Sun Java logo     Previous      Contents      Index      Next     

Sun logo
Sun Java System Access Manager 6 2005Q1 Administration Guide 

Chapter 14
The ampassword Command Line Tool

This chapter provides information on the amPassword command line tool and contains the following sections:

The ampassword Command Line Executable

Access Manager contains an ampassword utility under /opt/SUNWam/bin on SPARC systems and /opt/sun/Identity/bin on Linux systems.. This utility allows you change the Access Manager password for the administrator or user.

The ampassword Syntax

The generic syntax for using the ampassword tool is:

ampassword -a | --admin [ -o | --old oldPassword -n | --new newPassword ]

ampassword -p | --proxy [ -o | --old oldPassword -n | --new newPassword ]

ampassword -e | --encrypt [ password ]

Note

Two hyphens must be entered exactly as shown in the syntax.

ampassword Options

--admin (-a)

--admin is used to change the admin password.

--proxy (-p)

--proxy is used to change the proxy password. It corresponds to the proxy user (user type proxy in serverconfig.xml.)

--encrypt (-e)

--encrypt is used to encrypt the password. It is printed to the command line. For example, to encrypt a new dsamuser password, use the following command:

ampassword -e newPassword

Then, place the new dsamuser password in serverconfig.xml and restart the web container (Web Server or Application Server).

Running ampassword on SSL

To run ampassword with Access Manager running in Secure-Socket Layer (SSL) mode:

  1. Modify the serverconfig.xml file, located in the following directory:

    2. AccessManager-base/SUNWam/config/

  2. Change port the server attribute to the SSL port which Access Manager is running.
  3. Change the type attribute to SSL.

    4. For example:

    <iPlanetDataAccessLayer>

    <ServerGroup name="default" minConnPool="1" maxConnPool="10">

        <Server name="Server1" host="sun.com" port="636" type="SSL" />

        <User name="User1" type="proxy">

            <DirDN>

                    cn=puser,ou=DSAME Users,dc=iplanet,dc=com

            </DirDN>

           <DirPassword>

                      AQIC5wM2LY4Sfcy+AQBQxghVwhBE92i78cqf

             </DirPassword>

    </User> ...

ampassword only changes the password in Directory Server. You will have to manually change passwords in the ServerConfig.xml and all authentication templates for Access Manager.



Previous      Contents      Index      Next     

Part No: 817-7647-11.   Copyright 2005 Sun Microsystems, Inc. All rights reserved.