SMA on WebSphere with no administrative user
At customer site, WebSphere administrator team has restricted JMX access to WebSphere administrative users only.
The “smauser” credential tried to use is not an administrative user. Unfortunately, granting administrative rights to the “smauser” will NOT BE PERMITTED by the customer policy.
There was SR-A10051 related to this issue but without any solution, do we have solution or workaround to permit the customer use SMA?
Kind Regards,
Gerardo
Pegasystems Inc.
IT
Hi Vipin,
the issue is that Customer doesn't want to create the profile on WebSphere, I mean the PegaDiagnosticUser won't be on the server.
As solution I was asking to trey what is reported in the Installation manual for Web Sphere in the
Assigning the PegaDiagnosticUser Role to your System Management
Application users
...
...
...
If you do not want to restrict access to the System Management Application, edit the web.xml file and
delete the <security constraint> element.
Changing this setting in the web.xml file may require redeploying the PegaRULES Application.
...
...
...
Gerardo
I have recommended one approach to securing SMA application. If the customer decides to take a different route I see no issues with that since this is about securing a webapp viz. prsysmgmt.war and the solution should apply to any generic webapp. They may want to contact IBM to assist them with their requirement of securing a webapp on WAS.