Network Deployment (Distributed operating systems), v8.0 > Secure applications and their environment > Authorizing access to resources > Authorizing access to Java EE resources using Tivoli Access Manager > Enable an external JACC provider
Disable embedded Tivoli Access Manager client
To unconfigure the JACC provider for Tivoli Access Manager, you can use the WAS administrative console.
Ensure that all the managed servers, including node agents, are started. Perform the following process once on the deployment management server. Information from the unconfigure operation is forwarded to managed servers, including node agents, when the server is restarted. The managed servers require their own restart for changes to take effect.
It is also possible to unconfigure using the wsadmin command line utility. For details on unconfiguring the embedded Tivoli Access Manager client using the wsadmin command line utility, refer to the information about disabling embedded Tivoli Access Manager client using wsadmin.
Procedure
- Restart the dmgr process.
- Click Security > Global security > External authorization providers.
- Make sure that the default option, Default authorization, is checked, then click OK.
- On the Global security panel, click External authorization > External JACC provider.
- Under Additional properties, click Tivoli Access Manager Properties. The configuration screen for the JACC provider for Tivoli Access Manager is displayed.
- Clear the Enable embedded Tivoli Access Manager option. To ignore errors when unconfiguring, select the Ignore errors during embedded Tivoli Access Manager disablement option. Select this option only when the Tivoli Access Manager domain is in an irreparable state.
- Click OK.
- Optional: If you want security enabled without Tivoli Access Manager re-enable administrative security.
- Optional: Synchronize all nodes.
- Restart all WAS instances for the changes to take effect.
Disable embedded Tivoli Access Manager client using wsadmin
Enable an external JACC provider