55 lines
2.7 KiB
HTML
55 lines
2.7 KiB
HTML
|
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
||
|
|
<html>
|
||
|
|
<head>
|
||
|
|
<META http-equiv="Content-Type" content="text/html; charset=utf-8">
|
||
|
|
<LINK rel="stylesheet" type="text/css" href="../../../rzahg/ic.css">
|
||
|
|
|
||
|
|
<title>Run application servers under specific user profiles</title>
|
||
|
|
</head>
|
||
|
|
|
||
|
|
<BODY>
|
||
|
|
<!-- Java sync-link -->
|
||
|
|
<SCRIPT LANGUAGE="Javascript" SRC="../../../rzahg/synch.js" TYPE="text/javascript"></SCRIPT>
|
||
|
|
|
||
|
|
<h2><a name="isprfchg"></a>Run application servers under specific user profiles</h2>
|
||
|
|
|
||
|
|
<p>You can run an application server under a user profile other than the default QEJBSVR user profile.</p>
|
||
|
|
|
||
|
|
<ol>
|
||
|
|
<li><p>Choose an existing user profile, or create a new user profile with the Create User Profile (CRTUSRPRF) command.</p>
|
||
|
|
|
||
|
|
<p>The new user profile must have authority to the same objects to which QEJBSVR has authority. Specify QEJBSVR as the new profile's group profile. Run this command from the iSeries command line:</p>
|
||
|
|
|
||
|
|
<pre> CHGUSRPRF USRPRF(<em>profile</em>) GRPPRF(QEJBSVR)</pre>
|
||
|
|
<p>where <em>profile</em> is the name of the new user profile.</p></li>
|
||
|
|
|
||
|
|
<li><p>(Optional) If the application server is currently running under a user profile other than QEJBSVR, run the following commands in Qshell (where <em>instance</em> is the name of your instance):</p>
|
||
|
|
<ol type="a">
|
||
|
|
<li><pre>chown -R QEJBSVR /QIBM/UserData/WebASE/ASE5/<em>instance</em></pre></li>
|
||
|
|
<li><pre>cd /QIBM/ProdData/WebASE/ASE5/bin</pre></li>
|
||
|
|
<li><pre>grtwasaut -user QEJBSVR -dtaaut RWX -objaut ALL -recursive</pre></li>
|
||
|
|
<li>(Optional) If the old user profile is no longer used to run any of the servers in the instance, you can revoke the authorities that it has by running the following command:
|
||
|
|
<pre>rvkwasaut -instance <em>instance</em> -user <em>profile</em> -recursive</pre>
|
||
|
|
<p>where <em>profile</em> is the name of the old user profile.</p></li>
|
||
|
|
</ol></li>
|
||
|
|
|
||
|
|
<li><p><a href="secopnav.htm">Use iSeries Navigator to enable the user profile to run the application server</a>.</p></li>
|
||
|
|
|
||
|
|
<li><p>Specify the new user profile name in the Run As User property of the application server:</p>
|
||
|
|
|
||
|
|
<ol type="a">
|
||
|
|
<li>Start the WebSphere administrative console.</li>
|
||
|
|
<li>In the navigation menu, expand <strong>Servers</strong>, and click <strong>Application Servers</strong>.</li>
|
||
|
|
<li>In the Application Servers page, click the name of your application server.</li>
|
||
|
|
<li>Under Additional Properties, click <strong>Process Definition</strong>.</li>
|
||
|
|
<li>Under Additional Properties, click <strong>Process Execution</strong>.</li>
|
||
|
|
<li>Enter the name of the user profile in the <strong>Run As User</strong> field.</li>
|
||
|
|
<li>Click <strong>OK</strong></li>
|
||
|
|
<li>Save your configuration.</li>
|
||
|
|
<li>Restart the application server.</li>
|
||
|
|
</ol></li>
|
||
|
|
</ol>
|
||
|
|
|
||
|
|
</body>
|
||
|
|
</html>
|