2014-03-26 07:09 AM
IHAC with a security policy that requires strong passwords, even for internal read-only accounts. Their security group wants a strong password for the WFA user account. How do we change that given we dont have root credentials for the DB?
Also, the WFA application is run as a service account. Is there a way to use this service account for our AD queries within the workflow without having to store credentials at all? We are using the activedirectory get-adgroupmember calls withing the workflow.
Solved! SEE THE SOLUTION
2014-03-26 08:38 AM
You don't need to know the root password to change a user password. Any mysql user including the default default user 'wfa' is allowed to change his/her own login password.
If you have some mysql client, login to WFA database using the Credaentials wfa/Wfa123 and then execute the below query.
SET PASSWORD = PASSWORD('
New password in clear text');
You are done.
If you don't have a Mysql client, do the following:
1. Go to folder location <WFA_installation_dir>\WFA\mysql\bin
C:\NetApp\WFA\mysql\bin>mysql.exe -u wfa -p
Enter password: ********
Welcome to the MySQL monitor. Commands end with ; or \g.
Your MySQL connection id is 583
Server version: 5.5.29-enterprise-commercial-advanced MySQL Enterprise Server -
Advanced Edition (Commercial)
Copyright (c) 2000, 2012, Oracle and/or its affiliates. All rights reserved.
Oracle is a registered trademark of Oracle Corporation and/or its
affiliates. Other names may be trademarks of their respective
Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.
mysql> SET PASSWORD = PASSWORD('new Password in clear text');
Query OK, 0 rows affected (0.00 sec)
2014-03-26 08:49 AM
@ Also, the WFA application is run as a service account. Is there a way to use this service account for our AD queries within the workflow without having to store credentials at all? We are using the activedirectory get-adgroupmember calls withing the workflow.
Not sure if I got your point exactly, but are you trying to run the WFA Services as an Active Dirctory Domain User account? If yes, you can do it only when your WFA server is also in the same domain.