How To: Recover if the DMC Admin Password is Lost

You can reset the DMC password by following these steps.

Step 1:

Navigate to the /<path/to>/keycloak/bin/ directory. Depending on your version you will see either the kcadm.sh tool or the add-user-keycloak.sh tool. Follow the instructions below for the relevant tool.

Use the kcadm.sh tool

If you do not have any access to either the keycloak-admin or the datical-internal user, please contact support@liquibase.com to discuss options.

If you have at least one admin account already

Login as existing admin
/<path/to>/keycloak/bin/keycloak/bin/kcadm.sh config credentials \ --server http://localhost:8080/auth \ --realm master \ --user keycloak-admin \ --password '<password>'
Set the password for the desired admin user
/<path/to>/keycloak/bin/kcadm.sh set-password \ -r master \ --username datical-internal \ --new-password 'yournewpassword'

Use the add-user-keycloak.sh tool

Create a new Keycloak admin user from the command line.

Log in to your DMC server.
Run the following command, substituting the appropriate values for your system.
sudo -u <owner_of_DMC_software> /<path/to>/keycloak/bin/add-user-keycloak.sh --user <new_keycloak_user> --password <user_password> --realm master

Example
sudo -u datical /opt/datical/keycloak/bin/add-user-keycloak.sh --user rescue-admin --password mySecret --realm master

Step 2:

Restart the DMC services

sudo datical-control service stop all    #Ignore the error about the datical-postgresql.service.
sudo datical-control start keycloak
sudo datical-control start datical-service
sudo datical-control start proxy

Step 3:

Log in to the Keycloak Admin Console as the user you just created. See https://dmc.datical.com/administer/administer.htm

Browse to https://<dmchostname>/auth
Select Administration Console
Log in with the new username/password created in Step 1.

Step 4:

Reset the password for the DMC Admin user. See https://dmc.datical.com/administer/create-password-keycloak.htm

In the Keycloak Admin console, select Users on the left pane.
Search for “View all uses” to find the Username support@datical.com.
Under the Actions column, click Edit.
Navigate to the Credentials tab.
Under the Actions column, click Delete.
When prompted, click Delete credentials.
Enter a new password and confirm.
Disable the temporary password setting.
Click Set Password.

Step 5:

Log out of Keycloak and log in to DMC as support@datical.com.

In the upper right corner of the Keycloak console, select the user dropdown and sign out.
Browse to https://<dmchostname>
Log in as support@datical.com