(iseries)

Running application servers under specific user profiles

We can run an application server under a user profile other than the default QEJBSVR user profile.

To change the application server default user profile:

1. Choose an existing user profile, or use the Create User Profile (CRTUSRPRF) command to create a user profile. The new user profile must have authority to the same objects to which the QEJBSVR user profile has authority.

   1. Specify QEJBSVR as the profile for the new profile group.

   2. Issue the following command from the command line:
      CHGUSRPRF USRPRF(profile) GRPPRF(QEJBSVR)

      Important: If we use the enbprfwas script to enable the user profile, we do not have to issue this command. Instead specify the -chggrpprf parameter on the enbprfwas script. See Step 3 for more information about how to use the enbprfwas command

2. Optional: If the application server is currently running under a user profile other than QEJBSVR, run the following commands in Qshell:

   1. chown -R QEJBSVR profile_root

   2. app_server_root/bin/grtwasaut -profileName profile_name -user QEJBSVR -dtaaut RWX -objaut ALL -recursive

   3. Optional: If the old user profile is no longer used to run any of the servers in the instance, we can issue the following command to revoke the authorities of that profile:
      app_server_root/bin/rvkwasaut -profileName profile_name -user profile -recursive

      where profile_name is the name of the old user profile.

3. Perform one of the following actions to enable the user profile to run the application server:

   1. See the information about the System i Navigator.

   2. Use the enbprfwas command For example, run the following command:
      app_server_root/bin/enbprfwas -profile myProfile

      where myProfile is the name of the user profile.

4. Specify the new user profile name in the application server Run As User property.

   1. In the console, click Servers > Server Types > WebSphere application servers and select an application server.

   2. In the Server Infrastructure section, select Java and process management > Process definition.

   3. In the Additional Properties section, click Process Execution and enter the name of the user profile in the Run As User field.

   4. Click OK and Save to save your configuration changes.

   1. Restart the application server.

Results

We can now use the specified user profile to run application servers.

Related tasks

Enable user profiles to run application servers with System i Navigator

grtwasaut command

rvkwasaut command