Managing Account Passwords

Scenarios

The resources displayed on the account management page are synchronized from Resource Management and Application Management. You can use Import Account to manage host accounts and passwords online, use Synchronize Account to synchronize new host accounts, use View Account Password to view host accounts and passwords, and use Reset Password to reset host passwords.

• Import Account: Account management enables online hosting of host accounts and passwords. You can import the initial passwords of host accounts using an Excel file. After the import, you can click View Account Password to view the account passwords online.
• Synchronize Account: If you have added a host account on the OS, select the host on the Account Management page and click Synchronize Account to synchronize the new OS account. Note: If you want to change the password of the new account, configure the account in the account baseline. (Ensure that the host is in the baseline.)
• View Account Password: You can view the account passwords of resources that are hosted online and resources with the password change policy enabled. Note: Only the account passwords of normal accounts and imported accounts can be obtained.
• Reset Password: This function will reset the passwords of all accounts (except the imported accounts) in the successful state, and the change is irreversible. After the password is reset, you can view the password reset result on the View Account Password page.

Precautions

• For imported accounts for ECSs, RDS for MySQL DB instances, and GaussDB instances, they will not be managed and their passwords will not be changed. To automatically manage the imported accounts, you can modify the global baseline or create an account baseline to add the accounts. Then, the system will manage the accounts immediately.
• The imported accounts for DCS and DMS instances are not managed for password change. That is, these accounts' passwords cannot be automatically changed.

Importing an Account

1. Log in to COC.
2. In the navigation pane on the left, choose Resource O&M > Automated O&M.
3. In the Routine O&M area, and click Account Management.
4. Choose Accounts > By Resource or By Application.
   • By Resource applies to all purchased host instances.
   • By Application applies to purchased hosts that have been bound to an application. If you select By Application, you need to select the target application or component.

5. Select a resource type.

   By default, Elastic Cloud Server (ECS) is selected.

6. Click Import Account.
   • Upload File: Add the host account and password information in an Excel file. You can only upload Excel files. The number of accounts cannot exceed 500, and the file size cannot exceed 1 MB.
     1. Click download template and complete the downloaded template.
     2. Click Upload File to add the completed excel file.

        Table 1 Account template parameters

        Parameter	Description	Example Value
        Host resource ID	Enter the resource ID. You can obtain the resource ID from the Name/ID column in the resource list.	-
        Account Type	Select an account type based on the type of the imported resource.	Linux
        Account	Enter the name of the account to be imported. The account name can contain 1 to 64 characters.	root
        Account Class	There are two options: Normal and Privileged. The details are as follows: Normal: Read-only account. Such accounts only have the permission to view related resources or data, and cannot perform write operations like modifying, deleting, or adding resources. Privileged: non-read-only account. Such accounts have operation permissions beyond the read-only scope, and can modify resource configurations, add or delete data, and perform other write operations.	Normal
        Account Password	Enter a password of the account. The password can contain 8 to 64 characters.	-

     3. Click Import.

        The account is imported.

Synchronizing an Account

Currently, only accounts for ECSs, RDS DB instances, and GaussDB instances can be synchronized.

1. Log in to COC.
2. In the navigation pane on the left, choose Resource O&M > Automated O&M.
3. In the Routine O&M area, and click Account Management.
4. Choose Accounts > By Resource or By Application.
   • By Resource applies to all purchased host instances.
   • By Application applies to purchased hosts that have been bound to an application. If you select By Application, you need to select the target application or component.

5. Select a resource type.

   By default, Elastic Cloud Server (ECS) is selected.

6. Select the resources whose accounts need to be synchronized and click Synchronize Account.

   The account is synchronized.

Viewing the Account Password

You can only query the account and password for one host at a time. Ensure that the password change status of the target host account is Succeeded, or that the password change failure cause is that the target account is not managed for password change. Otherwise, the password may fail to be obtained. If password change status is Failed, rectify the fault based on the failure cause.

• RDS for MySQL and GaussDB host password change conditions: The account on the host OS is the same as that in the bound account baseline.
• Conditions for password change of an ECS that runs the Linux OS:
  • The resources status of the host is Running.
  • The UniAgent status of the host is Running and the UniAgent version is 1.1.5 or later.
  • The account on the host OS is the same as that in the bound account baseline.
• Conditions for changing the password of an added host: The password change policy has been enabled.
• Conditions for periodic password change of a managed host: The password change task has been bound to the host.

1. Log in to COC.
2. In the navigation pane on the left, choose Resource O&M > Automated O&M.
3. In the Routine O&M area, and click Account Management.
4. Choose Accounts > By Resource or By Application.
   • By Resource applies to all purchased host instances.
   • By Application applies to purchased hosts that have been bound to an application. If you select By Application, you need to select the target application or component.

5. Select a resource type.

   By default, Elastic Cloud Server (ECS) is selected.

6. Locate the target resource and click View Account Password in the Operation column.
7. Locate the target resource and click Obtain Account Password in the Operation column.

   If no data is displayed on the Password Change Details page, check whether the host is bound to a component. If yes, check whether the automatic management policy of the bound component baseline or of the component dimension is enabled. If the host is not bound to a component, check whether the automatic management policy of the global dimension is enabled.

Resetting a Password

1. Log in to COC.
2. In the navigation pane on the left, choose Resource O&M > Automated O&M.
3. In the Routine O&M area, and click Account Management.
4. Choose Accounts > By Resource or By Application.
   • By Resource applies to all purchased host instances.
   • By Application applies to purchased hosts that have been bound to an application. If you select By Application, you need to select the target application or component.

5. Select a resource type.

   By default, Elastic Cloud Server (ECS) is selected.

6. Locate the target resource and choose More > Reset Password in the Operation column.
7. Click OK.

   The password reset task is complete.