Can the NuGenesis LMS Oracle schema accounts be changed? - WKB3461
ENVIRONMENT
- NuGenesis 9
- NuGenesis 8
ANSWER
The chart below identifies which accounts you can change.
- NGPROJMGR - The SDMS application account responsible for administering the NuGenesis applications through the application interface.
- NGSDMS60 - SDMS schema owner. This account owns all database objects related to storing SDMS application data and metadata, including file data and print data.
- NGSYSUSER - SDMS schema owner. This account owns all SDMS database objects related to application user privileges and the Audit Trail.
- NGPROXY - SDMS schema “superuser” account. Performs all database activities requested through the SDMS interfaces via object privilege grants. This account does not own any database objects.
- NGSTATICUSER - This account's sole purpose is to invoke the NGPROXY account on behalf of SDMS Application Users. NGSTATICUSER does not own any database objects.
- ELNPROD - LMS schema owner.
- SPSV - The schema owner for the spectra/structure search module in LMS
- SLIM - the schema owner for the NuGenesis Stability module
|
Oracle Account Name |
Can be expired or locked? |
Default status? |
Profile Required? |
Can Password be changed? |
Password Change Method Required |
|
NGPROJMGR |
Yes |
Open |
No |
Yes |
ALTER USER command |
|
NGPROXY |
No |
Open |
SDMSPROFILE3 |
No1 |
NuGenesis Stored Procedure1 |
|
NGSYSUSER5 |
Yes | Expired & Locked |
No |
Yes |
ALTER USER command |
|
NGSDMS605 |
Yes |
Expired & Locked |
No |
Yes |
ALTER USER command |
|
NGSTATICUSER |
No |
Open |
SDMSPROFILE3 |
No2 |
N/A - password cannot be changed |
|
ELNPROD |
No |
Open |
SDMSPROFILE3 |
Yes4 |
ALTER USER command |
| SPSV | No | Open | SDMSPROFILE | Yes | ALTER USER command |
| SLIM | No | Open | SLIMPROFILE | Yes | ALTER USER command |
- You cannot use the alter user command to change the password for NGPROXY. You must use Waters-supplied Stored Procedures.
- You cannot change the password for this user. This user's sole purpose is to invoke NGPROXY, so this does not present a security issue.
- Use the Waters created profile SDMSPROFILE without password expiration for these accounts.
- Changing the ELNPROD password requires reconfiguration of the NuGenesis LMS application modules.
- The NGSDMS60 and NGSYSUSER accounts should remain in a locked status with expired passwords for security purposes.
ADDITIONAL INFORMATION
If you change the ELNPROD password, you must configure the LMS server and the LMS Document Creator Service to use the new password.
Enhancement request CRI-2051 was filed to request the possibility of changing ngstaticuser's password. In all versions of NuGenesis up to at least 9.0.2, the ngstaticuser password is embedded in the SDMS application code and therefore the Oracle account's password cannot be changed.
id3461, NGLMS, NGLMSLIC, NGLMSOPT, SDMS, SDMS8, SDMS8NU, SUPISDMS, SUPNG