[IBM i]

Running application servers under specific user profiles

You can run an application server under a user profile other than the default QEJBSVR user profile.

About this task

To change the application server default user profile:

Procedure

  1. Choose an existing user profile, or use the Create User Profile (CRTUSRPRF) command to create a user profile.
    The new user profile must have authority to the same objects to which the QEJBSVR user profile has authority.
    1. Specify QEJBSVR as the profile for the new profile group.
    2. Issue the following command from the command line:
      CHGUSRPRF USRPRF(profile) GRPPRF(QEJBSVR)
      Important: If you use the enbprfwas script to enable your user profile, you do not have to issue this command. Instead specify the -chggrpprf parameter on the enbprfwas script. See Step 3 for more information about how to use the enbprfwas command
  2. Optional: If the application server is currently running under a user profile other than QEJBSVR, run the following commands in Qshell:
    1. chown -R QEJBSVR profile_root
    2. app_server_root/bin/grtwasaut -profileName profile_name -user QEJBSVR -dtaaut RWX -objaut ALL -recursive
    3. Optional: If the old user profile is no longer used to run any of the servers in the instance, you can issue the following command to revoke the authorities of that profile:
      app_server_root/bin/rvkwasaut 
        -profileName profile_name 
        -user profile -recursive
      

      where profile_name is the name of the old user profile.

  3. Perform one of the following actions to enable the user profile to run the application server:
    1. See the information about Navigator for i.
    2. Use the enbprfwas command
      For example, run the following command:
      app_server_root/bin/enbprfwas -profile myProfile
      where myProfile is the name of the user profile.
  4. Specify the new user profile name in the application server Run As User property.
    1. In the administrative console, click Servers > Server Types > WebSphere application servers and select an application server.
    2. In the Server Infrastructure section, select Java and process management > Process definition.
    3. In the Additional Properties section, click Process Execution and enter the name of the user profile in the Run As User field.
    4. Click OK and Save to save your configuration changes.
    1. Restart the application server.

Results

You can now use the specified user profile to run application servers.