# Enabling Encryption in Transit and Password Authentication...Could not update Postgress user password. Exception: Traceback (most recent call last)

**URL:** <https://forum.yugabyte.com/t/enabling-encryption-in-transit-and-password-authentication-could-not-update-postgress-user-password-exception-traceback-most-recent-call-last/2756>\
**Category:** General\
**Created:** [July 1, 2024, 5:54am UTC](https://forum.yugabyte.com/t/enabling-encryption-in-transit-and-password-authentication-could-not-update-postgress-user-password-exception-traceback-most-recent-call-last/2756 "2024-07-01T05:54:19Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![Farrux](https://avatars.discourse-cdn.com/v4/letter/f/dec6dc/32.png) [@Farrux](https://forum.yugabyte.com/u/Farrux)\
**Post date:** [July 1, 2024, 5:54am UTC](https://forum.yugabyte.com/t/enabling-encryption-in-transit-and-password-authentication-could-not-update-postgress-user-password-exception-traceback-most-recent-call-last/2756/1 "2024-07-01T05:54:19Z")

</div>

I want to create a multi-node cluster with RF=3. First I created node server certificates:

> ./bin/yugabyted cert generate\_server\_certs --hostnames=192.168.198.35,192.168.198.36,192.168.198.37

> cp $HOME/var/generated\_certs/192.168.198.35/\* $HOME/yugabyte-2.21.1.0/node1/certs

> ./bin/yugabyted start --secure --advertise\_address=192.168.198.35   
> –base\_dir=/root/node1   
> –cloud\_location=aws.us-east-1.us-east-1a

ERROR:

> YugabyteDB Started  
> \ Enabling Encryption in Transit and Password Authentication…Could not update Cassandra user password. Exception: Traceback (most recent call last):  
> File “/root/yugabyte-2.21.1.0/./bin/yugabyted”, line 4478, in update\_db\_passwords  
> retry\_op\_with\_argument(ycql\_proxy.try\_update\_password, new\_password, timeout=60)  
> File “/root/yugabyte-2.21.1.0/./bin/yugabyted”, line 8501, in retry\_op\_with\_argument  
> raise RuntimeError(“Failed after retrying operation for {} secs.”.format(  
> RuntimeError: Failed after retrying operation for 60.53712773323059 secs.

Please help! How to solve this error? OS is ubuntu 24.04  
Thanks!

---

<div class="post-metadata">

**Author:** ![dorian\_yugabyte](https://yyz1.discourse-cdn.com/flex027/user_avatar/forum.yugabyte.com/dorian_yugabyte/32/206_2.png) [@dorian\_yugabyte](https://forum.yugabyte.com/u/dorian_yugabyte)\
**Post date:** [July 1, 2024, 7:59am UTC](https://forum.yugabyte.com/t/enabling-encryption-in-transit-and-password-authentication-could-not-update-postgress-user-password-exception-traceback-most-recent-call-last/2756/2 "2024-07-01T07:59:51Z")

</div>

Hi @Farrux

Please run the [collect\_logs](https://docs.yugabyte.com/preview/reference/configuration/yugabyted/#collect-logs) command and upload the logs.

---

<div class="post-metadata">

**Author:** ![Farrux](https://avatars.discourse-cdn.com/v4/letter/f/dec6dc/32.png) [@Farrux](https://forum.yugabyte.com/u/Farrux)\
**Post date:** [July 1, 2024, 8:29am UTC](https://forum.yugabyte.com/t/enabling-encryption-in-transit-and-password-authentication-could-not-update-postgress-user-password-exception-traceback-most-recent-call-last/2756/3 "2024-07-01T08:29:47Z")

</div>

Hi @dorian_yugabyte !

> ./bin/yugabyted collect\_logs  
> ERROR: No YugabyteDB node is running in the data\_dir /root/var/data  
> For more information, check the logs in /root/var/logs

> tail /root/var/logs/yugabyted.log  
> [yugabyted generate\_server\_certs] 2024-07-01 13:11:31,230 INFO: | 0.0s | Found directory /root/yugabyte-2.21.1.0/bin for file openssl\_proxy.sh  
> [yugabyted generate\_server\_certs] 2024-07-01 13:11:31,230 INFO: | 0.0s | Found directory /root/yugabyte-2.21.1.0/bin for file yb-admin  
> [yugabyted generate\_server\_certs] 2024-07-01 13:11:31,231 INFO: | 0.0s | Found an existing root certs directory /root/var/generated\_certs/root-ca. Found appropriate files. Using the existing root certs.  
> [yugabyted generate\_server\_certs] 2024-07-01 13:11:31,232 INFO: | 0.0s | ⚠ WARNING: Hostnames 192.168.198.35,192.168.198.36,192.168.198.37 already have their certifcates generated according to root-ca certs database index. Please use the previously generated certs. Skipping these hostnames…  
> [yugabyted collect\_logs] 2024-07-01 13:14:44,178 INFO: | 0.0s | Running yugabyted command: ‘./bin/yugabyted collect\_logs’  
> [yugabyted collect\_logs] 2024-07-01 13:14:44,178 INFO: | 0.0s | cmd = collect\_logs using config file: /root/var/conf/yugabyted.conf  
> [yugabyted collect\_logs] 2024-07-01 13:14:44,178 INFO: | 0.0s | Found directory /root/yugabyte-2.21.1.0/bin for file openssl\_proxy.sh  
> [yugabyted collect\_logs] 2024-07-01 13:14:44,179 INFO: | 0.0s | Found directory /root/yugabyte-2.21.1.0/bin for file yb-admin  
> [yugabyted collect\_logs] 2024-07-01 13:14:44,179 ERROR: | 0.0s | ERROR: No YugabyteDB node is running in the data\_dir /root/var/data  
> For more information, check the logs in /root/var/logs

---

<div class="post-metadata">

**Author:** ![dorian\_yugabyte](https://yyz1.discourse-cdn.com/flex027/user_avatar/forum.yugabyte.com/dorian_yugabyte/32/206_2.png) [@dorian\_yugabyte](https://forum.yugabyte.com/u/dorian_yugabyte)\
**Post date:** [July 1, 2024, 8:41am UTC](https://forum.yugabyte.com/t/enabling-encryption-in-transit-and-password-authentication-could-not-update-postgress-user-password-exception-traceback-most-recent-call-last/2756/4 "2024-07-01T08:41:41Z")

</div>

> [@Farrux](#):
>
> ERROR: No YugabyteDB node is running in the data\_dir /root/var/data

Use the same `--base_dir` that you used to start the cluster.

---

<div class="post-metadata">

**Author:** ![Farrux](https://avatars.discourse-cdn.com/v4/letter/f/dec6dc/32.png) [@Farrux](https://forum.yugabyte.com/u/Farrux)\
**Post date:** [July 1, 2024, 12:43pm UTC](https://forum.yugabyte.com/t/enabling-encryption-in-transit-and-password-authentication-could-not-update-postgress-user-password-exception-traceback-most-recent-call-last/2756/5 "2024-07-01T12:43:15Z")

</div>

Thanks @dorian_yugabyte

> [quote=“dorian\_yugabyte, post:4, topic:2756”]  
> Use the same `--base_dir` that you used to start the cluster.  
> [/quote]

In insecure mode it is working, but in secure mode with the key “–secure” giving this error:

> tail /root/var/data/logs/yugabyted.log  
> \<\<  
> YugabyteDB Started  
> | Enabling Encryption in Transit and Password Authentication…Could not update Postgress user password. Exception: Traceback (most recent call last):  
> File “/root/yugabyte-2.21.1.0/./bin/yugabyted”, line 4468, in update\_db\_passwords  
> retry\_op\_with\_argument(ysql\_proxy.try\_update\_password, new\_password, timeout=60)  
> File “/root/yugabyte-2.21.1.0/./bin/yugabyted”, line 8501, in retry\_op\_with\_argument  
> raise RuntimeError(“Failed after retrying operation for {} secs.”.format(  
> RuntimeError: Failed after retrying operation for 60.53805756568909 secs.

I ran:

> ./bin/yugabyted cert generate\_server\_certs --hostnames=192.168.198.35,192.168.198.36,192.168.198.37

> cp $HOME/var/generated\_certs/192.168.198.35/\* $HOME/var/data/certs

> ./bin/yugabyted start --secure --advertise\_address=192.168.198.35   
> –base\_dir=/root/var/data   
> –cloud\_location=aws.us-east-1.us-east-1a

How to solve this error? Please help!  
Thanks!

---

<div class="post-metadata">

**Author:** ![dorian\_yugabyte](https://yyz1.discourse-cdn.com/flex027/user_avatar/forum.yugabyte.com/dorian_yugabyte/32/206_2.png) [@dorian\_yugabyte](https://forum.yugabyte.com/u/dorian_yugabyte)\
**Post date:** [July 1, 2024, 1:00pm UTC](https://forum.yugabyte.com/t/enabling-encryption-in-transit-and-password-authentication-could-not-update-postgress-user-password-exception-traceback-most-recent-call-last/2756/6 "2024-07-01T13:00:32Z")

</div>

@Farrux please upload the logs like I requested, upload the zip file.

Also, please show the steps you took and guide you followed. Example did you try following this guide [yugabyted reference | YugabyteDB Docs](https://docs.yugabyte.com/preview/reference/configuration/yugabyted/#create-certificates-for-a-secure-local-multi-node-cluster) ?

---

<div class="post-metadata">

**Author:** ![Farrux](https://avatars.discourse-cdn.com/v4/letter/f/dec6dc/32.png) [@Farrux](https://forum.yugabyte.com/u/Farrux)\
**Post date:** [July 1, 2024, 1:22pm UTC](https://forum.yugabyte.com/t/enabling-encryption-in-transit-and-password-authentication-could-not-update-postgress-user-password-exception-traceback-most-recent-call-last/2756/7 "2024-07-01T13:22:09Z")

</div>

> [@dorian\_yugabyte](#):
>
> Also, please show the steps you took and guide you followed. Example did you try following this guide [yugabyted reference | YugabyteDB Docs](https://docs.yugabyte.com/preview/reference/configuration/yugabyted/?_gl=1*pvcs7f*_gcl_au*NTkxNjQzNTE3LjE3MTkyMTAyOTM.#create-certificates-for-a-secure-local-multi-node-cluster) ?

yes!  
Without --secure working, but with it not running.  
As a zip uploading not allowed put screenshots:

 ![image](https://canada1.discourse-cdn.com/flex027/uploads/yugabyte/original/1X/c815c2c7a4d07954bc1f278de22ad5618adbee31.png)

 ![image](https://canada1.discourse-cdn.com/flex027/uploads/yugabyte/original/1X/c0fc49242298b2f7968c18cbd8947b4abed2f313.png)

 ![image](https://canada1.discourse-cdn.com/flex027/uploads/yugabyte/original/1X/b13f17a9d57e5e877e655c0cee2d6203b85a91cb.png)  
Thanks!

---

<div class="post-metadata">

**Author:** ![dorian\_yugabyte](https://yyz1.discourse-cdn.com/flex027/user_avatar/forum.yugabyte.com/dorian_yugabyte/32/206_2.png) [@dorian\_yugabyte](https://forum.yugabyte.com/u/dorian_yugabyte)\
**Post date:** [July 1, 2024, 2:24pm UTC](https://forum.yugabyte.com/t/enabling-encryption-in-transit-and-password-authentication-could-not-update-postgress-user-password-exception-traceback-most-recent-call-last/2756/8 "2024-07-01T14:24:56Z")

</div>

Please upload to a google driver, mediafire, etc.

Did you retry the steps that I sent in the previous reply?

---

<div class="post-metadata">

**Author:** ![Farrux](https://avatars.discourse-cdn.com/v4/letter/f/dec6dc/32.png) [@Farrux](https://forum.yugabyte.com/u/Farrux)\
**Post date:** [July 1, 2024, 3:12pm UTC](https://forum.yugabyte.com/t/enabling-encryption-in-transit-and-password-authentication-could-not-update-postgress-user-password-exception-traceback-most-recent-call-last/2756/9 "2024-07-01T15:12:09Z")

</div>

[logs.zip](https://drive.google.com/file/d/1msMv9G-RuZWf4jBgyib-qy7F3SfV9o0i/view?usp=sharing)

> [@dorian\_yugabyte](#):
>
> Did you retry the steps that I sent in the previous reply?

yes

---

<div class="post-metadata">

**Author:** ![dorian\_yugabyte](https://yyz1.discourse-cdn.com/flex027/user_avatar/forum.yugabyte.com/dorian_yugabyte/32/206_2.png) [@dorian\_yugabyte](https://forum.yugabyte.com/u/dorian_yugabyte)\
**Post date:** [July 2, 2024, 7:25am UTC](https://forum.yugabyte.com/t/enabling-encryption-in-transit-and-password-authentication-could-not-update-postgress-user-password-exception-traceback-most-recent-call-last/2756/10 "2024-07-02T07:25:18Z")

</div>

@Farrux

Please destroy the cluster. Start a new one like it’s said in [yugabyted reference | YugabyteDB Docs](https://docs.yugabyte.com/preview/reference/configuration/yugabyted/#create-certificates-for-a-secure-local-multi-node-cluster)

And if it fails again, please describe on which step it failed, and upload the logs as generated by `yugabyted collect_logs` command.

---

<div class="post-metadata">

**Author:** ![Farrux](https://avatars.discourse-cdn.com/v4/letter/f/dec6dc/32.png) [@Farrux](https://forum.yugabyte.com/u/Farrux)\
**Post date:** [July 2, 2024, 10:16am UTC](https://forum.yugabyte.com/t/enabling-encryption-in-transit-and-password-authentication-could-not-update-postgress-user-password-exception-traceback-most-recent-call-last/2756/11 "2024-07-02T10:16:37Z")

</div>

Hi @dorian_yugabyte!

 ![image](https://canada1.discourse-cdn.com/flex027/uploads/yugabyte/original/1X/ec600f4257bfd96e4d5ed4f68a0563fdd8665cc9.png)  
 ![image](https://canada1.discourse-cdn.com/flex027/uploads/yugabyte/original/1X/1895ab847fa90d6f7adf52fcc151bbb4e806531a.png)  
I ran all commands from yugabyte documenation:  
1#./bin/yugabyted cert generate\_server\_certs --hostnames=192.168.198.35,192.168.198.36,192.168.198.37  
2#.cp /root/var/generated\_certs/192.168.198.35/\* node1/certs  
3#…/bin/yugabyted start --secure --advertise\_address=192.168.198.35 --base\_dir=/root/yugabyte-2.21.1.0/node1 --cloud\_location=aws.us-east-1.us-east-1a  
But yugabyte cannot run.

---

<div class="post-metadata">

**Author:** ![dorian\_yugabyte](https://yyz1.discourse-cdn.com/flex027/user_avatar/forum.yugabyte.com/dorian_yugabyte/32/206_2.png) [@dorian\_yugabyte](https://forum.yugabyte.com/u/dorian_yugabyte)\
**Post date:** [July 2, 2024, 10:36am UTC](https://forum.yugabyte.com/t/enabling-encryption-in-transit-and-password-authentication-could-not-update-postgress-user-password-exception-traceback-most-recent-call-last/2756/12 "2024-07-02T10:36:20Z")

</div>

Please use `./bin/yugabyted collect_logs --base_dir`, using base\_dir of the installation that failed.

I don’t see `--join` in your second node, the one that failed in the screenshot above.

---

<div class="post-metadata">

**Author:** ![Farrux](https://avatars.discourse-cdn.com/v4/letter/f/dec6dc/32.png) [@Farrux](https://forum.yugabyte.com/u/Farrux)\
**Post date:** [July 2, 2024, 11:07am UTC](https://forum.yugabyte.com/t/enabling-encryption-in-transit-and-password-authentication-could-not-update-postgress-user-password-exception-traceback-most-recent-call-last/2756/13 "2024-07-02T11:07:00Z")

</div>

> [@dorian\_yugabyte](#):
>
> Please use `./bin/yugabyted collect_logs --base_dir`, using base\_dir of the installation that failed.

 ![image](https://canada1.discourse-cdn.com/flex027/uploads/yugabyte/original/1X/6dd0f8158562fc8400ae6ece64fe0197a39738e7.png)

> [@dorian\_yugabyte](#):
>
> I don’t see `--join` in your second node, the one that failed in the screenshot above.

I didn’t ran on 2,3 node because firts one is not up.

---

<div class="post-metadata">

**Author:** ![dorian\_yugabyte](https://yyz1.discourse-cdn.com/flex027/user_avatar/forum.yugabyte.com/dorian_yugabyte/32/206_2.png) [@dorian\_yugabyte](https://forum.yugabyte.com/u/dorian_yugabyte)\
**Post date:** [July 3, 2024, 9:19am UTC](https://forum.yugabyte.com/t/enabling-encryption-in-transit-and-password-authentication-could-not-update-postgress-user-password-exception-traceback-most-recent-call-last/2756/14 "2024-07-03T09:19:53Z")

</div>

Let me check internally about this and get back to you.

---

<div class="post-metadata">

**Author:** ![Sanskar\_Garg](https://avatars.discourse-cdn.com/v4/letter/s/ec9cab/32.png) [@Sanskar\_Garg](https://forum.yugabyte.com/u/Sanskar_Garg)\
**Post date:** [July 3, 2024, 9:49am UTC](https://forum.yugabyte.com/t/enabling-encryption-in-transit-and-password-authentication-could-not-update-postgress-user-password-exception-traceback-most-recent-call-last/2756/15 "2024-07-03T09:49:55Z")

</div>

Hi @Farrux , I see that different `--base_dir` ($HOME/var, $HOME/var/data, $HOME/yugabyte-2.21/node1) are being used multiple times. Can you please destroy all the nodes started in all of the base\_dir you used so as to create a fresh environment.

Destroy the nodes:  
`./bin/yugabyted destroy --base_dir=<base_dir>`  
Please run the above command for all the base dirs you may have used to delete any garbage values remaining

Steps for new node:

1. Create the certs.
2. Copy the certs to \<base\_dir\>/certs. In some of the above deployments I see the certs are copied to a different path.
3. Start the node using `--secure` and `--base_dir` flag. `--base_dir` should be the same as in Step 2.
4. If any error is thrown. Please run `./bin/yugabyted collect_logs --base_dir=<base_dir>` Please the base\_dir same. Please upload the zip file created after this step to a cloud location and paste the link here.

Thanks.

---

<div class="post-metadata">

**Author:** ![Farrux](https://avatars.discourse-cdn.com/v4/letter/f/dec6dc/32.png) [@Farrux](https://forum.yugabyte.com/u/Farrux)\
**Post date:** [July 4, 2024, 4:47am UTC](https://forum.yugabyte.com/t/enabling-encryption-in-transit-and-password-authentication-could-not-update-postgress-user-password-exception-traceback-most-recent-call-last/2756/16 "2024-07-04T04:47:45Z")

</div>

Hi!

 ![image](https://canada1.discourse-cdn.com/flex027/uploads/yugabyte/original/1X/2660f5723393bcaa85f4eada71df5753b96aef7c.png)

 ![image](https://canada1.discourse-cdn.com/flex027/uploads/yugabyte/original/1X/7e1e05750a22e31d657ebbb6bfd58a8ec7adedb7.png)

I deleted $HOME/yugabyte-2.21.1.0/ folder and downloaded a new project (Debian 12)

> wget [https://downloads.yugabyte.com/releases/2.21.1.0/yugabyte-2.21.1.0-b271-linux-x86\_64.tar.gz](https://downloads.yugabyte.com/releases/2.21.1.0/yugabyte-2.21.1.0-b271-linux-x86_64.tar.gz)

All my commands:

> #./bin/yugabyted stop  
> #./bin/yugabyted destroy --base\_dir=./node1/  
> #./bin/yugabyted cert generate\_server\_certs --hostnames=192.168.198.35,192.168.198.36,192.168.198.37 --base\_dir=./node1  
> #cp ./node1/generated\_certs/192.168.198.35/\* ./node1/certs/  
> #./bin/yugabyted start --secure --advertise\_address=192.168.198.35 --base\_dir=$HOME/yugabyte-2.21.1.0/node1 --cloud\_location=aws.us-east-1.us-east-1a

And tried with it but it is to gave the error.  
Thanks!

---

<div class="post-metadata">

**Author:** ![nmalladi](https://yyz1.discourse-cdn.com/flex027/user_avatar/forum.yugabyte.com/nmalladi/32/236_2.png) [@nmalladi](https://forum.yugabyte.com/u/nmalladi)\
**Post date:** [July 12, 2024, 2:37pm UTC](https://forum.yugabyte.com/t/enabling-encryption-in-transit-and-password-authentication-could-not-update-postgress-user-password-exception-traceback-most-recent-call-last/2756/17 "2024-07-12T14:37:38Z")

</div>

> [@Farrux](#):
>
> $HOME/yugabyte-2.21.1.0/node1

Hi,

Sorry, we couldn’t respond to you earlier. Please tar.gz the base directory `$HOME/yugabyte-2.21.1.0/node1` and send it to us for further review.

Thanks,  
Nikhil

---

<div class="post-metadata">

**Author:** ![Farrux](https://avatars.discourse-cdn.com/v4/letter/f/dec6dc/32.png) [@Farrux](https://forum.yugabyte.com/u/Farrux)\
**Post date:** [July 13, 2024, 4:35am UTC](https://forum.yugabyte.com/t/enabling-encryption-in-transit-and-password-authentication-could-not-update-postgress-user-password-exception-traceback-most-recent-call-last/2756/18 "2024-07-13T04:35:37Z")

</div>

> [@Farrux](#):
>
> > #./bin/yugabyted start --secure --advertise\_address=192.168.198.35 --base\_dir=$HOME/yugabyte-2.21.1.0/node1 --cloud\_location=aws.us-east-1.us-east-1a

Hi @nmalladi !

> **[node1.tar.gz](https://drive.google.com/file/d/1R5otsRDBLTADy7UcdYfD43yuYjR844PT/view?usp=sharing)**
>
> Google Drive file.

Thanks!

---

<div class="post-metadata">

**Author:** ![dorian\_yugabyte](https://yyz1.discourse-cdn.com/flex027/user_avatar/forum.yugabyte.com/dorian_yugabyte/32/206_2.png) [@dorian\_yugabyte](https://forum.yugabyte.com/u/dorian_yugabyte)\
**Post date:** [July 16, 2024, 10:46am UTC](https://forum.yugabyte.com/t/enabling-encryption-in-transit-and-password-authentication-could-not-update-postgress-user-password-exception-traceback-most-recent-call-last/2756/19 "2024-07-16T10:46:44Z")

</div>

I see this error in the logs:

```python
Traceback (most recent call last):
  File "/root/yugabyte-2.21.1.0/bin/ycqlsh.py", line 147, in <module>
    from six.moves import configparser, input
ModuleNotFoundError: No module named 'six.moves'

```

What is your OS?  
Please paste output of:

```auto
python3 --version

```

and

```auto
python --version

```

---

<div class="post-metadata">

**Author:** ![Farrux](https://avatars.discourse-cdn.com/v4/letter/f/dec6dc/32.png) [@Farrux](https://forum.yugabyte.com/u/Farrux)\
**Post date:** [July 18, 2024, 1:32pm UTC](https://forum.yugabyte.com/t/enabling-encryption-in-transit-and-password-authentication-could-not-update-postgress-user-password-exception-traceback-most-recent-call-last/2756/20 "2024-07-18T13:32:41Z")

</div>

> python3 --version  
> Python 3.11.2

> python --version  
> Python 3.11.2

[Next page](https://forum.yugabyte.com/t/enabling-encryption-in-transit-and-password-authentication-could-not-update-postgress-user-password-exception-traceback-most-recent-call-last/2756.md?page=2)
