wcm_io_devops.aem_security

This Role makes security changes to an AEM instance.

This role is part of the wcm.io DevOps Ansible Automation for AEM to connect Ansible with CONGA, but can also be used on its own.

Changing Admin User Password

Currently, this role only supports changing the password for the admin user.

:bulb: Please note that this role does not change the password for the Felix Webconsole. That password should be updated by deploying an OSGi configuration.

For more information on generating the package, refer to conga-aem-definitions.

Here are two important links to check:

• Template: aem-cms-system-config.provisioning.hbs
• Role: aem-cms

How to Use

This role is utilized by the Ansible role wcm_io_devops.conga_aem_cms to change the admin password during setup.

Requirements

You need Ansible version 2.7 or higher. This role has been tested with AEM 6.3.

Role Variables

Here are the variables you can use, along with their default values:

• aem_security_admin_user: admin

  • Admin user’s username.

• # aem_security_admin_password_new: admin

  • New Password. Set this along with aem_security_admin_password_old to change the password.

• aem_security_admin_password_old: admin

  • Old password. Set this if you're changing to a new password.

• aem_security_aem_port: 4502

  • Port number and package manager service URL for the AEM instance.

• aem_security_url_base: "http://localhost:{{ aem_security_aem_port }}"

  • Base URL for the AEM instance.

• aem_security_url_userinfo: "{{ aem_security_url_base }}/bin/querybuilder.json?path=/home/users&1_property=rep:authorizableId&1_property.value={{ aem_security_admin_user }}&p.limit=-1"

  • URL for user information.

• aem_security_url_password_check: "{{ aem_security_url_base }}/crx/de/j_security_check"

  • URL for checking password validity.

• aem_security_url_password_valid_code: 403

  • Expected HTTP code for a valid password.

• aem_security_url_password_invalid_code: 401

  • Expected HTTP code for an invalid password.

• aem_security_url_password_set: "{{ aem_security_url_base }}/crx/explorer/ui/setpassword.jsp"

  • URL for setting the new password.

Dependencies

This role does not have any dependencies.

Example Playbook

This example changes the admin password from "admin" to "password".

- hosts: aem-author
  vars:
    aem_security_admin_password_new: password
    aem_security_admin_password_old: admin
  roles:
    - wcm_io_devops.aem_security

License

Apache 2.0