Problem with cfg with RS_random user

[Former Member]

Hi

Need  help . We have upgraded ASE 15.5 and RS 15.6 to   ASE 15.7 and RS 15.7 on new host .  After upgrade Since Last two weeks it was working fine .(There are several  replication servers/route which are still running in 15.6) .

This weekend host was bounced and some how we last cfg file ... no idea how ...(this happened second time on this host) . Now replication server is down ..

I tried  below steps ... temporally it is up but if we restart it will go down again ..

1) Replication server was not coming up due to missing cfg file

2) Copy the CFG file from old host (REP- 15.6) to current server

3) try to start repserver but it failed due to missing enry of RS_random

4) Copy the RS_random from another server to this server

5) try to start replication . failed with error

Failed to decrypt because of invalid salt.  --

understand  failed because i copied  RS_random  from different server   .

Failed to decrypt because of invalid salt.

E. 2016/08/08 11:58:12. ERROR #31331 GLOBAL RS(GLOBAL RS) - ic\encrypt\enc_csi.c(1788)

The value for entry 'RS_random' in config file is invalid.

F. 2016/08/08 11:58:12. FATAL ERROR #18028 GLOBAL RS(GLOBAL RS) - \servmain\servmain.c(596)

Initialization failed. Server is shutting down.

Got one Solution ...

2065456 - ERROR #171: Failed to decrypt because of invalid salt - SAP Replication Server

I follow the below steps and able to start replication server but last step is failing in  rs_init -- saying out your "The current site version is '1550'.

this will work only after 15.7.   but we can not upgraded  site version 15.7 as other servsre (ID servers and many more servers are still in lower version)

But if i shutdown replication servers then it will not start again due to RS_random.  So we have to reset sa password and remove rs_random and restart again replication ....

So can we resolve this issue without upgrading  site_version.

1> sysadmin site_version

2> go

The current site version is '1550'.

1> admin version

2> go

Version

------------------------------------------------------------------------------------------------------------------

Replication Server/15.7.1/EBF 25153 SP301 rs1571sp301/NT (IX86)/Windows 2008 R2/2093/OPT/Tue Sep 01 15:17:21 2015

1>

Appreciate your help ....

Cause

rs_random is lost or corrupted.

Resolution

1. Delete rs_random line in RS_SEREVR.cfg file under $SYBASE/$SYBASE_REP/install
2. Add a line 'reset_password=sa' at the bottom of the Replication Server configuration file RS_SERVER.cfg
3. Start the replication Server and search 'Temporary password' in the replication server errorlog to find the sa temporary password. For example,
        Temporary password is mmnfkvm6.
4. Connect to (ie - isql) the replication server with the sa temporary password and change it to the old password
        alter user sa set password to <old_sa_password>
        go
5. List all the users and maint users in RSSD
        connect to RSSD
        go
        rs_helpuser
        go
6. Reset the passwords of all the users such as _ra user , _rsi user, RSSD prim user and ID_user
        alter user RS_SERVER_ra set password to <old_ra_user_password>
        go
        alter user RS_SERVER_rsi set password to <old_rsi_user_password>
        go
        alter user RS_SERVER_RSSD_prim set password to <old_RSSD_prim_usere_passd>
        go
        alter user ID_user set password to <old_ID_user_password>
        go
        alter user <other_rs_user> set password to <old_user_password>
        go
7. Reset the passwords of all maint users
        alter connection to RS_SERVER_RSSD.RS_SERVER_RSSD set password to <old_RSSD_maint_user_password>
        go
        alter connection to DS.DB set password to <old_maint_user_password>
        go
8. Reset the RSSD prim user, maint user and ID_user passwords in CFG file with rs_init
   Select Replication Server, then select Continue
   Select Alter a Replication Server Configuration File Password, then select Continue
9. Complete the screen as follows
   Enter the name of the Replication Server whose configuration file you want to update
   Enter the login name for the Replication Server “sa” user
10. Enter the password for the Replication Server “sa” account
    Enter the full path name for the Replication Server configuration file
    Enter the parameter for the password you want to alter. The parameters for the password that can be used are:
    RSSD_primary_pw_enc – for the RSSD primary user
    RSSD_maint_pw_enc – for the RSSD maintenance user
    ID_pw_enc – for the ID Server user name
    Enter the new password you want to use
    Select Continue to save your changes - rs_init displays:
         Execute the Replication Server tasks now?
    Select Yes.
    rs_init shuts down the Replication Server, then records the new password in the Replication Server configuration file. When that process is complete, rs_init displays this message:
         Configuration completed successfully.
    Choose OK. You see the Configure Replication System window
    Choose Exit to quit rs_init
    Restart the Replication Server
11. Shutdown and restart the server
12. Check replication server errorlog to make sure no ERROR# 171 any more. If there is, you need to repeat step 6 or step 7 for the user which causes the error.
    ERROR #171 GLOBAL RS(GLOBAL RS) - /enc_csi.c(588)
    Failed to decrypt because of invalid salt

[former_member285566]

Hi,

If you don't set site version to 15.7.1 or later, you use rs_init from the version of the replicaiton server that are upgrading from, which is 15.5, to change the encrpted password in configuration file. The document about "Password Encryption" is at the link - http://infocenter.sybase.com/help/topic/com.sybase.infocenter.dc35817.1571/doc/html/jer1334141712511....  You do the same steps in the KBA except in step 8,  set  Sybase environment to 15.5 and start rs_init.

In rs_init, select 1 to set repserver name and select 4 to specify 1571  Replication Server configuration file.

Ctrl-a Accept and Continue, Ctrl-x Exit Screen, ? Help.

Enter the number of your choice and press return: 4

Enter the Replication Server configuration file location:

Ctrl-a Accept and Continue, Ctrl-x Exit Screen, ? Help.

Enter the number of your choice and press return: 4

Enter the Replication Server configuration file location:

ALTER A REPLICATION SERVER CONFIGURATION FILE PASSWORD

1.  Replication Server Name:  PRS

2.  RS SA user:  sa

3.  RS SA password:

4.  Replication Server configuration file:  /work/liub/sybase/RS1571SP304/REP-1

5_5/install/PRS.cfg

5.  Configuration file parameter for password:

6.  New password:

Binh Liu

[Former Member]

Thanks got a very simple Solution ...

alter encryption key rs_password_key regenerate

This generate password for  RS_random ... and update config file ....

alter encryption key

Regenerates an encryption key.

Syntax

alter encryption key key_name regenerate

Parameters

• key_name – name of the encryption key to be generated.Valid values:rs_password_key: password encryption key

Examples

• Example 1 – regenerates the password encryption key:alter encryption key rs_password_key regenerate

Usage

• Replication Server uses the rs_password_key row in rs_encryptionkeys RSSD system table and the RS_random attribute in the Replication Server configuration file for password encryption.Use the alter encryption key command to regenerate random values for the rs_password_key row and the RS_random attribute. Passwords in RSSD are re-encrypted with the new encryption key automatically.

Permissions

alter encryption key requires sa permission.