Skip to main content
Delphix

Change Delphix_OS User's LDAP Password for SQL Server Environments (KBA5834)

 

KBA

KBA# 5834

 

Issue

 

Customers using LDAP for Delphix_os user passwords which require them to be changed after a certain interval may run into issues. If there are large numbers of servers as well as Delphix Engines that will need to be updated.

For example the delphix_os user's password may get locked out and need to be reset.

Prerequisites

Windows account management password change policy.

Applicable Delphix Versions

Click here to view the versions of the Delphix engine to which this article applies
Major Release All Sub Releases
6.0 6.0.0.0, 6.0.1.0, 6.0.1.1, 6.0.2.0

5.3

5.3.0.0, 5.3.0.1, 5.3.0.2, 5.3.0.3, 5.3.1.0, 5.3.1.1, 5.3.1.2, 5.3.2.0, 5.3.3.0, 5.3.3.1, 5.3.4.0, 5.3.5.0 5.3.6.0, 5.3.7.0, 5.3.7.1, 5.3.8.0, 5.3.8.1, 5.3.9.0

5.2

5.2.2.0, 5.2.2.1, 5.2.3.0, 5.2.4.0, 5.2.5.0, 5.2.5.1, 5.2.6.0, 5.2.6.1

5.1

5.1.0.0, 5.1.1.0, 5.1.2.0, 5.1.3.0, 5.1.4.0, 5.1.5.0, 5.1.5.1, 5.1.6.0, 5.1.7.0, 5.1.8.0, 5.1.8.1, 5.1.9.0, 5.1.10.0

5.0

5.0.1.0, 5.0.1.1, 5.0.2.0, 5.0.2.1, 5.0.2.2, 5.0.2.3, 5.0.3.0, 5.0.3.1, 5.0.4.0, 5.0.4.1 ,5.0.5.0, 5.0.5.1, 5.0.5.2, 5.0.5.3, 5.0.5.4

4.3

4.3.1.0, 4.3.2.0, 4.3.2.1, 4.3.3.0, 4.3.4.0, 4.3.4.1, 4.3.5.0

4.2

4.2.0.0, 4.2.0.3, 4.2.1.0, 4.2.1.1, 4.2.2.0, 4.2.2.1, 4.2.3.0, 4.2.4.0 , 4.2.5.0, 4.2.5.1

4.1

4.1.0.0, 4.1.2.0, 4.1.3.0, 4.1.3.1, 4.1.3.2, 4.1.4.0, 4.1.5.0, 4.1.6.0

Resolution

To workaround this issue, we need to do the following:

  • A Delphix employee may need to login to the Delphix Engine and temporarily increase the environment monitoring period so the Delphix Environment Monitoring Task does not login and cause the password to lock out.
    • This will require a support case to be opened to engage Delphix support for this task.
  • Stop temporarily the Delphix Connector Service on all the Windows hosts. Delphix connects to each SQL Server instance via JDBC once per minute to see if there are new transaction logs or database dumps. Stopping the Delphix Connector Service should prevent the password from getting locked, which will allow the customer to update the password in the Delphix Engine Manage - Environment UI. 
    • Another alternative would be to disable all the VDBs/dSources en-masse but this would require downtime with your users. Stopping the Delphix Connector service would be invisible to end users.
    • If the Environment monitor can connect to a Delphix Connector, it will connect as the Delphix_OS user and try to execute scripts to load the dump/logs into the staging databases, etc.

 


Troubleshooting

<text>

From the Delphix Engine's support logs we'd see environment monitor tasks still running:

[2020-05-08 12:32:16,486][DEBUG][exception.DelphixUserException#logMe:70][EnvironmentMonitorTask-9][] Encountered User Exception in connect(), C3BaseConnectorConnectionImpl.java:504: exception.ccc.connect.failed.with.env {##.###.###.##|XXXX.XXX.XX.com|java.io.EOFException

 

DLPX-25742 - Disabling an environment should disable all the databases on it
DLPX-50165 - EnvironmentMonitorTask continues to run for objects under an environment after environment is disabled
Verify what environment_monitor.monitor.sleep_time is actually set to.
Set environment_monitor.monitor.sleep_time=3000000 on the engine temporarily
Disable the Delphix Connector service on all of the Windows hosts. 
Or disable all VDBs/dSources en-masse.
Change the password for all the environments.
Reset environment_monitor.monitor.sleep_time=300000

Related Articles

The following articles may provide more information or related information to this article:

  • link
  • link
  • link