User profiles and authorities

WebSphere Application Server uses two OS/400 user profiles by default:

The QEJB user profile is is shipped as part of the OS/400 operating system. This user profile is used only when accessing validation list objects used for storing the encoded passwords used with WebSphere Application Server.

The QEJBSVR user profile is created on your iSeries when you install WebSphere Application Server. This profile is the default profile under which all application servers run. Directories and files used by WebSphere Application Server are normally owned by user profile QEJBSVR. The WebSphere Application Server runtime, administration tools, and Qshell scripts sets the ownership and authorities correctly on any objects created. If you create objects manually outside of the WebSphere Application Server tools, or if you modify the authorities on objects used by WebSphere Application Server, ensure QEJBSVR has the correct authorities to these objects.

You can use the grtwasaut and rvkwasaut scripts to modify authorities on integrated file system objects.

When you create new directories for WebSphere Application Server, the QEJBSVR user profile must have read and execute authorities (*RX) to those directories.

Note: If you have specified another user profile to run your application servers, it is recommended that you specify QEJBSVR for its group profile.