The Documentum installation owner is the operating system user that owns the server executable and other related files along with the OS process when the server is running. It is originally determined when the server is installed, in fact, it is the logged-in user that performed the Documentum installation. Of course, it is preferable to install Documentum and never change the installation owner. However, sometimes company policy change and dictates that the original installation must be changed, for example, the user name does not conform to a new naming policy.<\/p>\n
This blog is the last one of the MigrationUtil blogs serie (please find links of other blogs below), I will show how to change the Installation Owner using the MigrationUtil. If you want to change only the password please read this blog<\/a>.<\/p>\n The installation owner user is important at the operating system and in the Docbase\/Content Server level, it is given the following privileges:<\/p>\n As you can deduce, the change of the installer owner is not a minor change within Documentum, so it is very critical. That’s why you have to prepare very well this operation and determine the best approach to execute it. <\/p>\n Below two change levels to be done:<\/p>\n Add the new installation user at the OS Level, in the same group as the actual installation user :<\/p>\n To know the group of actual installation user:<\/p>\n You need to create the user in all docbases, using below dql query :<\/p>\n Result:<\/p>\n Adapt the MigrationUtil configuration file like below:<\/p>\n Before you execute the migration you have to stop the docbase(s) and the docbroker(s).<\/p>\n Once every thing stopped, you can execute the migration script:<\/p>\n Have a look on the Migration log:<\/p>\n Change the permissions of all folders and files under DOCUMENTUM_HOME directory, if your content storage directories are not located under the DOCUMENTUM_HOME directory, change the permissions on each content storage directory as well.<\/p>\n Start the Docbroker and the docbase:<\/p>\n Check the docbase logs:<\/p>\n Try to connect with old installation owner to Docbase1 throw idql:<\/p>\n This is the expected behavior, the old installation owner is no more active.<\/p>\n The environment I used to make this test is a very simple one ( with only one Docbase, no HA, no FullText, aso) and created only for this purpose. It worked fine on my environment, but be careful if you have a more complex environment!<\/p>\n","protected":false},"excerpt":{"rendered":" The Documentum installation owner is the operating system user that owns the server executable and other related files along with the OS process when the server is running. It is originally determined when the server is installed, in fact, it is the logged-in user that performed the Documentum installation.<\/p>\n","protected":false},"author":46,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[229],"tags":[1213,129,15],"type_dbi":[],"class_list":["post-13173","post","type-post","status-publish","format-standard","hentry","category-database-administration-monitoring","tag-docbase","tag-documentum","tag-migration"],"acf":[],"yoast_head":"\n\n
\n
\n\t\t– Rights to start Documentum Services such as Docbase, Docbroker, Java Method Server and other installed Documentum products.
\n – Permission to change the Content Server configuration (i.e. upgrade, create, and delete docbases).
\n – Folder level permission to view data, configuration, and many log files located under the DOCUMENTUM_HOME directory.<\/li>\n
\n\t\t– Superuser and System Administrator rights.
\n\t\t– Set as the r_install_owner value in the dm_server_config object.
\n\t\t– Set as the operating system user to run several Administrative jobs.<\/li>\n<\/ul>\n\n
\n\t\t– Create the new install owner at the operating system level, it should correspond to the user_os_name<\/strong> of the new docbase user.<\/li>\n
\n\t\t– Create a new user in the docbase to be the installation owner and reassign the previous installation owner\u2019s objects to the new user. The MigrationUtil will be able to this part.<\/li>\n<\/ul>\nPreparation<\/h1>\n
Before any change<\/h2>\n
\n
\n\t\t– Run the Consistency Checker job<\/strong>: The report gives you a list of bad data within your system. Cleaning up inconsistent data before making the change will speed up the process.
\n\t\t– Purge all old log files<\/strong>: Changing the installation owner requires updating permissions on Documentum data and log files. The purge will reduce work on “unneeded data” and will greatly speed up the process.<\/li>\n
\n\t\t– Back up all the impacted environment before performing any major change within Documentum (Content Server files and the Database).<\/li>\n<\/ul>\nCreate new user – OS Level<\/h2>\n
\n[root@vmtestdctm01 ~]# useradd -g 1004 dmdocbase1\n[root@vmtestdctm01 ~]# passwd dmdocbase1\nChanging password for user dmdocbase1.\nNew password: \nRetype new password: \npasswd: all authentication tokens updated successfully.\n[root@vmtestdctm01 ~]# \n<\/pre>\n
\n[root@vmtestdctm01 ~]# cat \/etc\/passwd\n...\ndmadmin:x:1002:1004::\/home\/dmadmin:\/bin\/bash\n<\/pre>\n
Create new user – Docbase Level<\/h2>\n
\nCREATE dm_user OBJECT\nSET user_name = 'dmdocbase1',\nSET user_password = 'install164',\nSET user_login_name = 'dmdocbase1',\nSET user_address = 'dmdocbase1@dbi-services.com',\nSET description = 'This User is the owner of docbase1',\nSET user_os_name = 'dmdocbase1',\nSET client_capability = 8,\nSET user_privileges = 16,\nSET user_xprivileges = 56,\nSET user_source = 'inline password'\n<\/pre>\n
\nobject_created \n----------------\n1101e24080000500\n<\/pre>\n
Configure the MigrationUtil<\/h2>\n
\n[dmadmin@vmtestdctm01 ~]$ cat $DM_HOME\/install\/external_apps\/MigrationUtil\/config.xml \n<?xml version="1.0" encoding="UTF-8"?>\n<!DOCTYPE properties SYSTEM "http:\/\/java.sun.com\/dtd\/properties.dtd">\n<properties>\n<comment>Database connection details<\/comment>\n<entry key="dbms">oracle<\/entry> <!-- This would be either sqlserver, oracle, db2 or postgres -->\n<entry key="tgt_database_server">vmtestdctm01<\/entry> <!-- Database Server host or IP -->\n<entry key="port_number">1521<\/entry> <!-- Database port number -->\n<entry key="InstallOwnerPassword">install164<\/entry>\n<entry key="isRCS">no<\/entry> <!-- set it to yes, when running the utility on secondary CS -->\n\n<!-- <comment>List of docbases in the machine<\/comment> -->\n<entry key="DocbaseName.1">docbase1<\/entry>\n\n<!-- <comment>docbase owner password<\/comment> -->\n<entry key="DocbasePassword.1">install164<\/entry>\n\n...\n\n<entry key="ChangeInstallOwner">yes<\/entry>\n<entry key="InstallOwner">dmadmin<\/entry>\n<entry key="NewInstallOwner">dmdocbase1<\/entry>\n<entry key="NewInstallOwnerPassword">install164<\/entry>\n...\n<\/pre>\n
Migration<\/h1>\n
Stop Docbase(s) and Docbroker(s)<\/h2>\n
\n$DOCUMENTUM\/dba\/dm_shutdown_Docbase1\n$DOCUMENTUM\/dba\/dm_stop_DocBroker\n<\/pre>\n
Execute the migration script<\/h2>\n
\n[dmadmin@vmtestdctm01 ~]$ $DM_HOME\/install\/external_apps\/MigrationUtil\/MigrationUtil.sh\n\nWelcome... Migration Utility invoked.\n \nSkipping Docbase ID Changes...\n\nSkipping Host Name Change...\n\nChanging Install Owner...\nCreated new log File: \/app\/dctm\/product\/16.4\/product\/16.4\/install\/external_apps\/MigrationUtil\/MigrationUtilLogs\/InstallOwnerChange.log\nFinished changing Install Owner...Please check log file for more details\/errors\nFinished changing Install Owner...\n\nSkipping Server Name Change...\n\nSkipping Docbase Name Change...\n\nSkipping Docker Seamless Upgrade scenario...\n\nMigration Utility completed.\n<\/pre>\n
\n[dmadmin@vmtestdctm01 ~]$ cat \/app\/dctm\/product\/16.4\/product\/16.4\/install\/external_apps\/MigrationUtil\/MigrationUtilLogs\/InstallOwnerChange.log\nStart: 2019-12-12 05:14:37.191\nChanging Install Owner\n=====================\nInstallOwner: dmadmin\nNew InstallOwner: dmdocbase1\nChanging InstallOwner for docbase: Docbase1\nRetrieving server.ini path for docbase: Docbase1\nFound path: \/app\/dctm\/product\/16.4\/dba\/config\/Docbase1\/server.ini\n\nDatabase Details:\nDatabase Vendor:oracle\nDatabase Name:dctmdb.local\nDatabse User:Docbase1\nDatabase URL:jdbc:oracle:thin:@vmtestdctm01:1521\/dctmdb.local\nSuccessfully connected to database....\n\nProcessing Database Changes for docbase: Docbase1\nCreated database backup File '\/app\/dctm\/product\/16.4\/product\/16.4\/install\/external_apps\/MigrationUtil\/MigrationUtilLogs\/InstallOwnerChange_Docbase1_DatabaseRestore.sql'\nProcessing _s table...\nselect r_object_id,object_name from dm_sysobject_s where object_name = 'dmadmin'\nupdate dm_sysobject_s set object_name = 'dmdocbase1' where r_object_id = '0c01e24080000105'\nselect r_object_id,r_install_owner from dm_server_config_s where r_install_owner = 'dmadmin'\nupdate dm_server_config_s set r_install_owner = 'dmdocbase1' where r_object_id = '3d01e24080000102'\nselect r_object_id,user_name from dm_user_s where user_name = 'dmadmin'\nupdate dm_user_s set user_name = 'dmdocbase1' where r_object_id = '1101e24080000102'\nselect r_object_id,user_os_name from dm_user_s where user_os_name = 'dmadmin'\nupdate dm_user_s set user_os_name = 'dmdocbase1' where r_object_id = '1101e24080000102'\n...\nupdate dm_workflow_r set r_last_performer = 'dmdocbase1' where r_last_performer = 'dmadmin'\nupdate dm_workflow_s set r_creator_name = 'dmdocbase1' where r_creator_name = 'dmadmin'\nupdate dm_workflow_s set supervisor_name = 'dmdocbase1' where supervisor_name = 'dmadmin'\nSuccessfully updated database values...\nCommitting all database operations...\nFinished processing database changes for docbase: Docbase1\n\nProcessing server.ini changes for docbase: Docbase1\nBacked up '\/app\/dctm\/product\/16.4\/dba\/config\/Docbase1\/server.ini' to '\/app\/dctm\/product\/16.4\/dba\/config\/Docbase1\/server.ini_install_dmadmin.backup'\nUpdated server.ini file:\/app\/dctm\/product\/16.4\/dba\/config\/Docbase1\/server.ini\nUpdating acs.properties for docbase: Docbase1\nBacked up '\/app\/dctm\/product\/16.4\/wildfly9.0.1\/server\/DctmServer_MethodServer\/deployments\/acs.ear\/lib\/configs.jar\/config\/acs.properties' to '\/app\/dctm\/product\/16.4\/wildfly9.0.1\/server\/DctmServer_MethodServer\/deployments\/acs.ear\/lib\/configs.jar\/config\/acs.properties_install_dmadmin.backup'\nUpdated acs.properties: \/app\/dctm\/product\/16.4\/wildfly9.0.1\/server\/DctmServer_MethodServer\/deployments\/acs.ear\/lib\/configs.jar\/config\/acs.properties\nBacked up '\/app\/dctm\/product\/16.4\/dba\/dm_shutdown_Docbase1' to '\/app\/dctm\/product\/16.4\/dba\/dm_shutdown_Docbase1_install_dmadmin.backup'\nUpdated shutdown script: \/app\/dctm\/product\/16.4\/dba\/dm_shutdown_Docbase1\n...\nProcessing Services File Changes...\nBacked up '\/app\/dctm\/product\/16.4\/wildfly9.0.1\/server\/DctmServer_MethodServer\/deployments\/ServerApps.ear\/DmMethods.war\/WEB-INF\/web.xml' to '\/app\/dctm\/product\/16.4\/wildfly9.0.1\/server\/DctmServer_MethodServer\/deployments\/ServerApps.ear\/DmMethods.war\/WEB-INF\/web.xml_install_dmadmin.backup'\nUpdated web.xml: \/app\/dctm\/product\/16.4\/wildfly9.0.1\/server\/DctmServer_MethodServer\/deployments\/ServerApps.ear\/DmMethods.war\/WEB-INF\/web.xml\nWARNING...File \/app\/dctm\/product\/16.4\/wildfly9.0.1\/server\/DctmServer_MethodServer\/deployments\/bpm.ear\/bpm.war\/WEB-INF\/web.xml doesn't exist\nNo need to update method server startup script: \/app\/dctm\/product\/16.4\/wildfly9.0.1\/server\/startMethodServer.sh\nFinished processing File changes...\n\nFinished changing Install Owner...\nEnd: 2019-12-12 05:14:39.815\n<\/pre>\n
Change permissions<\/h2>\n
\n[root@vmtestdctm01 ~]$ chown -R dmdocbase1 \/app\/dctm\n<\/pre>\n
Start Docbase(s) and Docbroker(s)<\/h2>\n
\n$DOCUMENTUM\/dba\/dba\/dm_launch_DocBroker\n$DOCUMENTUM\/dba\/dba\/dm_start_Docbase1\n<\/pre>\n
Post Migration<\/h1>\n
\n...\n2019-12-12T05:30:09.982774 13301[13301] 0000000000000000 [DM_MQ_I_DAEMON_START]info: \"Message queue daemon (pid : 13570, session 0101e24080000456) is started sucessfully.\"\n2019-12-12T05:30:20.255917 13569[13569] 0101e24080000003 [DM_DOCBROKER_I_PROJECTING]info: \"Sending information to Docbroker located on host (vmtestdctm01) with port (1490). Information: (Config(Docbase1), Proximity(1), Status(Open), Dormancy Status(Active)).\"\nWed Dec 12 05:30:32 2019 [INFORMATION] [AGENTEXEC 13628] Detected during program initialization: Version: 16.4.0000.0248 Linux64\nWed Dec 12 05:30:35 2019 [INFORMATION] [AGENTEXEC 13628] Detected during program initialization: Agent Exec connected to server Docbase1: [DM_SESSION_I_SESSION_START]info: \"Session 0101e24080000500 started for user dmdocbase1.\"\n<\/pre>\n
\n...\nConnecting to Server using docbase Docbase1\nCould not connect\n[DM_SESSION_E_AUTH_FAIL]error: \"Authentication failed for user dmadmin with docbase Docbase1.\"\n<\/pre>\n