i'm not able to modify "Admin" password in content server/archive

[megapix]

Hi all,
i must change the Livelink Admin password (in content server), but when i change (update) the pwd in content, in archive server don't update it!
I'm able to logon correctly in Archive Server Administration (with new pwd)...but not able to view parameter and other function into archive!
any idea? there is a guide/procedure to update it!?!

Phil

 

[ggriffit]

Are you changing the Admin User or the password for the Admin pages (specified in ?func=admin.sysvars) ?

Greg Griffiths
Livelink Certified Developer & ECM Global Star Champion 2005 & 2006

http://www.greggriffiths.org/livelink/

 

[megapix]

After changing the password of the user Admin the Opentext Administration Client (by ?func=admin.sysvars) started to behave funny: the login with an enabled account (either Admin or any of the member of the aradmins group) is granted but when you browse the structure down (Archive Administration) to the leaf (eg.: you want to see/manage disk volumes) you get the following error:

Authentication provider returned error!
Actor:
Code: Server
Lang:
Node:
Role:
Detail: <detail>
<ns3:AdminServiceFault
xmlns:ns3="urn:archive.admin.services.ecm.opentext.com"
xmlns:ns2="urn:api.ecm.opentext.com">
<faultCode>IArchiveBase.Client.AuthenticationProviderError</faultCode>
<message>Authentication provider returned error!</message>
<parameters>
<entry>
<key>CAUSE_MESSAGES</key>
<value>Unknown user.|</value>
</entry>
<entry>
<key>EVENT_ID</key>

</entry>
<entry>
<key>Argument</key>
<value>Admin</value>
</entry>
</parameters>
</ns3:AdminServiceFault>
</detail>
StackTrace:
at
System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage
message, WebResponse response, Stream responseStream, Boolean asyncCall) at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(StringmethodName, Object[] parameters)
at
OpenText.EnterpriseLibrary.Administration.Lea.WebService.Archive.ArchiveAdministrationService.invokeCommand(invokeCommand
invokeCommand1)
at
OpenText.EnterpriseLibrary.Administration.Lea.PowerShell.Archive.GetAdmsInvokeCommandResultsCommand.ProcessRecord()
at System.Management.Automation.Cmdlet.GetResults()
at System.Management.Automation.Cmdlet.<Invoke>d__5`1.MoveNext()
at
OpenText.EnterpriseLibrary.Administration.Lea.PowerShell.Archive.GetAdmsInvokeCommandResultsCommand.doCmd(ArchiveAdministrationWrapper
w, invokeCommand invokeCommand)
at
OpenText.EnterpriseLibrary.Administration.Lea.WebService.Archive.ArchiveAdministrationWrapper.getInvokeCommandResultsCommand(invokeCommand
invokeCommand)
at
OpenText.EnterpriseLibrary.Administration.Lea.Items.DeviceItem.LoadHardDiskMedia()
at
OpenText.EnterpriseLibrary.Administration.Common.Mvc.MultiKeyItemList`1.DoReload(Boolean
loadnow, Boolean propagate)
at
OpenText.EnterpriseLibrary.Administration.Common.Mvc.MultiKeyItemList`1.get_ItemList()
at
OpenText.EnterpriseLibrary.Administration.Common.Mvc.MultiKeyItemList`1.GetEnumerator()
at
OpenText.EnterpriseLibrary.Administration.Common.Mvc.MultiKeyItemList`1.ConvertToList()
at
OpenText.EnterpriseLibrary.Administration.Common.Mvc.DynamicController.GetSubItems()
at
OpenText.EnterpriseLibrary.Administration.Common.Mvc.DynamicController.OnGetSubControllers()
at
OpenText.EnterpriseLibrary.Administration.Common.Mvc.StandardController.GetSubControllers()
at
OpenText.EnterpriseLibrary.Administration.Common.Mvc.GenericListView.RefreshView()
at
OpenText.EnterpriseLibrary.Administration.Common.Mvc.GenericListView.set_Controller(IController
value)
at
OpenText.EnterpriseLibrary.Administration.Common.Mvc.StandardFilterListView.set_Controller(IController
value)
at
OpenText.EnterpriseLibrary.Administration.Common.Mvc.StandardFormViewControl.UpdateStructure()
at
OpenText.EnterpriseLibrary.Administration.Common.Mvc.StandardFormViewControl.set_Controller(IController
value)
at
OpenText.EnterpriseLibrary.Administration.Common.Mvc.StandardFormView.set_Controller(IController
value)
at
OpenText.EnterpriseLibrary.Administration.Common.Mvc.StandardFormView.Init()
at
OpenText.EnterpriseLibrary.Administration.Common.Mvc.StandardFormView.OnShow()



rcslog indicates:
ERROR [http-8080-Processor25] otx.LEA : com.opentext.ecm.lea.protocol.al.ALOutput - logException Caught exception of type com.opentext.ecm.lea.common.ICSException: (ELIB:6002) A Livelink user ARCLinkUser does not exist
com.opentext.ecm.lea.common.ALException: (ICS:0001) Caught exception of type com.opentext.ecm.lea.common.ICSException: (ELIB:6002) A Livelink user ARCLinkUser does not exist
at com.opentext.ecm.lea.protocol.al.ALRequest.runRequest


any idea?

Thanks

 

[ggriffit]

Sounds like you have changed the Livelink Admin password and not the Archive Server Admin password, so they are not different which is why you are getting the error when Livelink tries to connect to the Archive server to authenticate.

Greg Griffiths
Livelink Certified Developer & ECM Global Star Champion 2005 & 2006

http://www.greggriffiths.org/livelink/

 

[megapix]

Hi Greg
but...are two different pwd?
how do I update also the Archive Server Admin password?

forgive me but I'm new in OT

tnx

 

[appnair]

When you use a livelink user for archive administration as in your scenario(xECM ,Enterprise Library et al) what you are essentially doing is talking to 2 different systems thru tomcat(RCS). In the setup documentation it very clearly mentions that any user belonging in the 'aradmins' group in livelink can administer the archive server.So if you have not done so then create a group hard coded called 'aradmins' in livelink.Add the 'Admin' livelink user to that group.Now when you login to MMC you will get a pass through .I usually add the core services user to livelink and also to 'aradmins' so I can use the core-services user(the one that it makes you create when you are installing RCS/OTDS)

A ELS cheat sheet I have put in my website(about 2 years old but may give you some clues as well) at livelink.in

Well, if I called the wrong number, why did you answer the phone?
James Thurber, New Yorker cartoon caption, June 5, 1937
Certified OT Developer,Livelink ECM Champion 2008,Livelink ECM Champion 2010

http://www.tek-tips.com/faqs.cfm?fid=2884

http://www.linkedin.com/in/appunair

http://www.livelink.in

 

[megapix]

Hi Appnair and thanks for reply...
clear,in ECM, group "aradmins" have user Admin (and ARCLinkUser)
in ARK, under "Rules" --> CSAdmin have user Admin (and not ARCLinkUser)

rcslog --> (ELIB:6002) A Livelink user ARCLinkUser does not exist!

may be a suggestion for this issue?

tnx

 

[appnair]

are you able to use dsclient or dsh at the archive server box albeit on command line?

in dsclient if you are on the archive server box and if it knows loaclhost you can attempt

command prompt> dsclient localhost dsadmin ""
that rules out if archive server is up and running

More logging you can get by using the MMC and turning on selective stuff I don't recall everything but you can turn on livelink logging from your description
the lapi calls are working it is the tunnel that is broke so see if you see anything in the RCS logs(client soap request to the archive server)

I am confused by the statement when you say ?func=admin.sysvars what did you change there
did you change any security settings changing the password for admin does not involve that
livelink request handler.
However cookie generation etc plays a role

In any case I will not be able to understand as I do not know if this was a working thing or not.You will be better off supported by OT as once RCS misbehaves more often than not I have had to re-install it.


Well, if I called the wrong number, why did you answer the phone?
James Thurber, New Yorker cartoon caption, June 5, 1937
Certified OT Developer,Livelink ECM Champion 2008,Livelink ECM Champion 2010

http://www.tek-tips.com/faqs.cfm?fid=2884

http://www.linkedin.com/in/appunair

http://www.livelink.in

 

[megapix]

Hi,

More logging in rcslog:
WARN [http-8080-Processor25] otx.LEA : com.opentext.ecm.services.al.CapTokenPool - isValid while checking token Exception occured: Expired Token
ERROR [CS-WorkerThread #28] otx.cap_service : com.opentext.ecm.services.cap.service.mapping.driver.accessplan.GetExternalSearchDriverRequest - LESDriver throws an com.opentext.ecm.services.cap.spi.ServiceProviderException:Invalid username/password specified.
com.opentext.ecm.services.cap.spi.ServiceProviderException: Invalid username/password specified.
at com.opentext.ecm.services.cap.spi.les.LesAuthDriver.search(LesAuthDriver.java:731)
at com.opentext.ecm.services.cap.spi.AbstractDriver.search(AbstractDriver.java:77)
at com.opentext.ecm.services.cap.service.mapping.driver.accessplan.GetExternalSearchDriverRequest.execute(GetExternalSearchDriverRequest.java:169)
at com.opentext.ecm.services.cap.service.mapping.driver.accessplan.RequestExecutorThread.run(RequestExecutorThread.java:50)
at com.opentext.ecm.components.thread.HCSThreadPool$WorkerThread.run(HCSThreadPool.java:391)
2012-04-14 21:21:31,467 ERROR [http-8080-Processor25] otx.LEA : com.opentext.ecm.lea.protocol.al.ALOutput - logException Caught exception of type com.opentext.ecm.lea.common.ICSException: (ELIB:6002) A Livelink user ARCLinkUser does not exist
com.opentext.ecm.lea.common.ALException: (ICS:0001) Caught exception of type com.opentext.ecm.lea.common.ICSException: (ELIB:6002) A Livelink user ARCLinkUser does not exist

Now...I reset new pwd in old pwd...now it's ok!
But i must change the Admin pwd!

 

[appnair]

do you have OTDS as well as RCS in this setup?

Well, if I called the wrong number, why did you answer the phone?
James Thurber, New Yorker cartoon caption, June 5, 1937
Certified OT Developer,Livelink ECM Champion 2008,Livelink ECM Champion 2010

http://www.tek-tips.com/faqs.cfm?fid=2884

http://www.linkedin.com/in/appunair

http://www.livelink.in

 

[megapix]

Nothing OTDS...

 

[appnair]

then what i have done is basically use the livelink gui not the ot mmc client. You know livelink is doing all this stuff so there is a user/groups url somewhere in your livelink

http://<webserver>/llisapi.dll?func=user.listusers

I would find the user Admin and change his password there

func=admin.sysvars is basically a RH that controls livelink setup

the password that you change on that page is the admin.index password which is for controlling the administrative set of actions

or if you type the hidden rh func=admin.index

It is not the kuaf user 'Admin's' password


Try doing the real admin user's password as I indicated and see if you can log in


Well, if I called the wrong number, why did you answer the phone?
James Thurber, New Yorker cartoon caption, June 5, 1937
Certified OT Developer,Livelink ECM Champion 2008,Livelink ECM Champion 2010

http://www.tek-tips.com/faqs.cfm?fid=2884

http://www.linkedin.com/in/appunair

http://www.livelink.in

 

[megapix]

Hi appnair,
i found "

http://<webserver>/llisapi.dll?func=

user.listuser" link below "Enterprise" --> "User & Group" --> "Edit" .... is correct?

 

[appnair]

yes that is how user sessions 'Admin' is just a user in livelink like you or me
The admin.index password is used by any user with 'SA' privileges who needs to actually
do something to the system like adding a patch etc.

The way OT designed it is by allowing any user in livelink who is the 'aradmins' group
to do archive server administration.Traditionally archive server was done(even now it is possible)
over the command line or using a home written tomcat

Why would changing admin.index password break ,unless I looked in their code I would not understand it.


Well, if I called the wrong number, why did you answer the phone?
James Thurber, New Yorker cartoon caption, June 5, 1937
Certified OT Developer,Livelink ECM Champion 2008,Livelink ECM Champion 2010

http://www.tek-tips.com/faqs.cfm?fid=2884

http://www.linkedin.com/in/appunair

http://www.livelink.in