IBM Support

Rational Architecture Management products support the Federal Desktop Core Configuration for both Microsoft Windows XP SP2 and Windows Vista Business

Question & Answer


Question

Why does publishing of applications to WebSphere® Application Server servers using a non-Admin user fail on server startup? How can IBM® Rational® Software Delivery Platform (SDP) products work around this limitation?

Answer

The IBM Rational SDP Architecture Management products support the Federal Desktop Core Configuration (FDCC) configuration for both Microsoft® Windows® XP Service Pack 2 and Windows Vista® Business.

Problem
In Rational Application Developer and Rational Software Architect v7.0.0.5, publishing applications using a non-Admin user to WebSphere Application Server servers fails on server startup. The problem appears to be in WebSphere Application Server where the start/stop scenarios are failing due to security or access control issues. Specifically, non-Admin users do not have permission to access server configurations in a WebSphere Application Server profile that was created by an Admin user.

Note that WebSphere Application Server makes this statement for Vista and XP, "Supported for application design, development and testing; no support for production use," in document 7007663, System Requirements for WebSphere Application Server V6.1 on Windows.

Workaround for current WebSphere Application Server limitation
By performing the steps below, you can publish an application and start-up the Application Server through Rational Application Developer using a non-admin user account. Note that Rational Application Developer and Application Server must be installed, and all Application Server profiles created using the Administrator account or a user account that belongs to the Administrators group.

  1. After installing Rational Application Developer using an Admin user, go to <RAD INSTALL DIR>\runtimes\base_v61\profiles using a Windows Explorer
  2. Right-click on your Application Server profile (such as AppSrv01) and click on Properties
  3. Click on the Security tab
  4. Under Group or user names, click Add to add the Authenticated Users group if it does not exists.
  5. Under Permissions for Authenticated Users, check Full Control (make sure all except Special Permissions are checked)
  6. Click on Advanced
  7. Under Permission entries, highlight Authenticated Users
  8. Check Replace permission entries on all child objects with entries shown here that apply to child objects
  9. Click Apply
  10. Click OK
  11. Click OK to close Properties window
  12. Log off Admin user
  13. Log on again using a non-admin user and start using Rational Application Developer

For more information about managing profiles in WebSphere Application Server for non-Admin users such as assigning ownership and granting permission of files and directories to a non-Admin user, refer to http://publib.boulder.ibm.com/infocenter/wasinfo/v6r1/index.jsp?topic=/com.ibm.websphere.nd.doc/info/ae/ae/tpro_manage_nonroot.html

[{"Product":{"code":"SSYK2S","label":"Rational Software Architect Designer"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Component":"General Information","Platform":[{"code":"PF033","label":"Windows"}],"Version":"7.0.0.5;7.0.0.6;7.0.0.7;7.0.0.8;7.0.0.9","Edition":"","Line of Business":{"code":"LOB45","label":"Automation"}},{"Product":{"code":"SSRTLW","label":"Rational Application Developer for WebSphere Software"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Component":null,"Platform":[{"code":"PF033","label":"Windows"}],"Version":"7.0.0.5;7.0.0.6;7.0.0.7;7.0.0.8;7.0.0.9","Edition":"","Line of Business":{"code":"LOB45","label":"Automation"}},{"Product":{"code":"SSXJ7E","label":"Rational Business Developer Extension"},"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Component":null,"Platform":[{"code":"PF033","label":"Windows"}],"Version":"7.0.0.5;7.0.0.6;7.0.0.7","Edition":"","Line of Business":{"code":"LOB17","label":"Mainframe TPS"}}]

Document Information

Modified date:
10 September 2020

UID

swg21291071