Issue with Landmark upgrade

I’m hoping that someone might see this online this weekend as I’m currently half way through a Landmark upgrade and it’s failed and I have no idea why

When reviewing the log file, it tells me that it’s failed because the secadm password is not valid. I’ve done two other environment upgrades, one being put test system, and no issues what so ever. I’m pretty sure this is a settings file asking for the password for secadm but I have no idea where. Problem is this is my production system so currently this is down.

I’ve logged a called with Infor but still waiting so hoping someone may read this and have an idea on what to do.

Error message from log file below

"User : UKRXM3S084lawson, LongName IPA Service user

@ run D:LawsonLMPRDenvinsecadm -d gen -f D:LawsonLMPRDworklmprdlpasecadm_script_1.txt

Bad commandline, password required.

Usage: secadm -p <password> [secadm commands]

Fatal: [install-lpa.pl] exit status 255

Error: Fatal: [install-lpa.pl] exit status 255

Fatal: [install-land.pl] exit status 2

Error: Fatal: [install-land.pl] exit status 2

Error: Activating Landmark Technology Platform failed.

**** 2017.10.07 15.48.42 UPDATE Failed.

showErrorAndStop called"

Thanks

Alex

Find more posts tagged with

Process Automation (IPA) - General Discussions

Comments

Legacy Contributor

Also if no one knows the above, do you know how to roll back the grid upgrade as this has already been done and work as expected

jreese

Alex in the above command, between secadm and -d, I believe you need to enter a -p and the password for the lawson user. I know on our system you have to include the -p and supply the lawson password anytime you run the secadm command. I hope this helps.

bhillz

I don't believe that you can "roll back" a grid upgrade. You can re-install the previous version :-( but there's no undo.

Which versions are go you going from / to?

Legacy Contributor

... validate you are using the account the grid was installed as ... if the grid was installed as a LOCAL lawson account, validate you're using that account and the password is valid/not expired ...

Legacy Contributor

Hi, The upgrade is using the .jar file for Landmark so I do not know how to specify the Landmark password as this is a automatic upgrade process. It seems that out production system requires a password and our test system didn't. Or this could be the case that the password is set correctly on the TST system but not PRD. Either way, we do not know where this is set up or how to set up

Legacy Contributor

we are going from 10.1.1.5 to 10.1.1.57

I'm hoping that we can install a previous version for the Grid but on the Landmark, it seems to be half way through the current upgrade but no options to revert these changes

Legacy Contributor

Hi, the process does use the local account on the server and this isn't locked out and password is working as expected. strange thing is we used the same account on our test system for the same process and worked as expected.

Legacy Contributor

Thank you for everyones prompts assistance. I have a solution from Infor and the upgrade is now complete. It seems that the secadm details were set to prompt for a password and you cant change this during the install. this has to be done beforehand. Instructions on how in case anyone needs this

Solution: Disable secadm password by following below Steps

Disable secadm password:

========================

In CMD as run as administrator >type ssoconfig -c

Please enter the password used for Lawson security utilities:

(1) Change Lawson Single Sign On Server settings

(2) Change Lawson authentication admin settings

(3) Change Lawson authentication data store settings

(4) Change Lawson authentication database data store settings

(5) Change crypto provider settings

(6) Manage Lawson Services

(7) Manage Lawson User Identities

(8) Manage privileged access to services

(9) Manage Lawson Resources

(10) Load Lawson Resources

(11) Back

(12) Exit

Enter your choice between 1 and 12 - Then choose 2

-------Change Lawson authentication admin settings-------

Enter the OS login Lawson Single Sign On service should run as: (lawson):

Enforce password prompts for this utility:

Existing value is (YES)

(1) YES

(2) NO

(3) Back

Enter your choice between 1 and 3 (1) -- Then choose 2

Please enter the current password used for Lawson security utilities:

Password confirmed. Password prompts have been disabled.

Enter an OS group to authorize against. Hitting <enter> will skip this check (<empty>):

Enable the email mechanism for password recovery:

Existing value is (YES)

(1) YES

(2) NO

(3) Back

Enter your choice between 1 and 3 (1): -- Choose 3

Then 12 to exit

bhillz

Technically, they are different accounts, even though they have the same account name. server_testlawson vs server_prodlawson. As local administrative accounts, they are constrained to that local server and have no rights to another server (without a lot of special setup like trust relationships).

You could use a domain account (domainlawson) but then would need to specify the same credentials in both servers. This would not be good security practice.

bhillz

I'm surprised that they upgrade didn't use the same answers file that was previously used -- if it's a true upgrade and not a "re"-install. But I don't have access to the actual installer code.

You would think that if it is an upgrade, it would install into the same Landmark system directory and use the same install.cfg file that was used to complete the install previously.

Copyright © 2025 Infor. All rights reserved.