Changing DSADM, ISADMIN and WASADMIN passwords.

[rkashyap]

DataStage is using OS authentication. Users dsadm, isadmin and wasadmin have been created in Unix. In order to change the password for these users, following steps were followed:
1. Shutdown DataStage engine, NodeAgents and Metadataserver

2. Changed password of dsadm, isadmin and wasadmin in unix.

3. Executed following command

$ /opt/IBM/InformationServer/ASBServer/bin/AppServerAdmin.sh -was -user wasadmin -password NEWPASS
Info WAS instance /Node:HOSTNMNode01/Server:server1/ updated with new user information
Info MetadataServer daemon script updated with new user information

4. Subsequently we tried to restart metedataserver, but it failed

************ Start Display Current Environment ************
WebSphere Platform 8.5.0.0 [ND 8.5.0.0 gm1218.01] running with process name HOSTNMNode01Cell\HOSTNMNode01\server1 and process id 13238
Host Operating System is SunOS, version 5.10
Java version = 1.6.0_31, Java Compiler = HotSpot 64-Bit Tiered Compilers, Java VM name = Java HotSpot(TM) 64-Bit Server VM
...
************* End Display Current Environment *************
[3/14/14 11:53:53:716 EDT] 00000001 WsServerImpl E WSVR0009E: Error occurred during startup
com.ibm.ws.exception.RuntimeError: Authentication failed for user: wasadmin

Workaround
6. We tried following command, it was succesful, but it did not help

Code: Select all

/opt/IBM/InformationServer/ASBServer/bin/DirectoryAdmin.sh -user -userid wasadmin -password NEWPASS -admin

7. As a last resort, we manually entered new unencrypted password in /opt/IBM/WebSphere/AppServer/profiles/InfoSphere/config/cells/<hostname>Node01Cell/security.xml, by changing the string as given below:

Code: Select all

<userRegistries xmi:type="security:LocalOSUserRegistry" xmi:id="LocalOSUserRegistry" serverId="wasadmin" serverPassword="NEWPASS" realm=

This worked and allowed us to restart DataStage ... phew.

Please advise:
1. If we missed any step in changing the passwords?
2. If your shop is using OS authentication, what are expiration guidelines for dsadm, isadmin and wasadmin passwords? Any other suggestions.

[asorrell]

http://www-01.ibm.com/support/docview.w ... wg21448328

http://pic.dhe.ibm.com/infocenter/iisin ... r_cmd.html

http://pic.dhe.ibm.com/infocenter/iisin ... e_pwd.html

[rkashyap]

Andy, Thanks for these links.

We were following the section "Changing an IBM InfoSphere Information Server administrator password" of Admin Guide, but obviously we missed some step. I have reviewed the links, that you had shared but could not figure out that missing step.

Thanks.