change PozAdmin password for EEM

Products

• CA Workload Automation AE - Scheduler (AutoSys)

Issue/Introduction

There may be situations where igateway cannot connect to the dxserver db.
A possible cause is the PozAdmin password became corrupt or inconsistent within the EEM install.

 

Environment

EEM 12.6.x

Resolution

There may be situations where igateway cannot connect to the dxserver db.
A possible cause is the PozAdmin password became corrupt or inconsistent withing the EEM install.

The PozAdmin password is in two locations.
1) in the itechpoz db itself
2) in the $EIAM_HOME/config/server/server.xml file

They must be consistently configured for the EEM product to work.

To manually force them to a new / specific value:

As root: $IGW_LOC/S99igateway stop
As root: su - dsa -c "dxserver stop all"

su - dsa
cd $DXHOME/bin
export EIAM_HOME=/opt/CA/SharedComponents/EmbeddedEntitlementsManager
export JAVA_HOME=$EIAM_HOME/jre
export PATH=$EIAM_HOME/jre/bin:$PATH
dxdumpdb -f foo itechpoz
cp foo foo.b4pozadminchange
dxpassword -P SHA512 <newpassword>

Example:
-sh-4.1$ dxpassword -P SHA512 WAsupp123
{SHA512}A+99S8TXV0/Jaag6lGWO5XpK9uc4+/ooBayxdbyaWOlVKS8v9b1mQdi/iHnDInfuEwf9QsGzjvfCjJSzevMtQQ==

vi foo 
 serach for 
dn: cn=PozAdmin,cn=Admins,cn=Entities,cn=iTechPoz
objectClass: pozObject
cn: PozAdmin
pozClass: O_E_U
pozGeneration: 1
pozId: 11131
pozLink: cn=PozAdmin, cn=Admins, cn=Entities, cn=iTechPoz
pozLocation: /iTechPoz/Entities/Admins
pzUserName: PozAdmin
createTimestamp: 20200724045606.794Z
modifyTimestamp: 20200724045606.815Z
userPassword: {SSHA512}I80Eh03QVjjd0l+b/oCZ/yg2gTS/B+VO9+03tuxcUyiDvGrNJFHUkzkPTEbvt+O+hyQfU+WSn4vRsemj7lpXik/Hsvw=

Replace the existing userPassword: value with the new one from your dxpassword command.
Save the file.
dxloaddb itechpoz foo
dxserver start all

exit (to become root again)
export EIAM_HOME=/opt/CA/SharedComponents/EmbeddedEntitlementsManager
export JAVA_HOME=$EIAM_HOME/jre
export PATH=$EIAM_HOME/jre/bin:$PATH

cd $EIAM_HOME/bin
java -jar eiam-clustersetup.jar -m <newpassword>

Example:
# java -jar eiam-clustersetup.jar -m WAsupp123
May 03, 2022 2:44:52 PM IclUtil itechLibInit
INFO: iTechSDK initialized successfully
INFO  - munge value : {MUNGE2}PzUHBUpfHlda

cd $EIAM_HOME/config/server
cp server.xml server.xml.b4pozadminchange
vi server.xml 
 search for PozAdmin
   <dn>cn=PozAdmin,cn=Admins,cn=Entities,cn=iTechPoz</dn>
   <password>{MUNGE2}DExFEggdTQBEWFkfAEwaVw1aAhFdERJIQExSXQ9fWQVbFkAW</password>
Replace the <password> value with the results from the java -jar eiam-clustersetup.jar -m <newpassword>
Save the file
$IGW_LOC/S99igateway