Update Encrypted Passwords
Pulse provides encryption option for modifying stored passwords in application configuration files, here are some use-cases and steps to perform encryption with deployment:
Encrypt and Update Pulse UI password
- Run following command to encrypt a new password.
[root@pulse:~ (ad-default)]$ accelo admin encrypt
Enter the string to encrypt: : **********█
✔ Enter the string to encrypt: : **********█
ENCRYPTED: 0NtnkNHV+TbRlwpJC4uokg==
- Copy the encrypted password hash and replace password in file config/acceldata_clustername.conf under the following config block:
appusers = [
{
name = "<username>"
password = "<password>"
role = "admin"
}
]
The above code block is a representation. Your code block must have the allocated name and password.
- Save and push config changes.
[root@pulse:~ (ad-default)]$ accelo admin database push-config
✔ Is the 'Database Service' up and running? [y/n]: : y█
- Log into Pulse UI using updated password.
Similar actions must be used to alter and encrypt passwords stored in the config/acceldata_clustername.conf, work/clustername/vars.yml, and work/clustername/override.yml file.
Encrypt and Update Passphrase for GraphQL SSL Configuration
You can encrypt and update a passphrase used for GraphQL SSL configuration.
- Run the following command to encrypt a new passphrase.
accelo admin encrypt
Enter the string to encrypt: : **********
✔ Enter the string to encrypt: : **********
ENCRYPTED: <encrypted-password-string>
- Add the encrypted passphrase string to the ad-core.yml file in the ad-graphql section.
SSL_PASSPHRASE_ENCRYPTED: true # set this to true to enable the use of encrypted passphrase
SSL_PASSPHRASE = <encrypted-passphrase-string>
Replace <encrypted-password-string> with your actual encrypted password value.
Encrypt and Update LDAP Bind Password
You can encrypt and update the LDAP password in the ldap.conf file for secure connection.
- Run following command to encrypt a new password.
accelo admin encrypt
Enter the string to encrypt: : **********
✔ Enter the string to encrypt: : **********
ENCRYPTED: <encrypted-password-string>
- Add the encrypted password string and set encryptedPassword=true in the ldap.conf file to enable secure authentication.
encryptedPassword = true # set this to true to enable the use of encrypted password
bindPW = <encrypted-password-string>
Replace <encrypted-password-string> with your actual encrypted password value.
- Run the following command to push the changes to the database.
accelo admin database push-config
