Running application servers under specific user profiles

You can run an application server under a user profile other than the default QEJBSVR user profile.

Overview

Procedure

1. Choose an existing user profile, or use the Create User Profile (CRTUSRPRF) command to create a new user profile. The new user profile must have authority to the same objects to which the QEJBSVR user profile has authority.

   1. Specify QEJBSVR as the profile for the new profile group.

   2. Issue the following command from the command line:

      CHGUSRPRF USRPRF(profile) GRPPRF(QEJBSVR)

      If you use the enbprfwas script to enable your user profile, you do not have to issue this command. Instead specify the -chggrpprf parameter on the enbprfwas script. See Step 3 for more information about how to use the enbprfwas command

2. Optional: If the application server is currently running under a user profile other than QEJBSVR, run the following commands in Qshell:

   1. chown -R QEJBSVR profile_root

   2. app_server_root/bin/grtwasaut -profileName profile_name -user QEJBSVR -dtaaut RWX -objaut ALL -recursive

   3. Optional: If the old user profile is no longer used to run any of the servers in the instance, you can issue the following command to revoke that profile's authorities:

      app_server_root/bin/rvkwasaut 
        -profileName profile_name 
        -user profile -recursive
      

      where profile_name is the name of the old user profile.

3. Perform one of the following actions to enable the user profile to run the application server:

   1. Use the Operations Navigator.

   2. Use the enbprfwas command For example, run the following command:

      app_server_root/bin/enbprfwas -profile myProfile

      where myProfile is the name of the user profile.

4. Specify the new user profile name in the application server Run As User property.

   1. In the administrative console, click Servers > Application Servers and select an application server.

   2. Under Server Infrastructure, select Java and Process Management, and click Process Definition.

   3. Under Additional Properties, click Process Execution and enter the name of the user profile in the Run As User field.

   4. Click OK and Save to save your configuration changes.

   1. Restart the application server.

Results

Related tasks

Related Reference