Documentum: How to recover database password

 

Copy the content of dbpasswd.txt file from the following folder:

$DOCUMENTUM/dba/config/<REPOSITORY NAME>

Content will be in this format:

DM_ENCR_TEXT_V2=AAAAEFpxldCW8pnF4gbWPFV+1jP8TEK9HS8d28MW0HwWw+C3uV/+rshuoJ/3j

Open IAPI, and do the following:

$>iapi
$>Please enter a docbase name (docubase): <REPOSITORY NAME>
Please enter a user (dmadmin):
Please enter password for dmadmin:
$>initcrypto,c
$>decrypttext,c,DM_ENCR_TEXT_V2=AAAAEFpxldCW8pnF4gbWPFV+1jP8TEK9HS8d28MW0HwWw+C3uV/+rshuoJ/3j

 

 

Advertisements

Documentum: 3 Ways to Create a User in Documentum

Here are the three ways to create a user in Documentum:

DFC

———————————-

IDfUser dfcUser = (IDfUser) getSession().newObject("dm_user");
dfcUser.setUserName("username");
dfcUser.setUserLoginName("username");

dfcUser.setString("user_source","inline password");
dfcUser.setString("user_password","somepassword");
dfcUser.setString("user_os_name","username");
dfcUser.setString("description","new user description");

dfcUser.setDefaultFolder("/Temp", true);
dfcUser.save();

DQL
—————————-

create “dm_user” object
set client_capability=2,
set default_folder=’’,
set home_docbase=’’,
set mailto:user_address=’a@abc.com’,
set user_os_domain=’’,
set user_name=’’,
set user_os_name=’’,
set user_privileges=0;

API
——————————-

create,c,dm_user
set,c,l,user_name
Admin1
set,c,l,client_capability
8
set,c,l,default_folder
/Temp
set,c,l,user_group_name
???
set,c,l,user_os_name
Admin1
set,c,l,user_privileges
16
set,c,l,user_state
0
set,c,l,acl_name
???
set,c,l,acl_domain
???
save,c,l

Documentum: Useful Documentum APIs

Create a new group:
create,c,dm_group
set,c,l,group_name
<group_name>
set,c,l,group_display_name
<Group Display Name>
set,c,l,group_class
group
set,c,l,owner_name
<group_owner_name>
set,c,l,description
<Group Description>
set,c,l,group_admin
<group_admin_name>
save,c,l

Create a new ACL:
create,c,dm_acl
set,c,l,object_name
<acl_name>
set,c,l,owner_name
dm_dbo
set,c,l,description
<ACL Description>
grant,c,l,'dm_owner',7
save,c,l
Retrieve a group:
retrieve,c,dm_group where group_name='<name_of_group>'
Retrieve an ACL:
retrieve,c,dm_acl where object_name='<name_of_acl>'
Grant permissions on an ACL:

You run the grant or revoke permissions after you have retrieved the acl using the retrieve command. The ‘l’ in an api command after the ‘c’ refers to the last object retrieved/fetched.

grant,c,l,'dm_world',7

The numbers represent the level of permission as given below:

  • NONE (1): A user with NONE access has no access to the object, which means the object is not shown to this user in any application and is not returned as a result of a query run by this user.
  • BROWSE (2): A user with BROWSE access can see the attributes of an object, but is not allowed to view the content. The user can see the object within the folder it is in, and see it in query results.
  • READ (3): A user with READ access can view the attributes and content of a document, but can not modify it or it’s properties.
  • RELATE (4): A user with RELATE access can view the attributes and content and can annotate the content, but cannot modify the content itself.
  • VERSION (5): A user with VERSION access can read, annotate, and create new versions of a document, but can not overwrite the document.
  • WRITE (6): A user with WRITE access can read, annotate, version, and overwrite the current version, but can not delete it. A user with WRITE access can modify the attributes of a document without checking it out.
  • DELETE (7): A user with DELETE permission can do all of the above, as well as delete the object. DELETE permission is the highest level of permission that a user can have on an object.
Revoke permissions on an ACL:
revoke,c,l'<user_or_group_name>'
Create a new folder:
create,c,dm_folder
set,c,l,object_name
<folder_name>
set,c,l,acl_domain
dm_dbo
set,c,l,acl_name
<acl_name>
link,c,l,'/<cabinet_name>/<folder_name>'
save,c,l
 Create a new user:
create,c,dm_user
set,c,l,user_name
Admin1
set,c,l,client_capability
8
set,c,l,default_folder
/Temp
set,c,l,user_group_name
???
set,c,l,user_os_name
Admin1
set,c,l,user_privileges
16
set,c,l,user_state
0
set,c,l,acl_name
???
set,c,l,acl_domain
???
save,c,l