IBM Support

How to find the userid of users accessing the Websphere Administrative Console

Troubleshooting


Problem

Identifying the users which log in and out of the Administrative Console can be done when Global Security is enabled on WebSphere Application Server.

Resolving The Problem

With global security enabled, you can identify which users log in and out of the Administrative Console by using the following trace string on Deployment manager ( if clustered environment ) or Application Server (if stand alone environment )


Trace String for WebSphere Application Server V6.x :
com.ibm.ws.security.web.FormLoginExtensionProcessor=all:com.ibm.
ws.security.web.FormLogoutExtensionProcessor=all


Trace String for WebSphere Application Server V5.x
com.ibm.ws.security.web.FormLoginServlet=all=enabled:com.
ibm.ws.security.web.FormLogoutServlet=all=enabled


Note: This procedure is only applicable if Administrative Console security is enabled. If security is not enabled, then it is not possible to track users which log in and out of the Administrative Console.

To set up trace please review :
Setting up a trace


However in WebSphere Application Server V7.0 we do have auditing feature as explained in the link below:
Auditing the security infrastructure

[{"Product":{"code":"SSEQTP","label":"WebSphere Application Server"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Component":"Administrative Console (all non-scripting)","Platform":[{"code":"PF002","label":"AIX"},{"code":"PF010","label":"HP-UX"},{"code":"PF016","label":"Linux"},{"code":"PF027","label":"Solaris"},{"code":"PF033","label":"Windows"}],"Version":"8.5.5;8.5;8.0;7.0;6.1;6.0.2","Edition":"Base;Network Deployment","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
15 June 2018

UID

swg21396358