Reversing LDAPBIND

 2 Replies
 0 Subscribed to this topic
 27 Subscribed to this forum
Sort:
Author
Messages
Rory Flood
New Member
Posts: 4
New Member

    OK, we are wanting to play with our dev system and do an LDAPBIND against it on LSF. Currently, all authentication is done via the LSA tool and if we are successful in doing a LDAPBIND against our AD via ADAM can we go back to the way it was before? I know it creates a recovery file but how do we use it?

    John Henley
    Posts: 3353
      You load it using ssoconfig -l=
      Thanks for using the LawsonGuru.com forums!
      John
      Tomwise
      Advanced Member
      Posts: 32
      Advanced Member

        or

        In the xml file change:

        BATCH_LOAD FORMAT="Encrypted" OVERRIDE="false" 

        to

        BATCH_LOAD FORMAT="Encrypted" OVERRIDE="true"


        ssoconfig -c
        Please enter the password used for Lawson security utilities:

        (1) Change Lawson Single Sign On Server settings
        (2) Change Lawson authentication admin settings
        (3) Change Lawson authentication data store settings
        (4) Change crypto provider settings
        (5) Manage Lawson Services
        (6) Manage Lawson User Identities
        (7) Manage privileged access to services
        (8) Manage Lawson Resources
        (9) Manage Lawson HTTP Endpoints
        (10) Manage Lawson HTTP Endpoint Groups
        (11) Other options
        (12) Exit
        Enter your choice (between 1 and 12):5

        -------Manage Lawson Services-------

        (1) Add new service
        (2) Change existing service
        (3) Delete existing service
        (4) Generate identity file template for service
        (5) Load service and identity file
        (6) Export service and identity info
        (7) OS Service Identity Information
        (8) Manage Complete Identity List of Primary Service
        (9) Back
        (10) Exit
        Enter your choice (between 1 and 10):5
        Enter identity file name ():law9prod.xml (your generated xml file from the ldapbind)