Data Governance Administrator Guide > Monitoring Axon > PostgreSQL Database Service User Passwords

PostgreSQL Database Service User Passwords

Your database administrator might modify a database user password according to the security policies of your organization. After your database administrator modifies the password, you must update the password in Axon configuration to connect to the database.

Perform the following task to modify and encrypt a database user password, and update the password in the Axon configuration:

1. Back up the PostgreSQL database.

See Back Up and Restore Database for more information.

2. Modify the database user password.
3. Encrypt the modified database user password.
4. Save the encrypted password in a .conf file according to your requirement.
5. Update the Axon configuration with the modified user password.

The following table lists the databases for which the database administrator can modify the password:

Service	Database	Database User	Configuration Parameter
Axon Core	axon	axon	DB_PWD
Bulk Upload	axon_bulkupload	bulkupload	BULKUPLOAD_DB_PWD
Unison	unison	axon_unison	UNISON_DB_PWD
Change Request	axon_changerequest	changerequest	CHANGEREQUEST_DB_PWD
Workflow Service	camunda	camunda	CAMUNDA_PWD
Value List	axon_data	axon_data	VALUELIST_PWD
Data Marketplace	marketplace	marketplace	MARKETPLACE_PWD
Document Upload	axon_docupload	docupload	DOCUPLOAD_DB_PWD
Notification	axon_notification	notification	NOTIFICATION_DB_PWD
Segmentation	segmentation	segmentation	SEGMENTATION_PWD

Update PostgreSQL Database Service User Password

You can update the PostgreSQL database service user password in the Axon configuration. You must enter database password to access PostgreSQL database.

1. Run the following command to define the Axon environment variable so that the Linux system can access the Axon resources at the correct location:

source<INSTALLATION_DIR>/scripts/exportEnv.sh

2. Run the following command to log in the database for which you want to modify the user password:

<INSTALLATION_DIR>/axonhome/third-party-app/postgresql/bin/psql -U <DB_User> -d <Database> -h 127.0.0.1

Enter the existing password to access the PostgreSQL database service. If you do not know the existing password, contact Informatica Global Customer Support for assistance.

For example, to access the Bulk Upload database, run the following command:

<INSTALLATION_DIR>/axonhome/third-party-app/postgresql/bin/psql -U bulkupload -d axon_bulkupload -h 127.0.0.1

If you have deployed the database on an external node, see Access Databases on External Nodes to access the database console and log in to the database as an administrator or database user, and then continue to change the password.

3. To modify the PostgreSQL database service password, run the following commands and enter the new password of the database:

axon=> \password
Enter new password:
Enter it again:
axon=> \q

For example, to modify the password of the Bulk Upload database, run the following command and enter the new password:

axon_bulkupload=> \password
Enter new password:
Enter it again:
axon_bulkupload=> \q

4. To encrypt the modified password, run the following command:

<INSTALLATION_DIR>/axonhome/third-party-app/php/bin/php <INSTALLATION_DIR>/axonhome/axon/bin/console axon:encrypt <password>

For example, to encrypt the modified password of the Bulk Upload service, run the following command:

<INSTALLATION_DIR>/axonhome/third-party-app/php/bin/php/console axon:encrypt <BULKUPLOAD_DB_Password>

5. Enter the encrypted password in the .conf file.

Note: Enter the password in the .conf file in a specific format. You can refer the password.conf file at the following location:

<INSTALLATION_DIR>/config/password.conf

Use the following required format:

For example, enter the encrypted password of the Bulk Upload database user in the following format in the .conf file:

BULKUPLOAD_DB_PWD=<encrypted BULKUPLOAD_DB_Password>

6. To update PostgreSQL database service with the modified user password, go to the <INSTALLATION_DIR>/bin/ directory, and run the following command:

sh changeDBPassword.sh <path to your .conf file>

To maintain data security, make sure that only authorized users can modify the PostgreSQL database service user passwords.

After you update the user password, restart the Workflow service. To stop the running Workflow service and start it again, go to the <INSTALLATION_DIR>/axonhome/third-party-app/scripts directory in the Linux environment, and run the following command:

sh camunda restart