Overview: A tool to troubleshoot and fix the system created CASA key: common-proxy-casa
Symptom: Can not install a product because the oes common proxy user fails to authenticate. The oes common proxy user's password was set/changed in iManager and now services dependent on the proxy user fail to start. The oes common proxy user's password was set/changed in iManager and the CASA key needs to be updated. Starting Novell-DNS reports "Unable to login Error code:-223"
Details: With this script you will be able to validate the password stored in CASA for the oes common proxy user is the same password in the directory.
You will have the opportunity to set the password for the oes common proxy user in iManager, then update the common-proxy-casa CASA key
The script will:
determine if the proxy user stored in the common-proxy-casa CASA key is the same listed in the /etc/sysconfig/novell/oes-ldap
display the name of the common proxy user
validate the password stored in CASA for the oes common proxy user is the same password in the directory
allow you to set a new password for the oes common proxy user with iManager and then update the common-proxy-casa CASA key
allow you to set a random password for the oes common proxy user and then update the common-proxy-casa CASA key
If the user is not listed in the /etc/opt/novell/proxymgmt/proxy_users.conf a random password can not be set, so a prompt to add the oes common proxy user to the proxy_users.conf will be displayed. Choose yes and the proxy_users.conf will be updated and the random password set.
Install: Download novell_common_proxy_casa_repair-1.0.0-0.noarch.rpm Install the rpm: novell_common_proxy_casa_repair-1.0.0-0.noarch.rpm
Usage: To run the tool type: novell_common_proxy_casa_repair
Example of fixing the CASA Credentials: The Proxy user is displayed and the credentials checked. In this example the password is incorrect.
Choosing yes to set a new password with iManager will pause the script to allow you time to set a new password in iManager.
Once the password has been set press the Enter key to continue and enter the new password at the prompt The CASA key will be updated and validated with some delays to allow for the password in eDirectory to sync.
Depending on eDirectory sync more time might need to be allowed. If the password check returns as not good, run the script 5 minutes later to validate the password again.
Then set a random password if desired. If a random password is set, the random password is validated to ensure the oes proxy user's password and the common-proxy-casa CASA key are insync.
This script is meant to fix the common-proxy-casa CASA key and not other CASA keys. If the server is running a service that is using the oes common proxy user they might need to be updated.