Troubleshooting
Problem
This MustGather provides instruction for collecting data for problems with the IBM WebSphere® Application Server Java™ 2 security component. Collecting this information and uploading the diagnostic data to the case can help refine the problem description and improves the quality of support's response. Java 2 security is enabled and disabled at the cell level. It cannot be isolated to an application, server, node, or cluster. However, you can selectively enable Java 2 security in a security domain.
Diagnosing The Problem
Resolving The Problem
Diagnostic Questions
- Is there a requirement for Java 2 security enablement? Support recommends disabling Java 2 security unless there is explicit requirement.
- Was the application designed and packaged to run with Java 2 security enabled?
- Is there an architectural statement that documents the resources that the application needs, and what kind of access (read, write) it requires?
- Do you have any Java 2 policy files such as was.policy or app.policy with the necessary statements?
- Was the Java 2 security property file manually edited? The supported approach is to use the Java policytool.
Reproduce the Issue
IBM support recommends that you gather traces from JVM startup.
- Although WebSphere traces can be enabled at the runtime, it is recommended for the provided logs to observe JVM startup. Startup logs contain important messages that print only during initialization of the JVM.
IBM support recommends that you remove of any historical logs before you reproduce the issue.
- Support advises the removal of any historical logs before you reproduce the issue. This approach can greatly help the analysis of the logs and ensures that support is focused on the reported issue. Unlike WebSphere traces, Java custom properties require a JVM restart to take effect.
Enabling Traces
![image 13012](/support/pages/system/files/inline-images/image_13012.png)
*=info:com.ibm.ws.security.policy.*=all:com.ibm.ws.security.core.SecurityManager=all |
![image 13012](/support/pages/system/files/inline-images/image_13012.png)
|
- In the administrative console, navigate to the Java Virtual Machine Custom properties, then set the following custom property:
Name: com.ibm.websphere.java2secman.norethrowValue: true
- Navigation for WebSphere Application Server for IBM® i and distributed platforms
- Application server
Servers > Server Types > WebSphere Application Servers > server_name > Expand Java and Process Management (under Server Infrastructure) > Process definition > Java Virtual Machine > Custom properties > New... - Deployment Manager
System Administration > Deployment manager > Expand Java and Process Management (under Server Infrastructure) > Process definition > Java Virtual Machine > Custom properties > New... - Node Agent
System Administration > Node agents > (pick a node agent) > Expand Java and Process Management (under Server Infrastructure) > Process definition > Java Virtual Machine > Custom properties > New...
- Application server
- Navigation for WebSphere Application Server for z/OS
- Navigate to the JVM settings by using the steps in the Java virtual machine settings article in IBM Docs
- Click Custom properties > New...
- Navigation for WebSphere Application Server for IBM® i and distributed platforms
- Panel:
- Collecting and Exchanging Data with IBM Support
- To collect all relevant logs and configuration data, run the WebSphere collector utility and upload the generated JAR file to Enhanced Customer Data Repository (ECuRep).
Related Information
[{"Line of Business":{"code":"LOB45","label":"Automation"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSEQTP","label":"WebSphere Application Server"},"ARM Category":[{"code":"a8m50000000Cd9NAAS","label":"WebSphere Application Server traditional-All Platforms-\u003ESecurity-\u003EJava 2 Security"}],"Platform":[{"code":"PF002","label":"AIX"},{"code":"PF016","label":"Linux"},{"code":"PF033","label":"Windows"}],"Version":"8.5.5;9.0.5","Type":"MASTER"}]
Was this topic helpful?
Document Information
Modified date:
31 May 2023
UID
swg21199333