67 lines
3.5 KiB
HTML
67 lines
3.5 KiB
HTML
|
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
||
|
|
<html>
|
||
|
|
<head>
|
||
|
|
<META http-equiv="Content-Type" content="text/html; charset=utf-8">
|
||
|
|
<LINK rel="stylesheet" type="text/css" href="../../../rzahg/ic.css">
|
||
|
|
|
||
|
|
<title>Run application servers under specific user profiles</title>
|
||
|
|
</head>
|
||
|
|
|
||
|
|
<BODY>
|
||
|
|
<!-- Java sync-link -->
|
||
|
|
<SCRIPT LANGUAGE="Javascript" SRC="../../../rzahg/synch.js" TYPE="text/javascript"></SCRIPT>
|
||
|
|
|
||
|
|
<h2><a name="isprfchg"></a>Run application servers under specific user profiles</h2>
|
||
|
|
|
||
|
|
<p>You can run an application server under a user profile other than the default QEJBSVR user profile.</p>
|
||
|
|
|
||
|
|
<p>Perform the following steps to change the application server default user profile:</p>
|
||
|
|
|
||
|
|
<ol>
|
||
|
|
<li><p>Choose an existing user profile, or create a new user profile with the Create User Profile (CRTUSRPRF) command.</p>
|
||
|
|
|
||
|
|
<p>The new user profile must have authority to the same objects to which QEJBSVR has authority. Specify QEJBSVR as the new profile's group profile. Run this command from the iSeries command line:</p>
|
||
|
|
|
||
|
|
<pre> CHGUSRPRF USRPRF(<em>profile</em>) GRPPRF(QEJBSVR)</pre>
|
||
|
|
<p>where <em>profile</em> is the name of the new user profile.</p>
|
||
|
|
|
||
|
|
<p><strong>Note:</strong> If you plan to use the enbprfwas script to enable your user profile, you do not have to run this command. Rather, specify the -chggrpprf parameter on the enbprfwas script.</p></li>
|
||
|
|
|
||
|
|
<li><p>(Optional) If the application server is currently running under a user profile other than QEJBSVR, run the following commands in Qshell (where <em>instance</em> is the name of your instance):</p>
|
||
|
|
<ol type="a">
|
||
|
|
<li><pre>chown -R QEJBSVR /QIBM/UserData/WebASE51/ASE/<em>instance</em></pre></li>
|
||
|
|
<li><pre>cd /QIBM/ProdData/WebASE51/ASE/bin</pre></li>
|
||
|
|
<li><pre>grtwasaut -user QEJBSVR -dtaaut RWX -objaut ALL -recursive</pre></li>
|
||
|
|
<li>(Optional) If the old user profile is no longer used to run any of the servers in the instance, you can revoke the authorities that it has by running the following command:
|
||
|
|
<pre>rvkwasaut -instance <em>instance</em> -user <em>profile</em> -recursive</pre>
|
||
|
|
<p>where <em>profile</em> is the name of the old user profile.</p></li>
|
||
|
|
</ol></li>
|
||
|
|
|
||
|
|
|
||
|
|
<li><p>Perform one of the following actions to enable the user profile to run the application server.</p>
|
||
|
|
<ul>
|
||
|
|
<li><p><a href="secopnav.htm">Use iSeries Navigator</a>.</p></li>
|
||
|
|
<li><p>Use the enbprfwas script. For example, run the following command:</p>
|
||
|
|
<pre>/QIBM/ProdData/WebASE51/ASE/bin/enbprfwas -profile <em>myProfile</em></pre>
|
||
|
|
<p>where <em>myProfile</em> is the name of the user profile.</p>
|
||
|
|
<p>For more information, see <a href="../admin/qshenbprf.htm">The enbprfwas script</a> in the <em>Administration</em> topic.</p></li>
|
||
|
|
</ul></li>
|
||
|
|
|
||
|
|
<li><p>Specify the new user profile name in the Run As User property of the application server:</p>
|
||
|
|
|
||
|
|
<ol type="a">
|
||
|
|
<li>Start the WebSphere administrative console.</li>
|
||
|
|
<li>In the navigation menu, expand <strong>Servers</strong>, and click <strong>Application Servers</strong>.</li>
|
||
|
|
<li>In the Application Servers page, click the name of your application server.</li>
|
||
|
|
<li>Under Additional Properties, click <strong>Process Definition</strong>.</li>
|
||
|
|
<li>Under Additional Properties, click <strong>Process Execution</strong>.</li>
|
||
|
|
<li>Enter the name of the user profile in the <strong>Run As User</strong> field.</li>
|
||
|
|
<li>Click <strong>OK</strong></li>
|
||
|
|
<li>Save your configuration.</li>
|
||
|
|
<li>Restart the application server.</li>
|
||
|
|
</ol></li>
|
||
|
|
</ol>
|
||
|
|
|
||
|
|
</body>
|
||
|
|
</html>
|