Changing Velum Admin Password about doc-caasp HOT 6 CLOSED

There seems to be a problem finding the admin user in the database with the attributes. I'm looking into this.

from doc-caasp.

Reopening.

from doc-caasp.

Assuming that there exists a cn=admin user in the LDAP DB, the following command would output the full DN of that user:
( executed from LDAP container context )
slapcat -n1 | grep "dn: cn=admin"

On a cluster configured with the default settings this command outputs the following:
dn: cn=admin,dc=infra,dc=caasp,dc=local

If nothing appears one could browse through the slapcat -n1 output to see everything that is there.

If there is no user present then something has gone wrong. When a cluster is first created the cn=admin user is created by Velum; so it should always be there.

My guess without interacting with the specific cluster having the problem is that the domain for the cn=admin user is different. The default domain context is "infra.caasp.local". It is possible for that domain to be configured differently for a user.

from doc-caasp.

@otuominen Try this:
Follow the instructions until you are in the bash of the LDAP container.
Then run: slapcat -n1 | grep uniqueMember
uniqueMember: uid=mnapp,ou=People,dc=infra,dc=caasp,dc=local <- this line will look different for you.

Then replace the uid in the password change command with the uid from the output.

So replace uid=test here with the uid from your output:

bash-4.3# ldappasswd -H ldaps:// -D "cn=admin,dc=infra,dc=caasp,dc=local" -w $(cat /var/lib/misc/infra-secrets/openldap-password) uid=test,ou=People,dc=infra,dc=caasp,dc=local -S

If any of the other attributes are different, change them too (should not be the case).

from doc-caasp.

@otuominen Try this:
Follow the instructions until you are in the bash of the LDAP container.
Then run: slapcat -n1 | grep uniqueMember
uniqueMember: uid=mnapp,ou=People,dc=infra,dc=caasp,dc=local <- this line will look different for you.

Then replace the uid in the password change command with the uid from the output.

So replace uid=test here with the uid from your output:

bash-4.3# ldappasswd -H ldaps:// -D "cn=admin,dc=infra,dc=caasp,dc=local" -w $(cat /var/lib/misc/infra-secrets/openldap-password) uid=test,ou=People,dc=infra,dc=caasp,dc=local -S

If any of the other attributes are different, change them too (should not be the case).

So yes, slapcat -n1 | grep uniqueMember` is essential that you capture correct uid!

bash-4.3# slapcat -n1 | grep uniqueMember
5c067044 mdb_monitor_db_open: monitoring disabled; configure monitor database to enable
uniqueMember: uid=admin,ou=People,dc=infra,dc=caasp,dc=local
bash-4.3# ldappasswd -H ldaps:// -D "cn=admin,dc=infra,dc=caasp,dc=local" -w $(cat /var/lib/misc/infra-secrets/openldap-password) uid=admin,ou=People,dc=infra,dc=caasp,dc=local -S
New password:
Re-enter new password:

That should be included as info. Thanks!

from doc-caasp.

I have already changed the instructions to extract this information and this will be updated with a future update of the docs. I'll close this issue.

from doc-caasp.