Resetting passwords

In cases where admin passwords cannot be restored (usually after migrating from one server to another, after a hard recovery of vault failures, etc.) or when there is a necessity to reset all passwords for all users, follow the steps below.

1. Stop OpenIAM with the openiam-cli stop command.
2. Execute the following SQL commands:

UPDATE LOGIN SET PASSWORD='passwd00';
DELETE FROM USER_KEY;
UPDATE MANAGED_SYS SET PSWD = NULL;
DELETE FROM PWD_HISTORY;
DELETE FROM USER_IDENTITY_ANS;
UPDATE SYNCH_CONFIG SET SRC_PASSWORD = NULL;

These commands will reset all passwords, and when you restart the ESB, a new JKS key will be generated and stored in the vault.

3. Ensure that the transaction is committed.
4. Start OpenIAM with the openiam-cli start command.

Note: Please do not use this approach in a production environment.