Chapter 10   The ampassword Command Line Tool


This chapter provides information on the amPassword command line tool and contains the following sections:

• The ampassword Command Line Executable

• Running ampassword on SSL

The ampassword Command Line Executable

---

Identity Server contains an ampassword utility under $installroot/bin. This utility allows you change the Identity Server password for the administrator or user.

The ampassword Syntax

The generic syntax for using the ampassword tool is:

ampassword -a | --admin [ -o | --old <oldPassword> -n | --new <newPassword> ]

ampassword -p | --proxy [ -o | --old <oldPassword> -n | --new <newPassword> ]

ampassword -e | --encrypt [ password ]

---

Note	Two hyphens must be entered exactly as shown in the syntax.

---

ampassword Options

--admin
--admin is used to change the admin password.

--proxy
--proxy is used to change the proxy password. It corresponds to the proxy user (user type proxy in serverconfig.xml.)

--encrypt
--encrypt is used to encrypt the password. It is printed to the command line.

Running ampassword on SSL

---

To run ampassword with Identity Server running in Secure-Socket Layer (SSL) mode:

1. Modify the serverconfig.xml file, located in the following directory:

   Identity_Server_root/SUNWam/config/ums

2. Change port the server attribute to the SSL port which Identity Server is running.

3. Change the type attribute to SSL.

   For example:

   <iPlanetDataAccessLayer>

   <ServerGroup name="default" minConnPool="1" maxConnPool="10">

   <Server name="Server1" host="sun.com" port="636" type="SSL" />

   <User name="User1" type="proxy">

   <DirDN>

   cn=puser,ou=DSAME Users,dc=iplanet,dc=com

   </DirDN>

   <DirPassword>

   AQIC5wM2LY4Sfcy+AQBQxghVwhBE92i78cqf

   </DirPassword>

   </User> ...