Enable the SPNEGO TAI using scripting

 

You use the wsadmin utility to enable the Simple and Protected GSS-API Negotiation Mechanism (SPNEGO) trust association interceptor (TAI) for WAS. Before starting this task, the wsadmin tool must be running. See the Start the wsadmin scripting client article for more information.

 

Overview

Perform the following steps to enable the SPNEGO TAI:

 

Procedure

1. Identify the server and assign it to the server1 variable:

   Use Jacl:

   set server1 [$AdminConfig getid /Cell:mycell/Node:mynode/Server:server1/]
   

   • Use Jython:

     server1 = AdminConfig.getid("Cell:mycell/Node:mynode/Server:server1/") print server1
     

   Example output:

   server1(cells/mycell/nodes/mynode|servers/seerver1|server.xml#Server_1)
   

2. Identify the JVM belonging to this server and assign it to the jvm variable:

   Use Jacl:

   set jvm [$AdminConfig list JavaVirtualMachine $server1]
   

   • Use Jython:

     jvm = AdminConfig.list('JavaVirtualMachine',server1')
     

   Example output:

   (cells/mycell/nodes/mynode/servers/server1:server.xml#JavaVirtualMachine_1) (cells/mycell/nodes/mynode/servers/server1:server.xml#JavaVirtualMachine_2)
   
   

3. Identify the controller JVM of the server:

   Use Jacl:

   set cjvm [lindex $jvm 0]
   
   

   Use Jython:

   # get line separator import java lineSeparator = java.lang.System.getProperty('line.separator') arrayJVMs = jvm.split(lineSeparator) cjvm = arrayJVMs[0]
   
   

4. Modify the generic JVM arguments to enable SPNEGO TAI:

   Use Jacl:

   $AdminConfig modify $cjvm { {genericJvmArguments "-Dcom.ibm.ws.security.spnego.isEnabled=true"} } 
   

   • Use Jython:

     AdminConfig.modify(cjvm, [['genericJvmArguments', "-Dcom.ibm.ws.security.spnego.isEnabled=true"]])
     

5. Save the configuration changes. See the Saving configuration changes with the wsadmin tool article for more information.

6. In a network deployment environment only, synchronize the node. See the Synchronizing nodes with the wsadmin tool article for more information.

---

 

Related tasks

Use the AdminConfig object for scripted administration
Configure JVM properties and enabling SPNEGO TAI in WebSphere Application Server

 

Related Reference

Commands for the AdminConfig object
SPNEGO TAI JVM configuration attributes