Hi @gwootton ,
I am sorry, but I believe they are actually stored.
On one hand, lspasswd is needed to register some accounts passwords - which go into an LSF/EGO file.
On the other hand, if you have the Scheduling service registered in the SAS Management Console with an Authorization Domain, you would have a SAS metadata group, and in this group's Account tab, the password of the account used for scheduling (very often lsfadmin or lsfuser).
Please correct me if I am wrong. Of course, there are setups of all flavours, but I find those 2 really often, if not always.
Leaving aside LSF / JS passwords, if you have SSO with Kerberos, and the account used as UPN for the keytab file needs to change the password, you would need to regenerate the keytab file again, else SSO authentications will fail.
If you will change any of the WIP passwords, you will need to update those passwords as well in the server.xml and some AuthDomain groups too - as you would do if any database user (any outbound authentication) would change.
... View more