
UPDATE 1
VRM01:~ # timed out waiting for input: auto-logout
[gandalf@VRM01 ~]$ ^C
^C
[gandalf@VRM01 ~]$ exit
logout

执行完毕重新登录平台

另附加官方操作步骤留存（FCV忘记admin密码步骤）

步骤一、【重要】重置密码前，检查HA是否正常，如果有HA异常，需要先解决HA异常问题

/opt/dfv/oam/oam-u/ha/ha/module/hacom/script/status_ha.sh

或者

/opt/dfv/oam/oam-u/ha/ha/module/hacom/tools/ha_client_tool --gethastatus

如图：出现abnormal或者excption，说明服务异常，需要先修复

解决方案：常见fce_gaussdb异常重建案例

https://3ms.huawei.com/km/groups/3949218/blogs/details/14407365

步骤二、【可选】获取数据库的guassdba密码

1、开局安装阶段输入的公共密码，即安装阶段BMC的fc2mgmt用户密码

2、如果不记得密码，登陆FCV执行以下命令获取

python -c "import kmc.kmc as K;import os;os.environ['KMC_DATA_USER']='gaussdba';print(K.API().decrypt(0,'$(cat /opt/huawei/fce/runtime/security/priv/gaussdb.conf |grep ^gaussdba= |awk -F '=' '{print $2}')'))"

步骤三、如果忘记admin密码，还记得secadmin或其他用户登陆密码，按照以下流程重置；

如果是其他用户密码忘记，同理替换即可

1、进入数据库

su - gaussdba -s /bin/bash

zsql gaussdba/'公共密码'@127.0.0.1:1888

2、查询密码和密钥，找到一个能web页面的账号(如secadmin），复制他的加密后的密码

select user_name,password from framework.IAM_ACCOUNT where user_name='secadmin';

3、用第二步复制的密钥去覆盖admin账号的密码

update framework.IAM_ACCOUNT set password='复制的密码' where user_name='admin';

4、commit;命令提交更改，更新数据