<html> <head> <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type"> </head> <body text="#000000" bgcolor="#FFFFFF"> Marc, Thanks for the support. Nalinda On 06/11/2012 02:12 PM, Marc Sauton wrote: <blockquote cite="mid:4FD5AF74.2030101@redhat.com" type="cite"> <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type"> To use ldapmodify: <a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://docs.redhat.com/docs/en-US/Red_Hat_Directory_Server/9.0/html/Administration_Guide/Creating_Directory_Entries-Managing_Entries_from_the_Command_Line.html#Managing_Entries_from_the_Command_Line-Adding_and_Modifying_Entries_Using_ldapmodify">http://docs.redhat.com/docs/en-US/Red_Hat_Directory_Server/9.0/html/Administration_Guide/Creating_Directory_Entries-Managing_Entries_from_the_Command_Line.html#Managing_Entries_from_the_Command_Line-Adding_and_Modifying_Entries_Using_ldapmodify</a> Example of Java LDAP explorer: <a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://jxplorer.org/">http://jxplorer.org/</a> Note by using ldapmodify or a LDAP browser, there is a high risk of mistakes that may break the application, so it is only recommended for "advanced" users. M. On 06/10/2012 05:44 AM, Nalinda Herath wrote: <blockquote cite="mid:4FD4969E.3090200@techcert.lk" type="cite"> <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type"> this is the command that I have tried. But didn't get any response for the command. #ldapmodify -D "uid=admin,ou=people,dc=<fqdn>-pki-ca" -w <password> -d 2 Do you know any ldap explorer utility which can be used for this purpose. Nalinda On 06/10/2012 10:08 AM, Nalinda Herath wrote: <blockquote cite="mid:4FD424C9.3090902@techcert.lk" type="cite"> <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type"> Thnx. But still no luck. I have tried the following command #ldapmodify -D "uid=admin,O=Astor Domain,dc=<fqdn>-pki-ca" -w <password> Please let me know whether the commnd is correct. If yes, i will check on the DN. Thanks. Regards, Nalinda On 05/31/2012 07:56 PM, Marc Sauton wrote: <blockquote cite="mid:4FC77FAA.2090707@redhat.com" type="cite"> <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type"> The admin entry has a DN similar to this form dn: uid=admin,ou=people,dc=<fully-qualified-hostname>-pki-ca Bind as the directory manager to read or modify the userpassword attribute I added an example of detailed steps in a "knowledge based" article at <a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://access.redhat.com/knowledge/articles/133053">https://access.redhat.com/knowledge/articles/133053</a> M. On 05/30/2012 11:55 PM, Nalinda Herath wrote: <blockquote cite="mid:4FC715EE.60507@techcert.lk" type="cite"> <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type"> Thank you for the response. I have the directory manager password. Could you please help me to reset the admin password via ldapmodify utility. Regards, Nalinda On 05/30/2012 10:38 PM, Christina Fu wrote: <blockquote cite="mid:4FC653F0.7020006@redhat.com" type="cite"> <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type"> All CS role users are stored in the ldap. You could use ldapmodify to change it, provided you have the directory manager password. Christina On 05/30/2012 08:52 AM, Nalinda Herath wrote: <blockquote cite="mid:4FC6424C.3090603@techcert.lk" type="cite"> <pre wrap="">Thank you for the response. But what I forgot to tell was, I have lost the password for the admin user. And the system doesn't have any other user other than admin. Nalinda On 05/30/2012 06:55 PM, Ade Lee wrote: </pre> <blockquote type="cite"> <pre wrap="">In the CA console, there is a tab for managing Users and Groups. <a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://docs.redhat.com/docs/en-US/Red_Hat_Certificate_System/8.1/html/Admin_Guide/Creating_a_New_Group.html#Creating_Users-for-a-ca-ocsp-drm-or-tks">http://docs.redhat.com/docs/en-US/Red_Hat_Certificate_System/8.1/html/Admin_Guide/Creating_a_New_Group.html#Creating_Users-for-a-ca-ocsp-drm-or-tks</a> You can select and modify the admin user (or any other user) from there. Ade On Wed, 2012-05-30 at 15:58 +0530, Nalinda Herath wrote: </pre> <blockquote type="cite"> <pre wrap="">Dear All, Is there a possibility to reset the pkiconsole password for the default "admin" user? I'm referring to the pkiconsole for the CA instance. (not the console for the Directory Server) Nalinda _______________________________________________ Pki-users mailing list <a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:Pki-users@redhat.com">Pki-users@redhat.com</a> <a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/pki-users">https://www.redhat.com/mailman/listinfo/pki-users</a> </pre> </blockquote> </blockquote> <pre wrap=""><fieldset class="mimeAttachmentHeader"></fieldset> _______________________________________________ Pki-users mailing list <a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:Pki-users@redhat.com">Pki-users@redhat.com</a> <a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/pki-users">https://www.redhat.com/mailman/listinfo/pki-users</a> </pre> </blockquote> <fieldset class="mimeAttachmentHeader"></fieldset> <pre wrap="">_______________________________________________ Pki-users mailing list <a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:Pki-users@redhat.com">Pki-users@redhat.com</a> <a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/pki-users">https://www.redhat.com/mailman/listinfo/pki-users</a> </pre> </blockquote> <pre class="moz-signature" cols="72">-- ---- Nalinda Herath Information Security Engineer TechCERT / A Division of LK Domain Registry, 545/4, De Soysa Rd., Molpe, Moratuwa 10400, Sri Lanka Mobile: +94 77 7303905 Office: +94 11 4216062 Fax: +94 11 2650805 Web: <a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="http://www.techcert.lk">www.techcert.lk</a> =====HELPING YOU SECURE YOUR INFORMATION ASSETS===== </pre> <fieldset class="mimeAttachmentHeader"></fieldset> <pre wrap="">_______________________________________________ Pki-users mailing list <a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:Pki-users@redhat.com">Pki-users@redhat.com</a> <a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/pki-users">https://www.redhat.com/mailman/listinfo/pki-users</a> </pre> </blockquote> </blockquote> <pre class="moz-signature" cols="72">-- ---- Nalinda Herath Information Security Engineer TechCERT / A Division of LK Domain Registry, 545/4, De Soysa Rd., Molpe, Moratuwa 10400, Sri Lanka Mobile: +94 77 7303905 Office: +94 11 4216062 Fax: +94 11 2650805 Web: <a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="http://www.techcert.lk">www.techcert.lk</a> =====HELPING YOU SECURE YOUR INFORMATION ASSETS===== </pre> <fieldset class="mimeAttachmentHeader"></fieldset> <pre wrap="">_______________________________________________ Pki-users mailing list <a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:Pki-users@redhat.com">Pki-users@redhat.com</a> <a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/pki-users">https://www.redhat.com/mailman/listinfo/pki-users</a> </pre> </blockquote> <pre class="moz-signature" cols="72">-- ---- Nalinda Herath Information Security Engineer TechCERT / A Division of LK Domain Registry, 545/4, De Soysa Rd., Molpe, Moratuwa 10400, Sri Lanka Mobile: +94 77 7303905 Office: +94 11 4216062 Fax: +94 11 2650805 Web: <a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="http://www.techcert.lk">www.techcert.lk</a> =====HELPING YOU SECURE YOUR INFORMATION ASSETS===== </pre> </blockquote> </blockquote> <pre class="moz-signature" cols="72">-- ---- Nalinda Herath Information Security Engineer TechCERT / A Division of LK Domain Registry, 545/4, De Soysa Rd., Molpe, Moratuwa 10400, Sri Lanka Mobile: +94 77 7303905 Office: +94 11 4216062 Fax: +94 11 2650805 Web: <a class="moz-txt-link-abbreviated" href="http://www.techcert.lk">www.techcert.lk</a> =====HELPING YOU SECURE YOUR INFORMATION ASSETS===== </pre> </body> </html>