Prev
Next
Forums S3 Systems Administration

Change Service Account passwords

Sort:
You are not authorized to post a reply.
Author
Messages
JY
Advanced Member
Posts: 26
Advanced Member
12/13/2010 6:05 PM
    W2003, LSF 9005, MS ADAM bound to AD.  There is a directive to change our service account passwords.  We a general service account plus 2 accounts for the privileged identities of ONLINE and BATCH.  Apart from the password change in Active Directory, what needs to change?  Intall.cfg?  Anything in MS ADAM?
    Jimmy Chiu
    Veteran Member
    Posts: 641
    Veteran Member
    12/14/2010 5:08 PM
      ldapbind <--- if you are changing the ldap service account
      pfserv config <--- if you are changing "lawson" or the OS account in the pfserv config
      JY
      Advanced Member
      Posts: 26
      Advanced Member
      12/14/2010 5:25 PM
        The MS ADAM service is run under a user ID defined on the Lawson application server and therefore is not defined in our domain controller's Active Directory.  The only passwords being changed are 'lawson' which LSF was originally installed under and the two accounts that are linked to the privileged IDs for ONLINE and BATCH functions.  These accounts are all part of Active Directory.
        Jimmy Chiu
        Veteran Member
        Posts: 641
        Veteran Member
        12/14/2010 7:09 PM
          W2003, LSF 9005, MS ADAM bound to AD.

          Your user ID defined on the lawson app server only access the local ADAM ldap repository. Since your ADAM is bound to AD, there's another OS account that you are using to browse the AD tree for password authentication. That account, you will need to find out. If it's "lawson" OS account, then LDAPBIND will need to be redone.
          check "Enter the DN of an LDAP search user" <--- this OS account is used to search your AD tree. This account should not be "lawson", but depends on the installer, they might just use that...

          pfserv config
          check your "RM ID for servers"
          check your "IOS Login Name"
          check your "IOS password"
          check your "System Command User"
          check your "System Command Password"
          check your "ProcessFlow Web User"
          check your "ProcessFlow Web Password"
          If they are "lawson" OS account, pfserv config will need to be redone after your changed the password.
          JY
          Advanced Member
          Posts: 26
          Advanced Member
          12/14/2010 8:23 PM
            Mr. Chiu, thanks for the information -- much appreciated.
            The LDAP search user is definitely 'lawson'. That was the choice of the installer.
            You are not authorized to post a reply.