Security settings for wsadmin
The wsadmin tool provides these commands to enable and disable security:
- securityon enables global security with LocalOS security
- securityoff disables global security
- LTPA_LDAPSecurityOn enables LTPA/LDAP global security with the LDAP user registry
- LTPA_LDAPSecurityOff disables LTPA/LDAP global security
For the syntax and parameters of the securityon and LTPA_LDAPSecurityOn commands, run the securityon help command and the LTPA_LDAPSecurityOn help command, respectively. No parameters are required when you run the securityoff and LTPA_LDAPSecurityOff commands.
If security is enabled for a WebSphere Application Server cell, supply authentication information so that the wsadmin tool can communicate with servers. You can specify user and password information in a properties file or when you run the wsadmin command.
The properties file that you need to update depends on the type of connector wsadmin uses to communicate with your application server.
- For a Remote Method Invocation (RMI) connector, update the sas.client.props file.
- For a Simple Object Access Protocol (SOAP) connector, update the soap.client.props file.
Both of these files are located in the /QIBM/UserData/WebAS5/edition/instance/properties directory, where edition is Base for WebSphere Application Server and ND for WebSphere Application Server Network Deployment, and instance is the name of your application server instance.
Specify authentication information for a RMI connector
If you are using a RMI connector, set these properties in the sas.client.props file:
- com.ibm.CORBA.loginUserid=user
- com.ibm.CORBA.loginPassword=password
- com.ibm.CORBA.loginSource=properties
where user is your user profile and password is your password. The com.ibm.CORBA.loginSource property determines where the wsadmin tool looks for authentication information.
Specify authentication information for a SOAP connector
If you are using a SOAP connector, set these properties in the soap.client.props file:
- com.ibm.SOAP.loginUserid=user
- com.ibm.SOAP.loginPassword=password
- com.ibm.SOAP.securityEnabled=true
where user is your user profile and password is your password.
Specify authentication information on the command line
To provide a user profile and password when you run the wsadmin command, specify the -user and -password parameters.
If you specify user and password information on a command line and in the properties file, the command line information overrides the information in the properties file.