(iSeries)
Restore or replace damaged validation list objects
Periodically, we should save our validation list objects with the other configuration data objects used by WebSphere Application Server. Use this task if we need to restore or replace a damaged validation list object.
We can share validation lists between multiple WAS profiles. For example, if we have two profiles of WAS, default and prod, both profiles can use the /QSYS.LIB/QUSRSYS.LIB/EJSADMIN.VLDL validation list.
To restore or replace a damaged validation list object, complete the following steps:
Tasks
- Replace the encoded passwords with the unencoded value of the password for all of the WAS profiles that use the validation list object. To replace the password values:
- Stop each of the servers.
- Set the os400.security.password.validation.list.object property for all of the servers to the absolute name of the new validation list to use. Use an existing validation list object or specify a new object. For new validation list objects, create them manually or use the objects created automatically when the server is restarted. For more information on manually creating validation list objects, see Manually encoding passwords in properties files.
- Edit the configuration files and set each encoded password to the appropriate clear text value.
- Edit the sas.client.props and soap.client.props files and set each encoded password to the appropriate unencoded value before manually encoding the passwords.
- Restart the servers for all of the WAS profiles whose validation list objects that are replaced.
After restarting the server, we have successfully replaced a damaged validation list object.
What to do next
For additional information on backing up the data objects, see Backing up security configuration files.
Related:
Password encoding and encryption Change encoding algorithm from OS400 to XOR Enable the non-default OS/400 password encoding algorithm Manually encoding passwords in properties files Password decoding troubleshooting tips for security