Changing User Passwords in the Database

If an admin user forgets his/her password, he/she cannot retrieve it using the Management Console. In such a scenario, he/she has to change the password by running the chpasswd.sh script located in the <PRIVATE_PAAS_HOME>/bin directory on the machine that hosts the Carbon server.

Shut down the Carbon instance before executing the above script.

Prerequisites

Install Apache Ant on your machine.
If you are using MySQL, copy the MySQL JAR to the <PRIVATE_PAAS_HOME>/repository/lib directory. The latter is required because the script does not communicate with the libraries in the <PRIVATE_PAAS_HOME>/repository/components/lib directory.

Required information

Provide the information given below to change a user's password:

Carbon database URL: By default, Private PaaS is shipped with H2 database so the default URL is jdbc:h2:repository/database/WSO2CARBON_DB;DB_CLOSE_ON_EXIT=FALSE.

This URL may change if a different database was specified during the installation. Then the URL will be in the form of jdbc:h2:<PRIVATE_PAAS_HOME>/repository/database/WSO2CARBON_DB.
Database driver class: For the default H2 database, the driver will be automatically picked up by the system. If a different database is used, the driver class needs to be specified.
Database's username and password: For the default H2 database, the default username and password will be used by the system. However, if a different username/password is used, you are required to reset the admin password.
Username and new password of the user whose password is to be changed: If you do not provide these as command line arguments, you will be prompted for it during execution.

The command line options available for chpasswd is as follows:

If the database path includes directory names with spaces, the whole URL needs to be included within quotations.

Command Line Option	Description	Mandatory?
`--db-url`	The database URL	Yes
`--db-driver`	The database driver class	No
`--db-username`	The username for the database	No
`--db-password`	The password for the database	No
`--username`	The username of the user whose password needs to be changed. If this is not given, you will be prompted for this field later.	No
`--new-password`	The new password of the user whose password needs to be changed. If this is not given, you will be prompted for this field later.	No

Changing the password on H2 DB

The Linux command to change the password, if you are using the H2 database will be as follows:

chpasswd --db-url "<H2-DATABASE-URL>"

For example:

chpasswd --db-url "jdbc:h2:$CARBON_HOME/repository/database/WSO2CARBON_DB"

Changing the password on MySQL DB

The Linux command to change the password, if you are using a MySQL database will be as follows:

./chpasswd.sh --db-driver com.mysql.jdbc.Driver --db-username <USERNAME> --db-password <PASSWORD> --username <ADMIN-USERNAME> --new-password <ADMIN-NEW-PASSWORD> --db-url <MYSQL-DB-URL>

For Example:

./chpasswd.sh --db-driver com.mysql.jdbc.Driver --db-username root --db-password mysql --username admin --new-password abc123 --db-url jdbc:mysql://10.134.130.126:3306/userstore