PostgreSQL Password Configuration

The following pre-defined Roles (also known as users) are setup in PostgreSQL, these are:

RoleDefault PasswordPassword Stored inPurpose
postgrespostgresPASSWORDS Configurationused to access the PostgreSQL database to obtain status information and for the administration of the PostgreSQL instance
prognosisprognosisPASSWORDS Configurationused to access the PostgreSQL database to store and retrieve data
replicationreplicationPASSWORDS Configurationused for HA replication
sfbuser<concealed>Overridden in irMSMGS.INI fileused to access the PostgreSQL database to obtain Skype for Business data

Initially, these users are set up with the default passwords, these passwords should be changed on each Prognosis Server as soon as possible after installation in order to increase security.

To change the initial default passwords, or to make password changes at any future time, the following steps should be used.

Open the PgAdmin4 tool which can be found in the following folder path on the Prognosis server:

<Prognosis_Home>\PostgreSQL\postgres\runtime\pgAdmin4.exe

Log on to the 'prognosis' database using the 'postgres' user name and password. If this password has not already been changed, use the default 'postgres', otherwise use the current password.

From the Browser navigation panel, click on any of the databases in the local Server Database list, then click on the 'Query Tool' Button.

Enter the following command to modify the 'prognosis' password:

>ALTER ROLE prognosis WITH PASSWORD '<new-password>';

Then hit the 'Execute/Refresh(F5)' button the run the command.

Enter the following command to modify the 'postgres' password.

>ALTER ROLE postgres WITH PASSWORD '<new-password>';

Then hit the 'Execute/Refresh(F5)' button the run the command.

Enter the following command to modify the 'sfbuser' password.

[Optional] This is not recommended, but is available if necessary, as the new password will be stored in clear text in the irMSMGS.INI file, see Step 10.

>ALTER ROLE sfbuser WITH PASSWORD '<new-password>';

Then hit the 'Execute/Refresh(F5)' button the run the command.

Enter the following command to modify the 'replication' password.

>ALTER ROLE replication WITH PASSWORD '<new-password>';

Then hit the 'Execute/Refresh(F5)' button the run the command.

Exit the PgAdmin4 tool.

PASSWORD Configuration

The PASSWORDS Configuration also contains the 'prognosis', 'postgres' and 'replication' passwords, all of which are needed for the database connection. When a password is changed on the PostgreSQL instance, the PASSWORDS Configuration must also be updated so that internal connections will be successful.

The username for these entries cannot be changed.

See PASSWORDS Configuration for PostgreSQL for details.

Update irmsmgs.ini

[Optional] If changing the 'sfbuser' password, not recommended, the SFB Microservices process must also be configured with the new sfbuser password, this is not stored in the standard PASSWORDS Configuration.

To update the new sfbuser password, edit the file <Prognosis_Home>\Server\Configuration\irmsmgs.ini, and modify the line starting with 'envvars=' to include 'POSTGRES_PASSWORD=<new-password> in the comma-separated list of values

[EXE]
envvars="POSTGRES_PASSWORD=<new-password>", ...

Restart the process irMSMGS.EXE using the PROGNOSIS Configuration.

Provide feedback on this article