svrenc command not writing encrypted contents in dfo file
Article ID: 410591
Updated On:
Products
Issue/Introduction
We are trying to create the .dfo file with credential information encrypted but it is creating an empty file.
$ svrenc -f example.dfo -usr ******** -pw ******* -oa example.dfo
$ ls -lrt
total 32
-r-xr-xr-x 1 ******** ******** 3674 Sep 10 15:27 agntd
-r-xr-xr-x 1 ******** ******** 3677 Sep 10 15:27 hauthtst
-r-xr-xr-x 1 ******** ******** 3675 Sep 10 15:27 svrenc
-rw-r--r-- 1 ******** ******** 65 Sep 12 14:31 example.dfo
-bash-4.3$
-bash-4.3$
-bash-4.3$ cat example.dfo
---------The credentials info has been successfully set---------
-bash-4.3$
-bash-4.3$
We also tried with other options below but unsuccessful.
svrenc -f example.dfo -usr ******** -pw ******
svrenc -s -usr example -pw ******* -o example.dfo
Environment
Harvest Software Change Manager all versions and platforms
Cause
In the first svrenc command, the filename used for the encrypted password file, and the filename used for the log file are the same:
svrenc -f example.dfo -usr ******** -pw ******* -oa example.dfo
This will result with the svrenc log file overwriting the encrypted password file.
The second command should have succeeded:
svrenc -f example.dfo -usr ******** -pw ******
The third command (svrenc -s -usr ******** -pw ******* -o example.dfo) actually updates the Harvest server's encrypted password file containing the credentials used to connect to the Harvest database. (the "-s" option does that), and the name of the log file will be "example.dfo". This one is not applicable on an agent server, or for connecting to a SCM agent.
In addition, this encrypted password file should not be created on the server where the agent is, but on the computer that is connecting to that agent. For example, if you want to use a command line utility from the broker machine to perform a "hco" checkout command targeting the agent on the AIX server, the svrenc command should be executed, and the dfo file should be created on the broker machine.
Resolution
Please execute this command again, on the client-side machine that you want to use to connect to the agent server, and use this syntax, it will have a better result:
svrenc -f example.dfo -usr ******** -pw ******* -oa svrenc.log
The resulting example.dfo file will be created in the %CA_SCM_HOME% folder, and will be marked as a hidden file, so be sure that your Windows file explorer has the "Show hidden files" checkbox checked.
See details in the documentation for the svrenc command.
Feedback
