My bad - I thought the link I shared would indicate that is the process
I followed. However, here are more details:
ipa-server-4.5.4-10.el7_5.1.x86_64 on RHEL 7.5
Steps:
1. Backup dse.ldif out of /etc/dirsrv/slapd-DOMAIN...
2. ipactl stop
3. vim dse.ldif and replace rootpw with newly hashed pw from pwdhash command
4. ipactl start
I tried this on the first CA, and was unable to gain access to dirmgr.
Tried it on secondary (replicas) and still no luck. So perhaps I am just
not understanding that you can change Directory Manager PW by following
389-ds docs?
thank you
Kat
On 5/21/18 10:49, Rob Crittenden wrote:
Kat via FreeIPA-users wrote:
> No suggestions at all?
https://www.freeipa.org/page/Howto/Change_Directory_Manager_Password
If would help if you included the version and distro and more details on
how you tried to change the password.
rob
> :-(
>
>
> On 5/16/18 09:08, Kat wrote:
>> Hi -
>>
>> Have a replica I did not install CA on. Want to add it. I had lost the
>> Directory Manager password, so I followed procedure to change it by
>> editing dse.ldif and replacing the rootpw, but no matter what I do I
>> keep getting:
>>
>> [root@ipa-rep2 ~]# ipa-ca-install
>> Directory Manager (existing master) password:
>>
>> Directory Manager password is invalid
>>
>> Scratching my head - has the procedure for changing the Dir Mgr
>> password changed? I used:
>>
>>
http://directory.fedoraproject.org/docs/389ds/howto/howto-resetdirmgrpass...
>>
>>
>> Any ideas?
>> -K
>>
> _______________________________________________
> FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
> To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
> Fedora Code of Conduct:
https://getfedora.org/code-of-conduct.html
> List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
>
https://lists.fedoraproject.org/archives/list/freeipa-users@lists.fedorah...
>