Changing the standard Jiwa SQL Login and Report SQL Login Users

It is standard practice for production environments to change the standard JiwaUser and JiwaReports to unique values in order to secure the database. What is the process for changing these users details?

 

 

Obtain known working values from another database on the same server, and then update HR_Staff in the new database with those.

  1. Create SQL logins on production database. Run the following script against the master database to create the SQL logins.

    CREATE LOGIN JiwaLogin WITH Password = 'JiwaApplicationLogin123' CREATE LOGIN ABC_JiwaUser WITH Password = 'JiwaFinancials123' CREATE LOGIN ABC_JiwaReports WITH Password = 'JiwaFinancials123'
  2. Create a new Jiwa demonstration database called JiwaDemo using the unique login details.

    Snag_b55873ab.png
  3. Run the following script on the newly created JiwaDemo database.

  4. SELECT Username, SQLLogin, SQLPassword, ReportSQLLogin, ReportSQLPassword, SQLLoginLastSavedDateTime, ReportsLoginLastSavedDateTime FROM HR_Staff
  5. Then use the returned values for the 'Admin' user to construct the query below, which needs to be run against the production database. Note that the date values are used as "salt" in password generation, hence why they are required also for successful login validation.

    UPDATE HR_Staff SET SQLLogin = 'A*** UPDATE HR_Staff SET SQLPassword = 'B***' UPDATE HR_Staff SET ReportSQLLogin = 'C***' UPDATE HR_Staff SET ReportSQLPassword = 'D***' UPDATE HR_Staff SET SQLLoginLastSavedDateTime = 'E***' UPDATE HR_Staff SET ReportsLoginLastSavedDateTime = 'F***'
  6. Finally run the necessary permissions on the production database.