topic Re: Refreshing password on ArcGIS Server registered data store in ArcGIS Enterprise Questions

Refreshing password on ArcGIS Server registered data store

SimonGIS — Mon, 26 Apr 2021 00:24:20 GMT

Background:

A database has its user connection details refreshed every week (via AWS Secrets Manager).
This database is registered as a data store with an autoscaling standalone 10.8.1 ArcGIS Server Site

Requirement:

As a sysadmin, I want to automate updating the database connection details in the ArcGIS Server data store settings, so that my services will continue to access the data in the database.

Challenges & Thoughts:

Preference to avoid arcpy, so that we can deploy script to Lambda.
- ArcGIS Python API or REST.JS can be used if required.

Q.1 Do you need Arcpy to create a .SDE file?

This Esri Script looks like it would meet my needs.

Grabs the existing data items connection string
And then in step 6, update with new password

However, it makes no mention on how to encrypt the password.

Q3. Where does the variable sample_1 come from in the linked python script?

Q3. How do we encrypt the password?

Looking at the help for DataItem:

It is recommended that you encrypt the credentials using the encryption scheme before storing it into the server. This can be achieved by invoking Get Database Connection String tool inside the Publishing Tools toolbox published as a system service on the server.

This would indicate that there might be a step missing in the linked script. Struggling to find much documentation/samples on how to use 'Get Database Connection String' without a SDE file?

Re: Refreshing password on ArcGIS Server registered data store

BillMitchell — Fri, 01 Jul 2022 21:18:46 GMT

This issue appears to have been addressed via a GitHub issue: https://github.com/Esri/arcgis-python-api/issues/990. However, the method for getting the SDE file path into the cloud environment is not entirely clear, nor is the original issue of how to create a function to update the password clarified.

Re: Refreshing password on ArcGIS Server registered data store

BillMitchell — Tue, 19 Jul 2022 22:26:51 GMT

The step missing between 3 and 4 of the documentation is to create the SDE file, which requires the arcpy library's CreateDatabaseConnection function.

arcpy.management.CreateDatabaseConnection(out_folder_path, out_name, database_platform, instance, {account_authentication}, {username}, {password}, {save_user_pass}, {database}, {schema}, {version_type}, {version}, {date})

At this time, there is no method to directly generate the ENCRYPTED_PASSWORD, nor to do it without invoking the arcpy library. I have created a related Enterprise Ideas post recommending that there should be one for exactly this use case.

Re: Refreshing password on ArcGIS Server registered data store

SimonSchütte_ct — Thu, 12 Dec 2024 09:50:51 GMT

May be useful: How To: Programmatically Update a Password Change in an ArcGIS Server Registered Data Stor