How to change cn=Directory Manager password in Sun DS

Reset cn=Directory Manager password

Procedure to reset a lost/forgotten cn=Directory Manager password on a Sun DSEE 6.3 LDAP server.

In this example, Sun DSEE 6.3 is installed in /opt/SUNWdsee with a directory server instance in /var/ds.

Procedure

Stop the directory server instance. (I don't know if the password can be changed to a running directory server.)

# dsadm stop /var/ds

Generate the SSHA password hash. Sun DSEE 6.3 does not include/create getpwenc, a shell script front-end to pwdhash, but it does include the pwdhash utility needed to generate SSHA hashes.

$ /opt/SUNWdsee/ds6/bin/pwdhash

usage: /opt/SUNWdsee/ds6/bin/pwdhash -D instance-dir [-H] [-s scheme | -c comparepwd ] password...

$ /opt/SUNWdsee/ds6/bin/pwdhash -D /var/ds -s SSHA password

{SSHA}sdhtz2s3JqaETqrkRxhWvrPTNCbec4o7y1o3OA==

Change the nsslapd-rootpw line in config/dse.ldif to use the SSHA hash generated above.

# vi /var/ds/config/dse.ldif

nsslapd-rootpw: {SSHA}sdhtz2s3JqaETqrkRxhWvrPTNCbec4o7y1o3OA==

Start the directory server instance.

# dsadm start /var/ds