Implementation Guide › Changing CA Access Control Service Account Settings › Service Account Passwords › Change the RDBMS_service_user Password

Change the RDBMS_service_user Password

The RDBMS_service_user account authenticates communication between the Enterprise Management Server and the RDBMS. This account is not named RDBMS_service_user. You create this account when you prepare the database for CA Access Control Enterprise Management, and you provide the account name and password, along with other database information, when you install CA Access Control Enterprise Management.

You may need to regularly change the RDBMS_service_user password to comply with your organization's security and password policies. You must change the password on both the Enterprise Management Server and the RDBMS.

Before you change the password for this account, note the following:

• The default password for this account is the password that you specified when you created the user.
• The password has the following limitations:
  • Must be 1-50 characters long
  • Must not contain high ASCII characters
  • Must not contain double quotes ( " )
  • Must adhere to RDBMS password rules
• The password is stored in the following XML file, where JBoss_home is the directory in which you installed JBoss:

  JBoss_home/server/default/conf/login-config.xml

To change the RDBMS_service_user password

1. Change the password using your database tools.

   Note: For more information about how to change the password, see the MS SQL or Oracle documentation.

2. Change the password in the Enterprise Management Server:
   1. Stop JBoss Application Server.
   2. Encrypt the clear text password.
   3. Change the password in the login-config.xml file.
   4. Restart JBoss Appplication Server.
   5. Verify that you can log in to CA Access Control Enterprise Management.

      JBoss is successfully started and the password is changed in the Enterprise Management Server.

   The RDBMS_service_user password is changed in all locations.

Example: Change the Password in the login-config.xml File

This snippet of the login-config.xml file shows you one instance of the changed RDMBS_service_user password. The user is named caidb01. The password has been encrypted and is }>8:Jt^+%INK&i^v:

<application-policy name="imobjectstoredb">
	<authentication>
		<login-module code="com.netegrity.jboss.datasource.PasswordEncryptedLogin" 
		flag="required">
			<module-option name="userName">caidb01</module-option>
			<module-option name="password">
			{AES}:}>8:Jt^+%INK&i^v==</module-option>
			<module-option name="managedConnectionFactoryName">
			jboss.jca:name=jdbc/objectstore,service=NoTxCM</module-option>
		</login-module>
	</authentication>
</application-policy>