ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » WebSphere Process Server (WID/WPS/WAS+) » SECJ0129E error in DMGR SystemOut.log

Post new topic  Reply to topic
 SECJ0129E error in DMGR SystemOut.log « View previous topic :: View next topic » 
Author Message
sebastia
PostPosted: Thu Nov 01, 2012 11:46 am    Post subject: SECJ0129E error in DMGR SystemOut.log Reply with quote

Grand Master

Joined: 07 Oct 2004
Posts: 1003

I am trying to log into WAS console,
and to my surprise it says user/pwd not valid.

I have 2 questions related to this event, so guess I open 2 lines.

Second one : in the DMGR SystemOut.log file, the following error is logged every time I try to log in the broser admin console using usr=wasadmin and pwd=passw0rd.

I have Google'd it, but WAS and Google are not very good friends ...

Any ideas of its meaning ?

Code:

[10/31/12 15:38:11:265 CET] 00000037 WebCollaborat A   SECJ0129E: Authorization failed for user wasadmin:default
WIMFileBasedRealm while invoking GET on admin_host:/ibm/console/, Authorization failed,
Not granted any of the required roles: administrator operator configurator monitor nobody


Thanks. Sebastian.

If this site is only for MQ-related questions, I'd appreciate a pointer to a more appropiate place ...
Back to top
View user's profile Send private message Visit poster's website
fjb_saper
PostPosted: Fri Nov 02, 2012 2:40 am    Post subject: Reply with quote

Grand High Poobah

Joined: 18 Nov 2003
Posts: 20696
Location: LI,NY

Quote:
WIMFileBasedRealm
This leads me to believe that for WAS authentication the OS password is not being used, but rather the password is being stored into/ retrieved from a File.

Now if your OS password changed recently try logging into was with the old password. The admin console would have more information about where that file is, but I seriously doubt that the password there would be in clear.
_________________
MQ & Broker admin
Back to top
View user's profile Send private message Send e-mail
sebastia
PostPosted: Fri Nov 02, 2012 2:51 am    Post subject: Reply with quote

Grand Master

Joined: 07 Oct 2004
Posts: 1003

I have local WAS experts, but they are very busy closing 2012 at customers etc etc ... but they tell me the WAS pwd is stored n some kind of local storage, and i think it is a file.
Maybe not in clear form, but all I want is to remove it.

I know how to Disable security ...

>>> http://www-01.ibm.com/support/docview.wss?uid=swg21405302

but later I have to enable it again, and I dont remember how to "set" the wasadmin password within WAS admin console ...

So I am looking for some command-line command to set it (this is the other post).

In this post I was trying to discover the meaning of that error, SECJ0129E

By the way : what does "WIM_File_Based_Realm" mean or stand for ?
Can you provide a URL or pointer I can read about ?

Thanks. Sebastian.
Back to top
View user's profile Send private message Visit poster's website
fjb_saper
PostPosted: Fri Nov 02, 2012 3:14 am    Post subject: Reply with quote

Grand High Poobah

Joined: 18 Nov 2003
Posts: 20696
Location: LI,NY

Read up on WAS authentication. You can define a custom "Realm" which is then linked to some kind of storage... you also have to create a java class to access the custom realm

You could potentially remove the custom realm and java class ref from the config xml file (backup first of course) and try accessing WAS then... and restore when done...


_________________
MQ & Broker admin
Back to top
View user's profile Send private message Send e-mail
sebastia
PostPosted: Fri Nov 02, 2012 3:27 am    Post subject: Reply with quote

Grand Master

Joined: 07 Oct 2004
Posts: 1003

The fact is that

1) I am not a WAS specialist, neither entousiast - I do actively hate Java, so ... I am in trouble - I prefer MQ and MB ... without Java nodes, of course

2) I find WAS documentatio and specially publib
( now "http://pic.dhe.ibm.com/infocenter/" ) ... specially hatefull

ANY request will provide thousands of useless search results ... realy awful
Back to top
View user's profile Send private message Visit poster's website
fjb_saper
PostPosted: Fri Nov 02, 2012 8:17 pm    Post subject: Reply with quote

Grand High Poobah

Joined: 18 Nov 2003
Posts: 20696
Location: LI,NY

sebastia wrote:
The fact is that

1) I am not a WAS specialist, neither entousiast - I do actively hate Java, so ... I am in trouble - I prefer MQ and MB ... without Java nodes, of course

2) I find WAS documentatio and specially publib
( now "http://pic.dhe.ibm.com/infocenter/" ) ... specially hatefull

ANY request will provide thousands of useless search results ... realy awful

That being the case I suggest you leave it for a was specialist.
_________________
MQ & Broker admin
Back to top
View user's profile Send private message Send e-mail
sebastia
PostPosted: Sat Nov 03, 2012 12:32 am    Post subject: Reply with quote

Grand Master

Joined: 07 Oct 2004
Posts: 1003

You have touched the core of the problem : I have to do it, and I am asking for specialist's help, in diferent places :

this forum
in my environment
red books, infocenter

I have a very good document :

>>>http://www-10.lotus.com/ldd/stwiki.nsf/dx/IBM_Sametime_8.5.2_Installation-From_Zero_To_Hero-Basics

and I am almost ending it ... have succeeded on 300 out of 500 slides, so I am quite happy, but sometimes (small ?) problems come up.

And this one is quite strange : I was exporting a KEY file to have a Single Sign-On, had other problems, and suddenly Sametime (WAS) Console stopped accepting the "wasadmin" usr/password, with this error code.

More next week ... Sebastian.
Back to top
View user's profile Send private message Visit poster's website
Display posts from previous:   
Post new topic  Reply to topic Page 1 of 1

MQSeries.net Forum Index » WebSphere Process Server (WID/WPS/WAS+) » SECJ0129E error in DMGR SystemOut.log
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
 
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.