RE: Recovering RIM Password

Oh, and there is no direct way to recover the password. However, you could
use something like "John the Ripper" from pintday.org to do a brute-force
attack on the encrypted string that you retrieve from 'idlattr'.

-- Frank

-----Original Message-----
From: owner-tme10@xxxxxxxxxxxxxxxx [mailto:owner-tme10@xxxxxxxxxxxxxxxx] On
Behalf Of Frank Tate
Sent: Tuesday, March 22, 2005 4:30 PM
To: tme10@xxxxxxxxxxxxxxxx
Subject: RE: [tme10] Recovering RIM Password

To get the information, use:

RIM_OID=`wlookup -r RIM tec`
export RIM_OID
idlattr -tgv $RIM_OID rim_info RIM::RDBMS_Interface::Connect_Info >
/tmp/file

The output (in /tmp/file) will look like:

{ 1234567890.2.7#TMF_ManagedNode::Managed_Node#
1234567890.2.23#RIM::RDBMS_Interface# "tecdb" "tec_user"
"XXXX_Encrypted_Password" "/usr/sqllib" "tcpip" "/usr/sqllib" }

You can then set the password to ANYTHING OTHER THAN BLANK by changing the
string "XXXX_Encrypted_Password" to the new password. For example, change it
to "BLUE", as:

{ 1234567890.2.7#TMF_ManagedNode::Managed_Node#
1234567890.2.23#RIM::RDBMS_Interface# "tecdb" "tec_user" "BLUE"
"/usr/sqllib" "tcpip" "/usr/sqllib" }

Then set it with:

idlcall $RIM_OID set_rim_info < /tmp/file

If you then run the original 'idlattr' to check the value, you'll actually
see that it's set to:

{ 1234567890.2.7#TMF_ManagedNode::Managed_Node#
1234567890.2.23#RIM::RDBMS_Interface# "tecdb" "tec_user" "NEzUQwwSOhhUf0ET"
"/usr/sqllib" "tcpip" "/usr/sqllib" }

Notice that "BLUE" is now encrypted. This encrypting of the password is done
by the implementation of the 'set_rim_info' method.

So if you want to clear the password (set it to nothing), you would change
the file to:

{ 1234567890.2.7#TMF_ManagedNode::Managed_Node#
1234567890.2.23#RIM::RDBMS_Interface# "tecdb" "tec_user" "" "/usr/sqllib"
"tcpip" "/usr/sqllib" }

After running the 'idlcall ... set_rim_info' to have this change take
effect, you can run the 'idlattr' to check it and you'll see:

{ 1234567890.2.7#TMF_ManagedNode::Managed_Node#
1234567890.2.23#RIM::RDBMS_Interface# "tecdb" "tec_user" null "/usr/sqllib"
"tcpip" "/usr/sqllib" }

Notice the null where the password was previously seen.

-- Frank

Check out GBSCon on May 9th
http://gulfsoft.com/downloads/Presentations/GBSCon.pdf

Frank Tate
Frank_Tate@xxxxxxxxxxxx
Gulf Breeze Software
www.gulfsoft.com
phone: 512-426-6189 
fax:   208-730-1811
OpenESM Project
www.sourceforge.net/projects/gulfsoft


-----Original Message-----
From: owner-tme10@xxxxxxxxxxxxxxxx [mailto:owner-tme10@xxxxxxxxxxxxxxxx] On
Behalf Of Carnegie, Martin
Sent: Tuesday, March 22, 2005 2:37 PM
To: tme10@xxxxxxxxxxxxxxxx
Subject: RE: [tme10] Recovering RIM Password

I know that there is an idlcall, or was it objcall to set it to a blank.
I will see if I can find this.

----------------------------------------------
Martin Carnegie
ATCO I-Tek
Phone: 780.420.5068
Pager: 780.671.2895
mailto:martin.carnegie@xxxxxxxxxxxx
----------------------------------------------

The information transmitted is intended only for the addressee and may
contain confidential, proprietary and/or privileged material. Any
unauthorized review, distribution or other use of or the taking of any
action in reliance upon this information is prohibited. If you receive this
in error, please contact the sender and delete or destroy this message and
any copies.


-----Original Message-----
From: owner-tme10@xxxxxxxxxxxxxxxx [mailto:owner-tme10@xxxxxxxxxxxxxxxx]
On Behalf Of jason_shamroski@xxxxxxxxxxxx
Sent: Tuesday, March 22, 2005 11:19 AM
To: tme10@xxxxxxxxxxxxxxxx
Subject: re: [tme10] Recovering RIM Password


I am not aware of method recover it, you will need to shutdown all
applications using the RIM, kill any lingering RIM sessions for that
applicationn reset the database user password and then run wsetrimpw. In the
event that wsetrimpw asks you for the old password, you are best off
deleting and recreating the RIM object using wdel @RIM:rimname and then use
wcrtrim to rebuild it. 

make sure you backup your rim settings first by using wgetrim rimname and
redirect that to a file.



Jason Shamroski
Gulf Breeze Software
www.gulfsoft.com

"Chris Sparks" <SparksC@xxxxxxxx> wrote:
__________
>     The  documentationof our Tivoli Environmentis woefully inadequate.
We no  longer have the password for the RIM account in our TEC DB. I am
currently  installing Tivoli Data Warehouse 1.2 and need the password for
this  account.
> 
> Is there a way to  recover the RIM password?
> 
> Can you change the  account password for the RIM account in the DB
without issuing thewsetrimpw  command?
> 
> If a change is made  to the account in the RIM DB is there anything
that needs to be changed in  TEC?
> 
> Thanks for your  help.
> 
> Sparky
> 
> 
>   --- message truncated ---