Change Service Account passwords

 4 Replies
 0 Subscribed to this topic
 27 Subscribed to this forum
Sort:
Author
Messages
JY
Advanced Member Send Private Message
Posts: 26
Advanced Member
W2003, LSF 9005, MS ADAM bound to AD.  There is a directive to change our service account passwords.  We a general service account plus 2 accounts for the privileged identities of ONLINE and BATCH.  Apart from the password change in Active Directory, what needs to change?  Intall.cfg?  Anything in MS ADAM?
Jimmy Chiu
Veteran Member Send Private Message
Posts: 641
Veteran Member
ldapbind <--- if you are changing the ldap service account
pfserv config <--- if you are changing "lawson" or the OS account in the pfserv config
JY
Advanced Member Send Private Message
Posts: 26
Advanced Member
The MS ADAM service is run under a user ID defined on the Lawson application server and therefore is not defined in our domain controller's Active Directory.  The only passwords being changed are 'lawson' which LSF was originally installed under and the two accounts that are linked to the privileged IDs for ONLINE and BATCH functions.  These accounts are all part of Active Directory.
Jimmy Chiu
Veteran Member Send Private Message
Posts: 641
Veteran Member
W2003, LSF 9005, MS ADAM bound to AD.

Your user ID defined on the lawson app server only access the local ADAM ldap repository. Since your ADAM is bound to AD, there's another OS account that you are using to browse the AD tree for password authentication. That account, you will need to find out. If it's "lawson" OS account, then LDAPBIND will need to be redone.
check "Enter the DN of an LDAP search user" <--- this OS account is used to search your AD tree. This account should not be "lawson", but depends on the installer, they might just use that...

pfserv config
check your "RM ID for servers"
check your "IOS Login Name"
check your "IOS password"
check your "System Command User"
check your "System Command Password"
check your "ProcessFlow Web User"
check your "ProcessFlow Web Password"
If they are "lawson" OS account, pfserv config will need to be redone after your changed the password.
JY
Advanced Member Send Private Message
Posts: 26
Advanced Member
Mr. Chiu, thanks for the information -- much appreciated.
The LDAP search user is definitely 'lawson'. That was the choice of the installer.