A.7.1 Inhibit Password Aging

The following procedure enacts a workaround that inhibits password aging on the SOAM. This procedure should be used only when the following conditions apply:
  • An upgrade is in progress.
  • The NOAMs have been upgraded, but one or more sites have not been upgraded.
  • A login password has expired on a non-upgraded site.

Once the workaround is enacted, no passwords expire at that site. Remove the workaround once the site is upgraded.

A.7.1 Expired Password Workaround Removal Procedure

Active SOAM CLI: SSH to Active SOAM Server. Disable Password Aging

  1. Use the SSH command (on UNIX systems – or putty if running on windows) to log into the active SOAM of the first non-upgraded site:

    ssh admusr@<SOAM_VIP>

    password: <enter password>

    Answer yes if you are asked to confirm the identity of the server.

  2. Create a text file with the following content (exactly as formatted):

    [production]

    aw.policy.pwchange.isExpired =

    aw.policy.db.checkPw =

    [development : production]

    [test : development]

  3. Save the file as:

    /var/TKLC/appworks/ini/pw.ini

  4. Change the file permissions:

    sudo chmod 644 pw.ini

  5. Run the following command:
    clearCache

    Note:

    For each server on which this workaround is enacted, the old expired password must be used for login. The new password used on the NOAM does not work on these servers.

    Note:

    Repeat this step for the standby SOAM and all non-upgraded sites.