Securing OES Production Environments

     Previous  Next    Open TOC in new window    View as PDF - New Window  Get Adobe Reader - New Window
Content starts here

Resetting the Administrator Password

OES is installed using an administrative account that has a username and password of admin and password respectively. For security purposes, the account’s password should be changed immediately after installation is complete or if it is compromised or lost.

Follow these steps to reset the OES administrator password:

  1. To generate a hashed version of the new administrator password, open a command window in BEA_HOME/ales32-admin/bin and enter the following:
    2. generatePasswordHash.bat <new_password>

    This generates a hashed password. In the following example, the hashed password is shown inside square brackets. 

    hash result is[{SHA1}pvGBjCW7IS5jCM1e9dYR/EtCTojHjqk=]
  2. To update the database table for administration user, do the following:
    1. Connect to the database and the schema defined during OES installation.
      Note: This can be obtained by examining the following file:

      2. BEA_HOME\ales32-admin\config\database.properties.

    2. Enter the following:

      SQL> update adminuser set password = '<hash_password>' where userid = '//user/asi/system/';

      where
      <hash_password> is the hashed password generated in step 1.

      3. Example:

      SQL> update adminuser set password = '{SHA1}pvGBjCW7IS5jCM1e9dYR/EtCTojHjqk=' where userid = '//user/asi/system/';

  3. To establish the new password and update the password.xml/password.key file, open a command window in BEA_HOME/ales32-admin/bin and execute the following on one line:
    4. asipassword.bat <admin_username> <BEA_Home>\ales32-shared>\keys\password.xml <BEA_Home>\ales32-shared>\keys\password.key

    where

    <admin_username> is the OES administrator username (be default, system)
    <BEA_Home> is BEA_HOME, for example c:\bea.

    Note: A number of administrative utilities use the password stored in password.xml to connect to the database.

  4. Start the Administration Server.

  Back to Top       Previous  Next