IBM Support

QRadar: The use of changePasswd.sh -A -e -V can cause issues with Postgresql (Updated)

Troubleshooting


Problem

Using /opt/qradar/support/changePasswd.sh -A -e -V , can cause issues with the postgresql user database in QRadar versions 7.3.1. NOTE: Please Refer to APAR IJ05415 for updates on this issue. https://www-01.ibm.com/support/entdocview.wss?mynp=OCSSBQAC&mync=E&cm_s…

Symptom

NOTE: Please Refer to APAR IJ05415 for updates on this issue.

Look in /var/log/qradar.error for similar messages.


Mar 27 16:22:16 ip-191-172 ecs-ep[24937]: Mar 27, 2018 4:22:16 PM org.postgresql.Driver connect
Mar 27 16:22:16 ip-191-172 ecs-ep[24937]: SEVERE: Connection error:
Mar 27 16:22:16 ip-191-172 ecs-ep[24937]: org.postgresql.util.PSQLException: FATAL: password authentication failed for user "qradar"
Mar 27 16:22:16 ip-191-172 ecs-ep[24937]: at org.postgresql.core.v3.ConnectionFactoryImpl.doAuthentication(ConnectionFactoryImpl.java:438)
Mar 27 16:22:16 ip-191-172 ecs-ep[24937]: at org.postgresql.core.v3.ConnectionFactoryImpl.openConnectionImpl(ConnectionFactoryImpl.java:222)
Mar 27 16:22:16 ip-191-172 ecs-ep[24937]: at org.postgresql.core.ConnectionFactory.openConnection(ConnectionFactory.java:49)
Mar 27 16:22:16 ip-191-172 ecs-ep[24937]: at org.postgresql.jdbc.PgConnection.<init>(PgConnection.java:194)
Mar 27 16:22:16 ip-191-172 ecs-ep[24937]: at org.postgresql.Driver.makeConnection(Driver.java:431)
Mar 27 16:22:16 ip-191-172 ecs-ep[24937]: at org.postgresql.Driver.connect(Driver.java:247)
Mar 27 16:22:16 ip-191-172 ecs-ep[24937]: at java.sql.DriverManager.getConnection(DriverManager.java:675)
Mar 27 16:22:16 ip-191-172 ecs-ep[24937]: at java.sql.DriverManager.getConnection(DriverManager.java:258)
Mar 27 16:22:16 ip-191-172 ecs-ep[24937]: at com.q1labs.sem.magi.contrib.ModelPersister.getConnection(ModelPersister.java:753)
Mar 27 16:22:16 ip-191-172 ecs-ep[24937]: at com.q1labs.sem.magi.contrib.ModelPersister.processCurrentTransaction(ModelPersister.java:516)
Mar 27 16:22:16 ip-191-172 ecs-ep[24937]: at com.q1labs.sem.magi.contrib.ModelPersister.processCommands(ModelPersister.java:417)
Mar 27 16:22:16 ip-191-172 ecs-ep[24937]: at com.q1labs.sem.magi.contrib.ModelPersister.process(ModelPersister.java:257)
Mar 27 16:22:16 ip-191-172 ecs-ep[24937]: at com.q1labs.sem.magi.contrib.TxStateManager.playCurrent(TxStateManager.java:259)
Mar 27 16:22:16 ip-191-172 ecs-ep[24937]: at com.q1labs.sem.magi.contrib.ModelPersister$Persister.playCurrent(ModelPersister.java:2911)
Mar 27 16:22:16 ip-191-172 ecs-ep[24937]: at com.q1labs.sem.magi.contrib.ModelPersister$Persister.run(ModelPersister.java:2867)

Resolving The Problem

The use of /opt/qradar/support/changePassword.sh is still supported. Due to changes in the structure of QRadar version 7.3.1, the use of the script with options -A, -e or, -V are no longer supported.

Should you use either the -A, -e or, -V options with /opt/qradar/support/changePassword.sh and are seeing an error similar to the symptom message from /var/log/qradar.error, please contact IBM support for a possible workaround.



Where do you find more information?

[{"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"Admin Console","Platform":[{"code":"PF016","label":"Linux"}],"Version":"7.3.1","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
16 June 2018

UID

swg22015111

Page Feedback