Removing resources from security domains using scripting
Use this topic to remove management resources from security domains. Remove all resources from a security domain before deleting the security domain from the configuration.
Users assigned to the administrator role can configure security domains. Verify that we have the appropriate administrative role before configuring security domains.
Tasks
- Launch the wsadmin scripting tool using the Jython scripting language. See the Starting the wsadmin scripting client article for more information.
- Determine the security domain to edit.
Use the listSecurityDomains command to view a list of security domains in the configuration. Specify true for the optional -listDescription parameter to list the description for each security domain...
print AdminTask.listSecurityDomains('-listDescription true')
The command returns the following example output:
myDomain - security domain for administrative applications domain2 - new domain for cell123
- Verify the management resources assigned to the security domain.
Use the listResourcesInSecurityDomain command to view a list of resources that are mapped to the security domain of interest...
print AdminTask.listResourcesInSecurityDomain('-securityDomainName domain2')
The command returns the following example output:
"Cell=myhostCell01"
- Remove the resource from the security domain.
Use the removeResourceFromSecurityDomain command to remove a management resource from the security domain. For example, use the following Jython command to remove the Cell01 cell resource from the domain2 security domain:
AdminTask.removeResourceFromSecurityDomain('-securityDomainName domain2 -resourceName Cell=myhostCell01')- Save the configuration changes.
AdminConfig.save()
What to do next
Restart each management resource that you removed from a security domain.
Manage servers, nodes and cells with scripting Start the wsadmin scripting client Remove security domains using scripting