RSSO had to be reinstalled or TSPS is pointing to a new RSSO but users are unable to login to TSPS as there are no default users and groups. How can the default users and groups be recreated? |
The import user data utility can be used to recreate the default out of the box realm, users and usergroups that the TSPS installer creates. Assuming TSPS is on Windows, the instructions are given below. The steps are also applicable on Linux; just make the translation where needed (e.g. .bat -> .sh) Although the utility can be run on any machine that has Java installed and JAVA_HOME environment variable set, its best done from the TSPS machine. NOTE: An assumption made is that the JRE that is used for running this utility has the RSSO servers certificate imported into its trust store. For the TSPS JRE it should be true but for JREs on other machine, the import must be done manually using the keytool utility. If RSSO was installed using the TrueSight installer for Remedy SSO 11.x then that installer generates a self-signed certificate during install and a certificate import need not be done. Please perform the following steps to create the default out of the box users and usergroups in the * realm of a new RSSO server which was installed after TSPS was already installed. 1. Download the attached zip files to a temporary folder on the TSPS machine. 2. Extract UserDataMigration-Utility.zip. 3. Extract TSOM_Default_Users_Usergroups.zip and send the CSV file to the UserDataMigration-Utility directory. 4. (If Windows) Run a Command Prompt in Administrator mode. 5. Change directory to the UserDataMigration-Utility directory. 6. Invoke the importUserDataIntoRSSO.bat file from the command prompt window as follows after ensuring that the RSSO server being targeted has version 9.1 SP3 Patch 1 and *not* 9.1 SP4. For 9.1 SP4, the import utility will need to be run two times (first time realm creation succeeds but all users and usergroups creation fails, second time around users and usergroups will get created successfully) a. importUserDataIntoRSSO.bat -file TSOM_Default_Users_Usergroups.csv -rssoHostName <rsso_hostname> -rssoPort <rsso_port> -rssoProtocol <https/http> b. Provide the password for the RSSO server’s “Admin” user. Default password is “RSSO#Admin#” c. The import utility is not designed for user passwords to be specified in the CSV file, the passwords will be generated/specified during the import process. Specify n for a different random password to be created for each created user or specify y if you wish to specify a password of your choice that will be applied to all created users. 7. Once the script completes successfully, log into the RSSO server console and verify that the realm (*), usergroups (17 in number) and users (10 in number) are created successfully. 8. Change the password for the out of the box users to a password of your choice from the RSSO server console if required. 9. The bppmws_internal user account must be changed by following the steps on https://docs.bmc.com/docs/TSInfrastructure11304/pw-internaluser-937360465.html 10. The csm_user user account must be changed if there is integration to Change Management by following the steps on https://docs.bmc.com/docs/TSInfrastructure11304/integrating-with-bmc-change-management-to-enable-automated-blackout-policies-937358941.html#IntegratingwithBMCChangeManagementtoenableautomatedblackoutpolicies-Changingthepasswordforthecsm_useruseraccount There is a log file called migrateUserData.log that gets created during the import utility operation and it can be checked for errors. |