IBM Support

QRadar SOAR: Upgrade fails when the postgres users is not permitted a log in shell

Troubleshooting


Problem

The upgrade of QRadar SOAR from 50.0.x/50.1.x/50.2.x to 51.0.0.x might fail because the file, /etc/passwd was changed to stop the postgres user from being able to log in to a shell.

Symptom

The upgrade output shows an error such. The upgrade failed.

Installing packages...
Backing up elasticsearch configuration files...
Upgrading IBM Security SOAR...
Upgrading Postgres to 14...
Updating Function res_sha256...
Stopping postgresql-12...
Initialising postgresql-14...
Stopping services...
Checking upgrade...
Installing pgcrypto extension...
2023-11-21 06:53:10.568 GMT [78025] LOG:  skipping missing configuration file "/var/lib/pgsql/14/data/postgresql.auto.conf"
pg_ctl: directory "/var/lib/pgsql/14/data" is not a database cluster directory
psql: error: connection to server on socket "/var/run/postgresql/.s.PGSQL.5432" failed: No such file or directory
	Is the server running locally and accepting connections on that socket?
2023-11-21 06:53:10.636 GMT [78037] LOG:  skipping missing configuration file "/var/lib/pgsql/14/data/postgresql.auto.conf"
pg_ctl: directory "/var/lib/pgsql/14/data" is not a database cluster directory
Rolling back because stopping Postgres 12 failed
Please check /usr/share/co3/logs/postgresql_12_to_14_2023-11-21_06:50:28.log for further information
Failed to upgrade IBM Security SOAR
To roll back the installation, run the command: sudo bash /crypt/resRollbackServerUpgrade /crypt/db_restore_points/before-upgrade-51.0.0.0.9335-20231114234143 7

Document Location

Worldwide


[{"Type":"MASTER","Line of Business":{"code":"LOB77","label":"Automation Platform"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSA230","label":"IBM Security QRadar SOAR"},"ARM Category":[{"code":"a8m0z000000cw4bAAA","label":"Resilient Core"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]

Log InLog in to view more of this document

This document has the abstract of a technical article that is available to authorized users once you have logged on. Please use Log in button above to access the full document. After log in, if you do not have the right authorization for this document, there will be instructions on what to do next.

Document Information

More support for:
IBM Security QRadar SOAR

Component:
Resilient Core

Software version:
All Versions

Document number:
7080121

Modified date:
26 November 2023

UID

ibm17080121

Manage My Notification Subscriptions