Resetting SQL Active Directory Password for Insights

News Knowledge Base
1

My SQL password changed for insights DB, how do I reset it?

Resolution:

1-Remove Kerberos Authentication:

Follow these steps to remove Kerberos Authentication:
(Admin rights are required).

  1. Log in as 'ROOT' admin and locate the required files. These files should be located in the '/app/Insight' directory. The installation directory can vary based on your chosen location for installation.
  2. Remove the following files
  1. Access the docker container using the following command:

docker exec -it looker-container bash

  1. To remove files from within the docker container, use the command: rm filename (replace 'filename' with the correct file names to delete).

  1. Next, execute cat /app/refresh-kerberos-ticket.sh. The output should display the script used to update Kerberos settings

  1. Locate the '.kerbvars' file and delete it using the 'rm' command

kb-0EMPa000006ChYo.png999×130 17.6 KB

  1. Finally, restart the Looker container using the following command:

docker restart looker-container

2-Rerun the Preinstallation Tool:

Once Kerberos Authentication is removed, rerun the pre-installation tool on the Insights machine using the new SQL password.

Replace the Kerberos files as instructed in the following:

  1. When using Windows Auth, make sure the SQL server has an SPN entry in Active Directory as per Insights - SQL Server Configuration documentation.
  2. To verify that the SQL server is using Kerberos authentication, run the following command in SQL

SELECT auth_scheme FROM sys.dm_exec_connections WHERE session_id = @@SPID

If the above returns 'SQL', use SQL authentication, however, if it returns 'Kerberos' , it is known that Windows Authentication is used.

  1. If using Kerberos, ensure that the Kerberos files are located in the Insights folder of the Linux machine.
  2. If the Kerberos files are not there, run the Looker Pre-installation tool and copy the Kerberos files generated after selecting Windows Auth for the DB to the Linux machine.

Preinstallation Tool876×282 37.6 KB

  1. Unzip the contents of the file into the Insights folder on the Linux machine and run a "docker restart looker-container" command.

3-Using Windows Active Directory Auth:

When running the preinstallation tool, select the Windows Active Directory Auth option instead of the SQL Server Auth.

This will create multiple kerberos files that need to be moved to Looker.

4-Transfer the new Kerberos Files:

Move the new Kerberos files to Looker using SCP.

This involves overwriting the existing Kerberos files on Looker.

Copy Looker Files to the Insights Linux Machine

Copy the ZIP file to the Insights Linux machine.

Authenticate into your Insights Linux machine.

Open an SCP session and enter a command including the ZIP file path and username and password used as your Insights Linux machine credentials by running the command below:

scp <path-to-Insights_Lookerfile>.zip <user@linuxhostname>:~/

5-Restart Looker:

  1. After the new files have been added restart the Looker container using the following command:

docker restart looker-container