Changing the administrative password
Users that authenticate to the Configuration API or the administrative console are stored in cn=RootDNs,cn=config
. The setup
tool automatically creates one administrative account when performing an installation. Accounts can be added or changed with the dsconfig
tool.
About this task
Root users are governed by the Root Password Policy and by default, their passwords never expire. However, if a root user’s password must be changed, use the ldappasswordmodify
tool.
Steps
-
Open a text editor and create a text file containing the new password. In this example, name the file rootuser.txt.
$ echo password > rootuser.txt
-
Use
ldappasswordmodify
to change the root user’s password.$ bin/ldappasswordmodify --port 1389 --bindDN "cn=Directory Manager" \ --bindPassword secret --newPasswordFile rootuser.txt
-
Remove the text file.
$ rm rootuser.txt