13.5 Changing Proxy Users

Credentials are stored either in OES Credential Store or in the Local File. When the eDirectory credentials of the DNS proxy user change, the OES Credential Store or the local file (a file used on the local system) must be updated with these changes.

Changing Credentials in OES Credential Store

If the credentials are stored in OES Credential Store, the credentials must be updated in the OES Credential Store storage of both the root user and the named user. This is done by using oescredstore or dns-inst/dns-maint.

  • Updating through oescredstore:

    • To update the credentials in OES Credential Store for the root user, log in as the root user or change to the root user by using su command. Then use the following command to update OES Credential Store:

      oescredstore -s -n dns-ldap -u username -p password
where username = <cn=admin, o=novell>, password = <secret>

      This updates the credentials in root OES Credential Store storage.

    • To update the credentials in OES Credential Store of the named user, change your login to the named user using the su named command. Then use the following command to update the OES Credential Store:

      oescredstore -s -n dns-ldap -u username -p password
where username = <cn=admin, o=novell>, password = <secret>

      This updates the credentials in the named OES Credential Store storage.

  • Updating through dns-inst/dns-maint: The dns-inst/dns-maint utility is also used to update the OES Credential Store credentials. Use the following syntax:

    dns-inst <Credential storage (0->file, 1->CASA)>
dns-maint <Credential storage (0->file, 1->CASA)>

    For example:

    dns-maint -ca <Acme-tree> Acme.com 636 cn=admin,o=Acme secret cn=dns-admin,o=dns-domain secret 1 ou=Sales,o=Acme ou=Finance,o=Acme o=acme o=acme 1 acme-host acme.americas.com 0

Changing Credentials in the Local File

If credentials are stored in the local file, then the credentials are updated using the dns-inst or the dns-maint utility. Use the following syntax:

dns-inst <Credential storage (0->file, 1->CASA)>

or

dns-maint <Credential storage (0->file, 1->CASA)>

For more information, see Section A.5, DNS Server Configuration Utility and Section A.6, DNS Server Maintenance Utility.