Thursday, May 28, 2009

Disabling security for WAS admin console - very famous

You can disable administrative security using the command line:

1. At the command prompt, type the following:
\bin\wsadmin.bat -conntype NONE

2. When the system command prompt re-displays, type:
securityoff

3. When done, type exit and restart the application server.

This procedure should work without any problem, but in the event that it fails, you can disable administrative security by directly editing the security.xml file

profile_home\config\cells\cell_name\

Open this file and change the security attribute enabled=true to enabled=false.
Other security properties, such as Java 2 security and application security, can also be found in this file. Modifying the XML file should only be done as a last resort. Be sure to save an original copy of the security.xml file before making any modification.

how to configure WAS to stop application server without prompting for password even though security is enabled

  1. If you are using the SOAP connection type (default) to stop the server, edit the following file:
profile_home\properties\soap.client.props

Then, change the values of these properties:
com.ibm.SOAP.securityEnabled=true
com.ibm.SOAP.loginUserid=
com.ibm.SOAP.loginPassword=

Again, the user ID , with its password , is the user ID with Administrator role rights or the primary administrative user name defined in the user account repository.

2. We recommend that you encode the com.ibm.SOAP.loginPassword property
value using:

\bin\PropFilePasswordEncoder.bat soap.client.props com.ibm.SOAP.loginPassword
Examine the result and remove the backup file, soap.client.props.bak, created by the command used previously. It contains the unencrypted password.

3. Try stopping the JVM, without giving user id and password.

What is Java 2 secuirty in WAS ?

Java 2 security provides a policy-based, fine-grain access control mechanism that increases overall system integrity by checking for permissions before allowing access to certain protected system resources.

new features in WAS S 7

  1. Security part had been separated, in prior version, enablingg security means, enabling security at admin console and application (J2EE security was always separate) in WAS 7, Admin console secuirity, Application security and J2EE security, all are independant of each other.