[Pki-users] reset pkiconsole password [for CA server]

Nalinda Herath nalinda at techcert.lk
Mon Jun 25 15:26:13 UTC 2012


Marc,
Thanks for the support.

Nalinda

On 06/11/2012 02:12 PM, Marc Sauton wrote:
> To use ldapmodify:
> http://docs.redhat.com/docs/en-US/Red_Hat_Directory_Server/9.0/html/Administration_Guide/Creating_Directory_Entries-Managing_Entries_from_the_Command_Line.html#Managing_Entries_from_the_Command_Line-Adding_and_Modifying_Entries_Using_ldapmodify
>
> Example of Java LDAP explorer:
> http://jxplorer.org/
>
> Note by using ldapmodify or a LDAP browser, there is a high risk of
> mistakes that may break the application, so it is only recommended for
> "advanced" users.
> M.
>
> On 06/10/2012 05:44 AM, Nalinda Herath wrote:
>> this is the command that I have tried. But didn't get any response
>> for the command.
>>
>> #ldapmodify -D "uid=admin,ou=people,dc=<fqdn>-pki-ca" -w <password> -d 2
>>
>> Do you know any ldap explorer utility which can be used for this purpose.
>>
>> Nalinda
>>
>>
>> On 06/10/2012 10:08 AM, Nalinda Herath wrote:
>>> Thnx.
>>>
>>> But still no luck.
>>>
>>> I have tried the following command
>>>
>>> #ldapmodify -D "uid=admin,O=Astor Domain,dc=<fqdn>-pki-ca" -w <password>
>>>
>>> Please let me know whether the commnd is correct. If yes, i will
>>> check on the DN. Thanks.
>>>
>>> Regards,
>>> Nalinda
>>>
>>> On 05/31/2012 07:56 PM, Marc Sauton wrote:
>>>> The admin entry has a DN similar to this form
>>>> dn: uid=admin,ou=people,dc=<fully-qualified-hostname>-pki-ca
>>>> Bind as the directory manager to read or modify the userpassword
>>>> attribute
>>>>
>>>> I added an example of detailed steps in a  "knowledge based" article at
>>>> https://access.redhat.com/knowledge/articles/133053
>>>>
>>>> M.
>>>>
>>>> On 05/30/2012 11:55 PM, Nalinda Herath wrote:
>>>>> Thank you for the response.
>>>>>
>>>>> I have the directory manager password. Could you please help me to
>>>>> reset the admin password via ldapmodify utility.
>>>>>
>>>>> Regards,
>>>>> Nalinda
>>>>>
>>>>>
>>>>> On 05/30/2012 10:38 PM, Christina Fu wrote:
>>>>>> All CS role users are stored in the ldap.  You could use
>>>>>> ldapmodify to change it, provided you have the directory manager
>>>>>> password.
>>>>>>
>>>>>> Christina
>>>>>>
>>>>>> On 05/30/2012 08:52 AM, Nalinda Herath wrote:
>>>>>>> Thank you for the response.
>>>>>>>
>>>>>>> But what I forgot to tell was, I have lost the password for the admin
>>>>>>> user. And the system doesn't have any other user other than admin.
>>>>>>>
>>>>>>> Nalinda
>>>>>>>
>>>>>>>
>>>>>>> On 05/30/2012 06:55 PM, Ade Lee wrote:
>>>>>>>> In the CA console, there is a tab for managing Users and Groups.
>>>>>>>> http://docs.redhat.com/docs/en-US/Red_Hat_Certificate_System/8.1/html/Admin_Guide/Creating_a_New_Group.html#Creating_Users-for-a-ca-ocsp-drm-or-tks
>>>>>>>>
>>>>>>>> You can select and modify the admin user (or any other user) from there.
>>>>>>>>
>>>>>>>> Ade
>>>>>>>>
>>>>>>>> On Wed, 2012-05-30 at 15:58 +0530, Nalinda Herath wrote:
>>>>>>>>> Dear All,
>>>>>>>>>
>>>>>>>>> Is there a possibility to reset the pkiconsole password for the default
>>>>>>>>> "admin" user? I'm referring to the pkiconsole for the CA instance. (not
>>>>>>>>> the console for the Directory Server)
>>>>>>>>>
>>>>>>>>> Nalinda
>>>>>>>>>
>>>>>>>>> _______________________________________________
>>>>>>>>> Pki-users mailing list
>>>>>>>>> Pki-users at redhat.com
>>>>>>>>> https://www.redhat.com/mailman/listinfo/pki-users
>>>>>>>
>>>>>>>
>>>>>>> _______________________________________________
>>>>>>> Pki-users mailing list
>>>>>>> Pki-users at redhat.com
>>>>>>> https://www.redhat.com/mailman/listinfo/pki-users
>>>>>>
>>>>>>
>>>>>>
>>>>>> _______________________________________________
>>>>>> Pki-users mailing list
>>>>>> Pki-users at redhat.com
>>>>>> https://www.redhat.com/mailman/listinfo/pki-users
>>>>>
>>>>>
>>>>> -- 
>>>>> ----
>>>>> Nalinda Herath
>>>>> Information Security Engineer
>>>>> TechCERT / A Division of LK Domain Registry,
>>>>> 545/4, De Soysa Rd., Molpe,
>>>>> Moratuwa 10400,
>>>>> Sri Lanka
>>>>>
>>>>> Mobile: +94 77 7303905
>>>>> Office: +94 11 4216062
>>>>> Fax:    +94 11 2650805
>>>>> Web:    www.techcert.lk
>>>>>
>>>>> =====HELPING YOU SECURE YOUR INFORMATION ASSETS=====
>>>>>
>>>>>
>>>>> _______________________________________________
>>>>> Pki-users mailing list
>>>>> Pki-users at redhat.com
>>>>> https://www.redhat.com/mailman/listinfo/pki-users
>>>>
>>>
>>>
>>> -- 
>>> ----
>>> Nalinda Herath
>>> Information Security Engineer
>>> TechCERT / A Division of LK Domain Registry,
>>> 545/4, De Soysa Rd., Molpe,
>>> Moratuwa 10400,
>>> Sri Lanka
>>>
>>> Mobile: +94 77 7303905
>>> Office: +94 11 4216062
>>> Fax:    +94 11 2650805
>>> Web:    www.techcert.lk
>>>
>>> =====HELPING YOU SECURE YOUR INFORMATION ASSETS=====
>>>
>>>
>>> _______________________________________________
>>> Pki-users mailing list
>>> Pki-users at redhat.com
>>> https://www.redhat.com/mailman/listinfo/pki-users
>>
>>
>> -- 
>> ----
>> Nalinda Herath
>> Information Security Engineer
>> TechCERT / A Division of LK Domain Registry,
>> 545/4, De Soysa Rd., Molpe,
>> Moratuwa 10400,
>> Sri Lanka
>>
>> Mobile: +94 77 7303905
>> Office: +94 11 4216062
>> Fax:    +94 11 2650805
>> Web:    www.techcert.lk
>>
>> =====HELPING YOU SECURE YOUR INFORMATION ASSETS=====
>


-- 
----
Nalinda Herath
Information Security Engineer
TechCERT / A Division of LK Domain Registry,
545/4, De Soysa Rd., Molpe,
Moratuwa 10400,
Sri Lanka

Mobile: +94 77 7303905
Office: +94 11 4216062
Fax:    +94 11 2650805
Web:    www.techcert.lk

=====HELPING YOU SECURE YOUR INFORMATION ASSETS=====

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/pki-users/attachments/20120625/ef7f861f/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2619 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/pki-users/attachments/20120625/ef7f861f/attachment.p7s>


More information about the Pki-users mailing list