TDSADMIN Operating System password changed and now RDS Tivoli 5.x will not start on UNIX

Before you start, you will need to understand the relation between the tdsadmin password in the OS (if you are using RDS Tivoli) and the tdsadmin password in RDS. To do so, consult Technote 1469504: How to manage the user "tdsadmin" in Rational Directory Server.

Steps to manually reset the tdsadmin password in Rational Directory Server (RDS) 5.0:

1. Stop the Tivoli installation underlying to RDS:
   /opt/IBM/ldap/V6.2/sbin/ibmslapd -I tdsadmin -k
   
2. Edit the ibmslapd.conf file located in:
   /var/IBM/Rational/RDS_5.0/Instance/idsslapd-tdsadmin/etc
   
3. Set the following:
   
   1. For "dn: cn=Configuration",
      set "ibm-slapdPwEncryption: none".
      Original value ibm-slapdPwEncryption: ssha
      New Value ibm-slapdPwEncryption: none
      
   2. For "dn: cn=TDSAdminGroupEntry, cn=AdminGroup, cn=Configuration",
      set "ibm-slapdAdminPW: new_password".
      Original value ibm-slapdAdminPW: {AES256}nLYf8VVP0+CuxcaLeFXHKw==
      New Value ibm-slapdAdminPW: new_password
      
4. Under /opt/IBM/ldap/V6.2/sbin, run the following command to set the password for database owner:
   idscfgdb -w new_password
   
5. Start Tivoli:
   /opt/IBM/ldap/V6.2/sbin/ibmslapd -I tdsadmin -n
   
6. Login to Rational Directory Administrator (RDA) and verify that login is successful with the new password.
   
7. Exit RDA and again repeat steps 1 and 2
   
8. Encrypt the password you entered in step 3. Otherwise the password will remain clear for any reader of this file. Tivoli will automatically encrypt it.:
   
   For "dn: cn=Configuration" set "ibm-slapdPwEncryption: ssha"
   
9. Start Tivoli:
   /opt/IBM/ldap/V6.2/sbin/ibmslapd -I tdsadmin -n