Skip to content

Commit 5334512

Browse files
committed
DOC-5620 Add detailed instructions to update Active-Active DB admin credentials
1 parent d925e7a commit 5334512

File tree

1 file changed

+35
-3
lines changed

1 file changed

+35
-3
lines changed

content/operate/rs/security/access-control/manage-passwords/active-active-admin-credentials.md

Lines changed: 35 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -10,13 +10,45 @@ linkTitle: Update Active-Active admin credentials
1010
weight: 90
1111
---
1212

13-
Active-Active databases use administrator credentials to manage operations.
13+
Active-Active databases use administrator credentials to manage operations. When you change the administrator password on clusters with Active-Active databases, you must update the Active-Active database configuration to prevent authentication failures during Active-Active operations and synchronization.
1414

15-
To update the administrator user password on a cluster with Active-Active databases:
15+
To update the administrator password on a cluster with Active-Active databases:
1616

1717
1. From the user management page, update the administrator user password on the clusters you want to update.
1818

19-
1. For each participating cluster _and_ each Active-Active database, update the admin user credentials to match the changes in step 1.
19+
1. Run `crdb-cli crdb list` to find the `CRDB-GUID` that uniquely identifies each Active-Active database and the fully qualified domain names (`FQDN`) of each participating cluster:
20+
21+
```sh
22+
crdb-cli crdb list
23+
```
24+
25+
Example output:
26+
27+
```sh
28+
CRDB-GUID NAME REPL-ID FQDN
29+
4053a0dd-a4a5-4f38-b135-75b7a2dc7331 my-aa-db 1 fqdn1.example.com
30+
4053a0dd-a4a5-4f38-b135-75b7a2dc7331 my-aa-db 2 fqdn2.example.com
31+
```
32+
33+
1. Update the Active-Active database credentials using the [`crdb-cli crdb update`]({{< relref "/operate/rs/references/cli-utilities/crdb-cli/crdb/update" >}}) command:
34+
35+
```sh
36+
crdb-cli crdb update \
37+
--crdb-guid <CRDB-GUID> \
38+
--credentials id=<REPL-ID-1>,username=<admin-username>,password=<FQDN-1-password> \
39+
--credentials id=<REPL-ID-2>,username=<admin-username>,password=<FQDN-2-password> \
40+
--force
41+
```
42+
43+
Replace the following values:
44+
45+
- `<CRDB-GUID>`: The `CRDB-GUID` from the `crdb-cli crdb list` output
46+
47+
- `<cluster-admin-username>`: The administrator username for the clusters
48+
49+
- `<REPL-ID-1>` and `REPL-ID-2`: The `REPL-ID` for the corresponding FQDNs
50+
51+
- `<FQDN-1-password>` and `<FQDN-2-password>`: The current admin passwords for each cluster
2052

2153
{{<warning>}}
2254
Do not perform any management operations on the databases until these steps are complete.

0 commit comments

Comments
 (0)