Change Database passoword PSA depends on

[NormanS]

Alright, here is the deal, we where having some security issues, so we hat to change the name of our database.... so now psa wont display anymore, because it has to wrong password stored in the (I assume) "/usr/local/psa/bin/init_conf" file. I was suggested to use this command:

# /usr/local/psa/bin/init_conf --update -passwd newpasswd

like: # /usr/local/psa/bin/init_conf --update -passwd Xlyl (for example)

Now I am having the problem, that the command does not work and i can't change anything in the psa files because thei are in the PSA inviromental language. (I asume the problem can be solved quiet easily)

Any suggestions?

Norman

ps here is the error msg:

ERROR: PleskFatalException
Unable to connect to database: saved admin password is incorrect.

0: common_func.php3:108
psaerror(string 'Unable to connect to database: saved admin password is incorrect.')
1: auth.php3:93

 

[IgorG]

http://kb.odin.com/en/346

 

[NormanS]

Nooo

Please not

This doesn't work, we have tried this several times

Always 1040 Error

 

[IgorG]

Try this:

1. Stop MySQL server.

/etc/init.d/mysqld stop

2. Open up your MySQL configuration file. This file is called my.cnf and is in /etc directory.

3. Add this line into the [mysqld] section:

skip_grant_tables=1

4. Start MySQL server.
/etc/init.d/mysqld start

5. Login to MySQL as admin user

mysql -u admin

6. Run this query :

update mysql.user set password=password('current_password') where user='admin'

Where current_password is the string from this file /etc/psa/.psa.shadow

7. Exit the MySQL console.

8. Stop MySQL sever.

9. Remove the line from /etc/my.cnf

10. Start MySQL.

 

[spid3r1987]

Igor

Just wondering, when using cat /etc/psa/.psa.shadow
is this information we see encrypted?
as i cant just copy it from the file to the command you based above??
can i??

 

[IgorG]

For new installations, the file .psa.shadow no longer contains the administrator's password in the plain-text format. Instead, this file contains an encrypted hash of the password. This improves the security level and prevents attempts to gain the administrative access to Panel by stealing the password. If you upgrade Panel from earlier versions, the password remains in plain text. To learn how to encrypt the administrator's password after the upgrade, see http://kb.odin.com/en/111192.

The new way of storing the administrator's password does not anyhow affect typical commands that used the password. For example, you are free to run "mysql –uadmin –p`cat /etc/psa/.psa.shadow` psa". In case you wish to obtain the plain-text password, use the "/usr/local/psa/bin/admin --show-password" call.

 

[spid3r1987]

For new installations, the file .psa.shadow no longer contains the administrator's password in the plain-text format. Instead, this file contains an encrypted hash of the password. This improves the security level and prevents attempts to gain the administrative access to Panel by stealing the password. If you upgrade Panel from earlier versions, the password remains in plain text. To learn how to encrypt the administrator's password after the upgrade, see http://kb.odin.com/en/111192.

The new way of storing the administrator's password does not anyhow affect typical commands that used the password. For example, you are free to run "mysql –uadmin –p`cat /etc/psa/.psa.shadow` psa". In case you wish to obtain the plain-text password, use the "/usr/local/psa/bin/admin --show-password" call.

i get a response of
# /usr/local/psa/bin/admin --show-password
Unable to connect to database: 1045
when using /usr/local/psa/bin/admin --show-password

 

[IgorG]

Looks like password from /etc/psa/.psa.shadow and for mysql admin user are not identical.

 

[spid3r1987]

Looks like password from /etc/psa/.psa.shadow and for mysql admin user are not identical.

lol pleeeasssee tell me you know how i can fix this lol
i did try changing the admin p/w for mysql...
but how do i change it back :S

 

[IgorG]

I do not understand what is the problem to use provided above instruction and possibility to encrypt/decrypt password described in KB article?

 

[spid3r1987]

followed instructions, its now working
except if i want to encrypt the password i then get an error in phpmyadmin about setup script and no config??

 

[rjmmusic2]

I just ran into this problem and wanted to post a clarification because I just spent two hours banging my head, wondering why it didn't work.

The key here is that the admin password in MySQL needs to be set to the encrypted password from the .psa.shadow file, not your actual Plesk admin password. If you copy the exact text from psa.shadow, it will work.

I hope this saves someone some frustration. In looking at the instructions again, it does in fact say to do this, but the idea of using an encrypted password from the panel as an actual password for the database was so unintuitive to me that I didn't recognize what they were telling me. :-/