Reconfigure JACC on WebSphere

i_hate_websphere_jacc.md

Trace einschalten dmgr und nodeagent: =info:com.tivoli.pd.as.=all

JACC UNCONFIGURE

• Goto Jacc Provider - Uncheck "enable JACC Provider"
• click OK
• switch to "Built in provider"
• click OK
• SAVE
• STOP DMGR

CLEANUP - NACH UNCONFIGURE JACC:

# become root to fix any permission problems
sudo su - 

cd /opt/IBM/WebSphere/AppServer9/data/tivoli/tam
rm PdPerm.*

cd /opt/IBM/WebSphere/AppServer9/data/tivoli/tam/PolicyDirector
rm *
rm -r log 

cd /opt/IBM/WebSphere/AppServer9/data/tivoli/tam/PolicyDirector
rm pdjrte_*

# FIX PERMISSIONS (just to be on the safe side)
chown -R wasadm.wasadm /opt/IBM/WebSphere/AppServer9/data/tivoli/tam

# CLEANUP PROFILES - REPEAT ON ALL NODES
rm -r /opt/IBM/WebSphere/AppServer9/profiles/dmgr/data/etc/tam/*
rm -r /opt/IBM/WebSphere/AppServer9/profiles/node*/data/etc/tam/*

SYNC CELL

START DMGR

SYNC NODES - alle nodes offline SYNCEN mit syncNode!

START nodeagents

• verify successful startup in log: no more JACC (yay!)

STOP ANY RUNNING APPSERVERS (if they were auto-started)

RECONFIGURE JACC

• same procedure as before, settings should be kept from previous configuration
• save and sync nodes

RESTART CELL

• STOP NODEAGENTS
• STOP DMGR
• START DMGR
  • verify JACC in dmgr log and wait for complete startup
• START NODEAGENTS

Propagate JACC Config for a single application:

AdminTask.propagatePolicyToJACCProvider('[-appNames selfreg-ear ]')

Oder:

AdminTask.propagatePolicyToJACCProvider ('-interactive')