How to use a digested password to secure oemanager and manager apps in 11.6 PASOE

How to use a digested password to secure oemanager and manager apps in 11.6 PASOE

1. Generate a hashed password

e.g.
proenv>$DLC/servers/pasoe/bin/digest.sh -a sha-512 password
password:b109f3bbbc244eb82441917ed06d618b9008dd09b3befd1b5e07394c706a8bb980b1d7785e5976ec049b46df5f1326af5a2ea6d103fd07c95385ffab0cacbc86

2. Add new userdatabase in:
Edit conf/server/xml and add below userdatabase in.

<!-- feature:begin:UserDatabase-sha:off
<Realm className="org.apache.catalina.realm.UserDatabaseRealm"
resourceName="UserDatabase" 
digest="sha-512" />
feature:end:UserDatabase-sha:off -->

Note: 
Add under <!-- feature:begin:UserDatabase:on XXXXXXXXXXXXXX --> 
3. Disable default userdatabase and enable new userdatabase:

e.g.
proenv><catalina_base>/bin/tcman.sh feature UserDatabase=off
proenv><catalina_base>/bin/tcman.sh feature UserDatabase-sha=on

Check if feature is enabled:

e.g.
proenv><catalina_base>/bin/tcman.sh feature
UserDatabase=off
UserDatabase-sha=on

4. Use the new hashed password:
Edit conf/tomcat-users.xml

e.g.
<user username="tomcat" password="b109f3bbbc244eb82441917ed06d618b9008dd09b3befd1b5e07394c706a8bb980b1d7785e5976ec049b46df5f1326af5a2ea6d103fd07c95385ffab0cacbc86" roles="ROLE_PSCAdmin,ROLE_PSCOper,ROLE_PSCUser" />

 

11.7 PASOE runs on Tomcat 8.5
11.6 PASOE runs on Tomcat 7
The operation of credentialhandler works differently in Tomcat 7 VS. Tomcat 8.5.

To enabled digested password in 11.7 please refer to article:
 How to use digested password to secure oemanager and manager apps in 11.7 PASOE