IBM Support

IBM AIX: Change the encrypted bind password in ldap.cfg

How To


Summary

This technote describes how to change the encrypted bind password in the /etc/security/ldap/ldap.cfg without having to reconfigure LDAP.

Steps

1. Use the -e option of secldapclntd to generate an encrypted password string based on the supplied password. For example, if the bind DN's password is "pass1234", run this command. Enclosing passwords in single quotation marks is recommended to prevent special characters from being interpreted by the shell.

/usr/sbin/secldapclntd -e 'pass1234'
An encrypted password string similar to the following is printed.

{DESv2}2D73C869 2585B66D841E713E4F9A1 2D1DA 5FF3EFD162C
Note: The string can contain spaces and is not terminated with a newline character.
2. Save a copy of /etc/security/ldap/ldap.cfg.
3. Edit /etc/security/ldap/ldap.cfg.
4. Search for the line starting with "bindpwd:".
5. Delete everything after the colon and then paste the encrypted password string at the end. In this example, the updated entry looks like this.

bindpwd:{DESv2}2D73C869 2585B66D841E713E4F9A1 2D1DA 5FF3EFD162C
6. Save the file.
7. Restart secldapclntd it to pick up the password change.

/usr/sbin/restart-secldapclntd

Additional Information

SUPPORT:

If the instructions in this document do not lead to resolution of the problem, follow these instructions to open a case.  The product must be under warranty or have an active and valid support contract.

a.  Document or take screen captures of all symptoms, errors, or messages.

b.  Capture any logs or data relevant to the issue.

c.  Contact IBM® to open a case.

   -For electronic support, visit the IBM Support Community:
     https://www.ibm.com/mysupport
   -If you require telephone support, visit this web page:
      https://www.ibm.com/planetwide/

d.  Provide a detailed description of the issue and reference this technote.

e.  Upload all of the details and data to the case.

   -You can attach files to the case in the IBM Support Community, or
   -Upload data to IBM test case server analysis at this URL:

    http://www.ibm.com/support/docview.wss?uid=ibm10733581

f.  Click here to submit feedback for this document.

Document Location

Worldwide

[{"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SWG10","label":"AIX"},"Component":"","Platform":[{"code":"PF002","label":"AIX"}],"Version":"All Versions","Edition":"","Line of Business":{"code":"LOB08","label":"Cognitive Systems"}}]

Document Information

Modified date:
27 January 2023

UID

ibm10959491