You may require Secure Shell (SSH) access to a database for troubleshooting, to view log files, or for other purposes.
Data Management for VMware Tanzu does not permit SSH access to a database by default. To permit a special Data Management for VMware Tanzu-created operating system user to access a database, you or the Provider Administrator must first explicitly enable SSH access to the database.
When you enable SSH access to a databasee, Data Management for VMware Tanzu configures access to the database for an OS user named db-admin
(created by Data Management for VMware Tanzu) and generates a new password for this user.
Data Management for VMware Tanzu assigns the db-admin
user read-only permission to log files residing on the database.
db-admin
user must not execute any command that will impact or interfere with services running on the database.
You share the management of SSH access to a database for the db-admin
OS user with the Provider Administrator.
db-admin
user password. If the password has changed,
Connecting to a database with an SSH Client describes how to obtain the current password.
Before you enable SSH access to a database, ensure that:
Perform the following procedure to enable SSH access to a database:
Select Databases from the left navigation pane.
This action displays the Databases view, a table that lists the provisioned databases.
Examine the databases listed in the table, identify the database for which you want to enable SSH access, and navigate to that table row.
Click the database VM Name.
The database information Details tab displays.
Locate the VM Admin User Details section of the pane, click ACTIONS, and select Enable SSH Access from the drop down menu.
The Enable DB VM SSH dialog displays.
Click CONFIRM.
Data Management for VMware Tanzu initiates the task, generating an operation of type ENABLE_DB_VM_SSH.
Monitor the progress of the task in the Operations tab or in the Operations view:
After you enable SSH access to a database, the database allows SSH connections from clients running on any hosts with connectivity to the Service Network.
You obtain the IP address and FQDN of the database from the Server Information section of the Details tab:
You obtain the login credentials for the db-admin
OS user from the VM Admin User Details section of the Details tab:
Recall that the db-admin
user should not execute any commands that impact running services on the database.
You use the DB IP Address or DB FQDN and the Org Admin User and Org Admin Password credentials to ssh
into the database. For example:
user@host$ ssh db-admin@DBFQDN
password:
When you disable SSH access to a database, Data Management for VMware Tanzu removes access to the database from the db-admin
user.
db-admin
user at any time.
Before you disable SSH access to a database, ensure that:
Perform the following procedure to disable SSH access to a database:
Select Databases from the left navigation pane.
This action displays the Databases view, a table that lists the provisioned databases.
Examine the databases listed in the table, identify the database for which you want to disable SSH access, and navigate to that table row.
Click the database VM Name.
The database information Details tab displays.
Locate the VM Admin User Details section of the pane, click ACTIONS, and select Disable SSH Access from the drop down menu.
The Disable DB VM SSH dialog displays.
Click CONFIRM.
Data Management for VMware Tanzu initiates the task, generating an operation of type DISABLE_DB_VM_SSH.
Monitor the progress of the task in the Operations tab or in the Operations view:
SSH access to a database is disabled by default. After you enable SSH access to a database, Data Management for VMware Tanzu deactivates the access automatically after eight hours to enhance security. However, consider the following expected behaviors to understand how this feature works under different circumstances: