Rawns Posted January 19, 2011 Posted January 19, 2011 Most likely a dead end question, but is there ANY way at all to reset a SIMS password using some kind of SQL command or other method rather than having to log into SIMS and doing it manually in Systems Manager?
superfletch Posted January 19, 2011 Posted January 19, 2011 (edited) I expect this is possible using one of the SQL stored procedures like sp_password. However, I don't think sp_password is a routine that Capita would recommend or support if it messed something up. Also with sp_password you'd have to be 100% sure you were getting the right account name and for that you'd probably have to go into the SQL management studio or similar and check the exact format of the account name you are going to reset. By that time you could have gone into system manager and done it. The built in way to do it is there for a reason I guess, although it is a bit cumbersome - hopefully System Manager 7 will make improvements in this area. Edited January 19, 2011 by superfletch 1
featured_spectre Posted January 19, 2011 Posted January 19, 2011 As a joke I would say "Drop * from *" would usually do the trick...lol I wouldn't mess with the database if I were you, it can get very ugly! 1
Rawns Posted January 19, 2011 Author Posted January 19, 2011 Thanks for the feedback guys. I thought that would be the general consensus. Manual resetting it is then.
vikpaw Posted January 19, 2011 Posted January 19, 2011 Don't mess with the DB! However, set your users up with a trusted connection i.e. single sign-on and you can then reset passwords through AD, or any other available password reset tool that is available for regular windoze users. 1
Rawns Posted January 19, 2011 Author Posted January 19, 2011 Don't mess with the DB! However, set your users up with a trusted connection i.e. single sign-on and you can then reset passwords through AD, or any other available password reset tool that is available for regular windoze users. If only it were that simple! I'm LA support, not based in a single school and unfortunately, it's that time to reset our SIMS administrator logins in each school.
superfletch Posted January 19, 2011 Posted January 19, 2011 If you're not using Windows authentication, it's tricky (unless things have changed since I last looked at it). Yes, you can reset the password on the SQL side, and this will change the SQL server login password. However, SIMS has its own internal passwords which are used by the application, and this must be done using the SIMS client or a stored procedure. That's roughly what I was thinking but I didn't know how to put it into words. If the mighty G&T thought it was a minefield then leave well alone. 1
vikpaw Posted January 19, 2011 Posted January 19, 2011 If only it were that simple! I'm LA support, not based in a single school and unfortunately, it's that time to reset our SIMS administrator logins in each school. Maybe a batch file / vbscript to take away some of the typing/clicking, but it's probably as complicated as getting access and applying a stored procedure or doing it manually. The change password button on login works now i think? Glad to hear you're changing the passwords, as i know some places that kept them the same for years. 1
Rawns Posted January 19, 2011 Author Posted January 19, 2011 Maybe it's got easier - it might be worth asking SIMS if there's a utility to do this. Let us know if you get any luck. This was the first route I took. Thank you for your query. Unfortunately not, any passwords that need to be reset will have to be reset through System Manager.
Ian_ICTDS Posted January 19, 2011 Posted January 19, 2011 (edited) Hi All, I have a SQL script that we use in the office (I work for the LA) when we are testing data that schools send us. It sets the password of whatever user you like to whatever password you like. I personally would never use it on a live site for the reasons discussed above but I thought people might like to know how it’s done out of curiosity or for reasons we use it. There are two halves to changing the password. You have to set the record within the SIMS database and then you have to update the actual SQL user account. It gets a little tricky because SIMS encrypts the password it uses for the SQL user. Luckily there is a stored procedure to do this for us. Here is the script (Again, don’t use it on live sites): Code removed following a request from a mod. Ian. Edited January 19, 2011 by Ian_ICTDS Code removed
vikpaw Posted January 19, 2011 Posted January 19, 2011 Change request logged: 1101-833333 strongly agreed. (+2) i don't think system manager 7 is going to do anything funky like this. how do you use your admin login? remote in to the system some how? do you have a windows log in to the school's network. I still think using trusted login would make it easier, as you can easily change the windows password.
Rawns Posted January 19, 2011 Author Posted January 19, 2011 We have our own network login set up in every school's AD that we support which we use for when we need to remote in to school. We use it mainly for server work (fixing backup issues, B2B issues, etc etc) but its also used on workstations for SIMS installs, upgrades etc as we have full admin rights. Our SIMS login is obviously set up in system manager in each school's SIMS system.
matt40k Posted January 19, 2011 Posted January 19, 2011 I thought there was an option to set SQL logins to meet Windows requirements, aka expire??
vikpaw Posted January 19, 2011 Posted January 19, 2011 We have our own network login set up in every school's AD that we support which we use for when we need to remote in to school. We use it mainly for server work (fixing backup issues, B2B issues, etc etc) but its also used on workstations for SIMS installs, upgrades etc as we have full admin rights. Our SIMS login is obviously set up in system manager in each school's SIMS system. then i would make it a single sign on account, so you can change the windows password and it automagically changes for sims too. @IAN_ictds / jinnantonnix - is it safe for that to be made public? could the info be used to hack a db ... obviously you'd need admin access to the sql to run the script, just wondering if we should be publishing the full method including hashing procedures - i don't understand it all so just asking...?
Ian_ICTDS Posted January 19, 2011 Posted January 19, 2011 @IAN_ictds / jinnantonnix - is it safe for that to be made public? could the info be used to hack a db ... obviously you'd need admin access to the sql to run the script, just wondering if we should be publishing the full method including hashing procedures - i don't understand it all so just asking...? I don't think there is too much risk because if you browse the database the mothod is quite easy to see. Although, it's better to be safe than sorry. I'll remove the code from my original post. Ian
vikpaw Posted January 19, 2011 Posted January 19, 2011 Thanks. Better to share by pm if absolutely required, but as it's not for a live environment, it's pretty academic.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now