WebReports update fails after password change

Info: Configuring the database for the server component, please wait ...
/opt/BESServer/bin/BESAdmin.sh -upgrade
Upgrade completed succesfully!
Info: The database for the server component was configured successfully.
Parameter: #!/bin/sh
Parameter:
Parameter: DB2LIBPATH=:/opt/ibm/db2/V10.5/lib64
Info: Stopping Web Reports service ...
Warning: Unable to stop the service: 'BESWebReportsServer'
Found section: [SoftwareBigFixEnterpriseClientSettingsClient_WebReports_HTTPServer_ServerRootPath] in '/var/opt/BESWebReportsServer/besweb
reports.config'
Found key: value = /var/opt/BESWebReportsServer/wwwroot
Found section: [BESServer_Database_Password] in '/var/opt/BESWebReportsServer/beswebreports.obf'
Found key: value = {aes,1}79GYY7n+JlMhpi3Wu30cBpea7oY9KyQefknpKhk8TiM=
Parameter: #!/bin/sh
Parameter:
Parameter: DB2LIBPATH=:/opt/ibm/db2/V10.5/lib64
Rpm Package Name: BESWebReportsServer-9.5.12.68-rhel.x86_64.rpm
Info: The following component is installed: 'BESWebReportsServer.*x86_64'
Rpm Package Name: BESWebReportsServer-9.5.12.68-rhel.x86_64.rpm
warning: ./repos/BESWebReportsServer-9.5.12.68-rhel.x86_64.rpm: Header V3 RSA/SHA256 Signature, key ID 16055553: NOKEY
Info: The rpm './repos/BESWebReportsServer-9.5.12.68-rhel.x86_64.rpm' was installed successfully.
Info: The configuration file '/etc/init.d/beswebreports_bkp' was created successfully.
Info: The configuration file '/etc/init.d/beswebreports_bkp' was created successfully.
Info: The configuration file '/opt/BESWebReportsServer/bin/WebReportsInitDB.sh' was created successfully.
Info: The configuration file '/opt/BESWebReportsServer/bin/WebReportsInitDB.sh_bkp' was created successfully.
Found section: [SoftwareBigFixEnterprise ServerBESReports] in '/var/opt/BESWebReportsServer/beswebreports.config'
Found key: PDFExe = /var/opt/BESWebReportsServer/BESReportsData/BESExe/wkhtmltopdf.sh
Found section: [SoftwareBigFixEnterprise ServerBESReports] in '/var/opt/BESWebReportsServer/beswebreports.config'
Found key: PDFEnable = 1
/opt/BESWebReportsServer/bin/WebReportsInitDB.sh -upgrade ******** "" ""
Info: Configuring the database for the Web Reports component, please wait ...

ERROR: Unable to connect with the following connection string dbi:DB2:CurrentSchema=DBO;CurrentFunctionPath=DBO;Database=BESREPOR;Protocol
=TCPIP;UID=db2inst1;PWD=******;Hostname=localhost;Port=50000 to create BESREPOR database: [IBM][CLI Driver] SQL30082N  Security processing
 failed with reason "24" ("USERNAME AND/OR PASSWORD INVALID").  SQLSTATE=08001

Above is the relevant install log data.

Prior to this change, as an exercise, the password of db2inst1 had been changed and communication restored by adding the password in plain text in besserver.config - and this restored the value in the config file to:

[Software\BigFix\EnterpriseClient\Settings\Client\_BESServer_Database_Password]
value                          = ""

a) I wonder if the hash value that the install.log mentions

Found section: [BESServer_Database_Password] in '/var/opt/BESWebReportsServer/beswebreports.obf'
Found key: value = {aes,1}79GYY7n+JlMhpi3Wu30cBpea7oY9KyQefknpKhk8TiM=

was not ALSO updated.

b) How can I run this manually. The command in the install.log still fails. Should I try setting the password back to what it was? Or is there a better process.

Thanks.

Hello aixtools,

Please take a look at the following article:
https://www.ibm.com/support/knowledgecenter/en/SSQL82_9.5.0/com.ibm.bigfix.doc/Platform/Installation/c_defining_db_password.html

On UNIX operating systems, this procedure (“Updating a database password for a Server”) does not update the database password for Web Reports; to change it, complete the following steps:

  • Stop the beswebreports service:
    service beswebreports stop

  • Open the configuration file:
    /var/opt/BESWebReportsServer/beswebreports.config

  • Go to [Software\BigFix\Enterprise Server\FillAggregateDB] and set:
    value = "db2newpassword"

  • Start the beswebreports service:
    service beswebreports start

After restart, passwords are obfuscated and substituted again with “” in the configuration files.

Regards,
Vitaliy

Thanks - I’ll try this. Just surprised that everything HAD been working normally. I guess webreports does not login as frequently as bigfix itself - and the server (console, that is) stopped working immediately when the password was changed.

Good to know in any case.

Update: Still cannot run the update command (as it showed itself in the logfile) - I added sh -x to see if I could spot anything useful - which it did not.

[root@t430 ~]# sh -x /opt/BESWebReportsServer/bin/WebReportsInitDB.sh -upgrade
+ DB2LIBPATH=:/opt/ibm/db2/V10.5/lib64
+ LD_LIBRARY_PATH=::/opt/ibm/db2/V10.5/lib64
+ DB2INSTANCE=db2inst1
+ export LD_LIBRARY_PATH
+ export DB2INSTANCE
+ WR_LIBPATH=/var/opt/BESWebReportsServer/BESReportsData
+ export WR_LIBPATH
+ /var/opt/BESWebReportsServer/BESReportsData/InitializeBESReportsDB.sh -upgrade
Use of uninitialized value in subroutine entry at script/InitializeBESReportsDB.pl line 251.

ERROR: Unable to connect with the following connection string dbi:DB2:CurrentSchema=DBO;CurrentFunctionPath=DBO;Database=BESREPOR;Protocol=TCPIP;UID=db2inst1;PWD=******;Hostname=localhost;Port=50000 to create BESREPOR database: [IBM][CLI Driver] SQL30082N  Security processing failed with reason "3" ("PASSWORD MISSING").  SQLSTATE=08001

How do I run the manual update? I’ll be searching, but an answer from someone who knows is appreciated.

update 2: Finally got the console to load (on very slow network).

Before that I could only find, using google and the IBM site for separate searches.
Google only found windows examples - and they merely pointed at executing an exe file
The IBM “product documentation search” returned over 1000 possible hits, the top hits on how to enable logging and most were bigfix 9.2 related.

So, finally, after the console is loaded I try the “take action for manual install” praying for a better link into the documentation.

Below is not what I consider “helpful” - especially since it does not include how to get “install.sh”. HTML navigation (reminds me of the first computer games: you are in a room, it is dark, you trip over something lying on the floor)…

image

So know - even MUCH more than before - a reasonable (concise is good) hint/process would be good.

p.s. I know it is difficult to right documentation - when I had that task it was much easier. It was still a book or a folder. Not “explore” these links.

  • Update 3 - resolution

After the password update - as explained above by @vnovik - THX! - the process is fairly simple.

a) find the install.sh file and run the “entire” update. The product documentation had me thinking there was a seperate file (like there is for webui iirc) that needed to be downloaded, unpacked, etc… So searching locally in the webreports areas I came up blank.

b) So, put your blinders on - and just (re)-run the standard install.sh script the fixlet had previously downloaded and left behind

Last login: Fri Mar 29 07:34:07 2019 from 87.54.50.34
[root@t430 ~]# find / -name install.sh
/home/bigfix/ServerInstaller_9.5.6.63-rhe6.x86_64/install.sh
/home/bigfix/ServerInstaller_9.5.8.38-rhe6.x86_64/install.sh
/var/opt/BESClient/__BESData/BES Support/__Local/Upgrade/ServerInstaller_9.5.12.68-rhe6.x86_64/install.sh
/var/opt/BESWebUI/WebUI/sites/WebUI Patch_12050_22_1543538715/patch-app/node_modules/npm/scripts/install.sh
/opt/ibm/db2/V10.5/.metadata/BASE_CLIENT/install.sh
/opt/ibm/db2/V10.5/.metadata/BASE_DB2_ENGINE/install.sh
[root@t430 ~]# cd /var/opt/BESClient/__BESData/BES Support/__Local/Upgrade/ServerInstaller_9.5.12.68-rhe6.x86_64/
-bash: cd: /var/opt/BESClient/__BESData/BES: No such file or directory
[root@t430 ~]# cd "/var/opt/BESClient/__BESData/BES Support/__Local/Upgrade/ServerInstaller_9.5.12.68-rhe6.x86_64/"
[root@t430 ServerInstaller_9.5.12.68-rhe6.x86_64]# ls
bin  config  install.sh  license  repos
[root@t430 ServerInstaller_9.5.12.68-rhe6.x86_64]# ./install.sh upgrade
The correct syntax is: ./install.sh [ -f <input_response_file> ] [ -g <output_response_file> ] [ -upgrade ] [ -reuseDb ] [ -opt <key_name>=<key_value> ]...
        -f <input_response_file>: Specifies the full path and the file name of the response file to use.
        -g <output_response_file>: Generates a response file.
        -upgrade: Runs the script in upgrade mode.
        -reuseDb: Allows to use an existing database
        -opt <key_name>=<key_value>: Allows to specify a silent option (it overrides the response file option).
[root@t430 ServerInstaller_9.5.12.68-rhe6.x86_64]# ./install.sh -upgrade
Welcome to the upgrade of IBM BigFix version 9.5.12.68
Info: Stopping server services ...
Info: Stopping WebUI service ...
Info: Configuring the database for the server component, please wait ...
Info: The database for the server component was configured successfully.
Info: Stopping the client service ...
Info: The rpm './repos/BESAgent-9.5.12.68-rhe6.x86_64.rpm' was installed successfully.
Info: Stopping Web Reports service ...
Info: Configuring the database for the Web Reports component, please wait ...
Info: The database for the Web Reports component was configured successfully.
Redirecting to /bin/systemctl status iptables.service
Unit iptables.service could not be found.
Info: The service 'BESRootServer' started successfully.
Info: The service 'BESFillDB' started successfully.
Info: The service 'BESGatherDB' started successfully.
Info: The service 'BESClient' started successfully.
Info: The service 'BESWebReportsServer' started successfully.
Info: The service 'BESWebUI' started successfully.
The 'IBM BigFix' upgrade completed successfully.
[root@t430 ServerInstaller_9.5.12.68-rhe6.x86_64]#

Hope this helps someone in the future!

1 Like