Troubleshooting
Problem
WebSphere Application Server will fail in the following scenario: "UserA" starts a server that was set with runas="UserB", even if the UserA and UserB are in the same primary group. The only users that can start the servers will be root or UserB.
Symptom
You might see some inaccurate exceptions in the log files:
| ADMU0111E: Program exiting with error: com.ibm.ws.process.exception.InvalidGroupException: PROC0002E: Group: [wasgroup] does not appear to be valid on this system. Process could not be created. |
Cause
From an operating system standpoint, WebSphere Application Server would have to use an OS call to change the owner of a process (something similar to what sudo does, suid etc) but only root can run them.
Resolving The Problem
If UserA has to be able to start the server as well as UserB,
- Make sure UserA and UserB have the same primary group.
- Clear out the runas JVM property.
- Make sure the file permissions are correctly set.
The server process will then show the user that started it as the owner, there will not be any reassignment to a different user as runas is now empty.
[{"Product":{"code":"SSEQTP","label":"WebSphere Application Server"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Component":"System Management\/Repository","Platform":[{"code":"PF002","label":"AIX"},{"code":"PF010","label":"HP-UX"},{"code":"PF016","label":"Linux"},{"code":"PF027","label":"Solaris"},{"code":"PF033","label":"Windows"}],"Version":"9.0;8.5.5;8.5","Edition":"Base;Network Deployment","Line of Business":{"code":"LOB45","label":"Automation"}},{"Product":{"code":"SSNVBF","label":"Runtimes for Java Technology"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"Java SDK","Platform":[{"code":"","label":""}],"Version":"","Edition":"","Line of Business":{"code":"LOB36","label":"IBM Automation"}}]
Was this topic helpful?
Document Information
Modified date:
15 June 2018
UID
swg21379379