Run application servers under specific user profiles

You can run an application server under a user profile other than the default QEJBSVR user profile.

Perform the following steps to change the application server default user profile:

1. Choose an existing user profile, or create a new user profile with the Create User Profile (CRTUSRPRF) command.

   The new user profile must have authority to the same objects to which QEJBSVR has authority. Specify QEJBSVR as the new profile's group profile. Run this command from the iSeries command line:

     CHGUSRPRF USRPRF(profile) GRPPRF(QEJBSVR)

   where profile is the name of the new user profile.

   Note: If you plan to use the enbprfwas script to enable your user profile, you do not have to run this command. Rather, specify the -chggrpprf parameter on the enbprfwas script.

2. (Optional) If the application server is currently running under a user profile other than QEJBSVR, run the following commands in Qshell (where product is either Base or ND, and profile_name is the name of your profile):

   1. chown -R QEJBSVR /QIBM/UserData/WebSphere/AppServer/V6/product/profiles/profile_name

   2. cd /QIBM/ProdData/WebSphere/AppServer/V6/product/bin

   3. grtwasaut -profileName profile_name -user QEJBSVR -dtaaut RWX -objaut ALL -recursive

   4. (Optional) If the old user profile is no longer used to run any of the servers in the instance, you can revoke the authorities that it has by running the following command:

      rvkwasaut -profileName profile_name -user profile -recursive

      where profile_name is the name of the old user profile.

   See The grtwasaut script and The rvkwasaut script for more information.

3. Perform one of the following actions to enable the user profile to run the application server.

   • Use iSeries Navigator.

   • Use the enbprfwas script. For example, run the following command:

     /QIBM/ProdData/WebSphere/AppServer/V6/product/bin/enbprfwas -profile myProfile

     where product is either Base or ND, and myProfile is the name of the user profile.

     For more information, see The enbprfwas script.

4. Specify the new user profile name in the Run As User property of the application server:
   1. Start the WebSphere administrative console.
   2. In the navigation menu, expand Servers, and click Application Servers.
   3. In the Application Servers page, click the name of your application server.
   4. Under Server Infrastructure, open Java and Process Management.
   5. Click Process Definition.
   6. Under Additional Properties, click Process Execution.
   7. Enter the name of the user profile in the Run As User field.
   8. Click OK
   9. Save your configuration.
   10. Restart the application server.