Log in to the ESC VM.

$ ssh USERNAME@ESC_IP

Switch to the admin user.

[admin@esc-ha-0 esc]$ sudo bash
[sudo] password for admin: 

Load the ConfD CLI:

$ /opt/cisco/esc/confd/bin/ssh admin@localhost -p 2024

Set the new admin password:

$ configure
$ set aaa authentication users user admin password <new password>

Save the changes.

$ commit

Log in to ESC VM.

 $ ssh USERNAME@ESC_IP

To update or generate a random password, use the following command:

/usr/bin/pwqcheck 
/usr/bin/pwqgen

Log in to ESC VM.

Switch to the root user.

To update the default admin password or randomly generate a password, use one of the following method:

• Using escadm utility:

  To update the default admin password (admin/********):

  
  [root@anyname-v44-52 admin]# sudo escadm portal set --username admin --password ********
  Successfully updated password for username admin

  To generate a random password:

  
  [root@anyname-v44-52 admin]# sudo escadm portal set --username admin
  Would you like to use the generated password: "Accent5omit&Wide"?[y|n]y
  Successfully updated password for username admin

  The --must_change variable will ask the user to change their password at the next login.

  The --must_change variable is not applicable for REST users.

  
  [root@anyname-v44-52 admin]# sudo escadm portal set --username admin --must_change
  Would you like to use the generated password: "Rainy4Dozen&Behave"?[y|n]y
  Successfully reset password for username admin. User must change the password at the next login.

• To reset to a specific password:

  
  [root@anyname-v44-52 admin]# sudo escadm portal set --username admin --password ******* --must_change
  Successfully reset password for username admin. User must change the password at the next login.

• Using the bootvm command line:

  --user_portal_pass admin:<new password>

• Using the ESC Portal:

  1. Log in to ESC portal using your username and password.

  2. Choose Accounts Setting on the Navigation menu.

  3. Enter the old password in the Old password field, then enter a new password in the New Password and Confirm Password fields.

  4. Click Update Password.

Add a PAM user, by using the following command:

sudo passwd pamuser
             Changing password for user pamuser.
             New password:
             Retype new password:
             passwd: all authentication tokens updated successfully.

Add a PAM user to an ESC service/component group, by using the following command:

sudo usermod -a -G <ESC Service Group> pamuser

Log in to ESC VM.

To replace the existing password with a new one, use one of the below options:

• Using the escadm tool from the ESC VM CLI, you can generate a random password:

  
  [root@test-v44-52 admin]# escadm rest set --help
  usage: escadm rest set [-h] [-v] --username USERNAME [--password PASSWORD]
   
  optional arguments:
    -h, --help           show this help message and exit
    -v, --v, --verbose   show verbose output
    --username USERNAME
    --password PASSWORD  new password or use randomly generated password if no
                         password provided

• Using the REST API:

  http://[ESCVM_IP]:8080/ESCManager/v0/authentication/setpassword?userName=admin&password=yourPassword

  or

  https://[ESCVM_IP]:8443/ESCManager/v0/authentication/setpassword?userName=admin&password=yourPassword

Log in to ESC VM.

To set the default ETSI REST username and password, use the following command:

sudo escadm etsi set --rest_user username:password

[admin@xyz-esc-4-4-0-59-keep ~]$ escadm etsi set --help
usage: escadm etsi set [-h] [-v] [--startup {0,1,true,false,manual,auto}]
[--rest_user REST_USER] [--pam_service PAM_SERVICE]

optional arguments:
-h, --help show this help message and exit
-v, --v, --verbose show verbose output
--startup {0,1,true,false,manual,auto}
set to false|0|manual to disable etsi at startup.
--rest_user REST_USER
Set the user for rest. Format username:password
--pam_service PAM_SERVICE
Specify a PAM service to use for authentication. This
will override the rest user. To revert to the using
the rest user for authentication, supply an empty
string.

Editing the Rsyslog file:

• If you haven't specified the log forwarding configuration at the bootup time, you may create a file under /etc/rsyslog.d/ like /etc/rsyslog.d/log-forwarding.conf.
• If you have specified the log forwarding through installation, you may just need to edit the file. The file could be /etc/rsyslog.d/20-cloud-config.conf. In this file, to forward logs to multiple rsyslog servers, edit the following line:

  *.* @[server_ip]:port 

  Note

  Use '@@' before specifying server ip address (if TCP is the protocol used to forward logs to the rsyslog server). Use '@' before specifying server ip address (if UDP is the protocol used to forward logs to the rsyslog server). server_ip can either be ipv4/ipv6 address of the rsyslog server. '[ ]' around the server_ip is required to separate it from ' :port# ', if an ipv6 server address is specified.

Configuring the ESC log file:Configure which ESC log files you want to forward to the rsyslog server:

1. Navigate to /etc/rsyslog.d/ Create or modify a configuration file, such as log-esc.conf. Make a copy of sample log-esc.conf .

2. Specify the following block for every file you want to forward to rsyslog server.

   
   $InputFileName /var/log/esc/escmanager.log
   $InputFileTag esc-manager:
   $InputFileStateFile stat-esc-manager
   $InputFileSeverity info
   $InputRunFileMonitor

   For example:

   $InputFileName /var/log/esc/file1.log
   $InputFileTag file1:
   $InputFileStateFile stat-file1
   $InputFileSeverity info
   $InputRunFileMonitor
   
   $InputFileName /var/log/esc/file2.log
   $InputFileTag file2:
   $InputFileStateFile stat-file2
   $InputFileSeverity info
   $InputRunFileMonitor   

Restart the rsyslog service

# service rsyslog restart 

Configure the server side to receive forwarded logs.

1. On a designated server, go to /etc/rsyslog.conf, and uncomment the lines shown below, depending on if you want to listen to logs from clients based on TCP or UDP:

   
   #$ModLoad imudp
   #$UDPServerRun 514

2. Exit the file. Run this command as the last step.

   sudo service rsyslog restart

   Now, the server is listening for logs on port 514, using TCP/UDP.

Open the NTP configuration file /etc/ntp.conf in a text editor such as vi, or create a new one if it does not already exist:

# vi /etc/ntp.conf

Add or edit the list of public NTP servers. If you don't specify the NTP server through the installation, the file should contain the following default lines, but feel free to change or expand these according to your needs:

server 0.rhel.pool.ntp.org iburst
server 1.rhel.pool.ntp.org iburst
server 2.rhel.pool.ntp.org iburst
server 3.rhel.pool.ntp.org iburst
server <your_ntp_server_ip> iburst

Once you have the list of servers complete, in the same file, set the proper permissions, giving the unrestricted access to localhost only. Make sure those lines are there in your configure file.

restrict default kod nomodify notrap nopeer noquery
restrict -6 default kod nomodify notrap nopeer noquery
restrict 127.0.0.1
restrict -6 ::1

Save all changes, exit the editor, and restart the NTP daemon:

# service ntpd restart

Make sure that ntpd is started at boot time:

# chkconfig ntpd on

The /etc/resolv.conf file contains the configuration for the DNS client (resolver). It typically looks something like this:

search domain.com
nameserver 8.8.4.4

Created by cloud-init on instance boot automatically, do not edit.
;
#Generated by esc-cloud
domain cisco.com
search cisco.com
nameserver 8.8.4.4

You may modify the IP address of the "nameserver" item or add new nameserver records.

search domain.com
nameserver <your_first_dns_ip>
nameserver <your_second_dns_ip>

Restart Network Service.

service network restart 

Add the IP addresses that are not listed in DNS to the /etc/hosts file.

Restart your network for the changes to take effect.

service network restart