Periodically, you should save your validation list objects
with the other configuration data objects that are used by WebSphere® Application Server. Use this
task if you need to restore or replace a damaged validation list object.
About this task
You can share validation lists between multiple WebSphere Application Server profiles.
For example, if you have two profiles of WebSphere Application
Server, default and prod, both profiles can use the /QSYS.LIB/QUSRSYS.LIB/EJSADMIN.VLDL validation
list.
To restore or replace a damaged validation list object,
complete the following steps:
Procedure
- Replace the encoded passwords with the unencoded value
of the password for all of the WebSphere Application
Server profiles that use the validation list object.
To
replace the password values, complete the following steps:
- Stop each of the servers.
- Set the os400.security.password.validation.list.object
property for all of the servers to the absolute name of the new validation
list that you want to use.
You can use an existing validation
list object or specify a new object. For new validation list objects,
create them manually or use the objects that are created automatically
when the server is restarted. For more information on manually creating
validation list objects, see
Manually encoding passwords in properties files.
- Edit the configuration files and set each encoded password
to the appropriate clear text value.
- Edit the sas.client.props and soap.client.props files
and set each encoded password to the appropriate unencoded value before
manually encoding the passwords.
- Restart the servers for all of the WebSphere Application
Server profiles whose validation list objects that are replaced.
Results
After restarting the server, you have successfully replaced
a damaged validation list object.
What to do next
For additional information on backing up your data objects,
see Backing up security configuration files.