Sun Java System Application Server 9.1 Update 1-9.1 Update 2 Release Notes

Solution

After completing the Application Server upgrade, use the asadmin tool to run the following commands to set the <auth-realm> in domain.xml:

  1. Go to as-install/bin and run the following command:


    ./asadmin delete-auth-realm --host localhost --port 6489 certificate

    This removes the old auth-realm certificate, if one exists.

  2. Run the following command:


    ./asadmin create-auth-realm --terse=false --echo=true --interactive=true \
    --user admin --host localhost --port 6489 --classname \
    com.sun.enterprise.security.auth.realm.certificate.CertificateRealm \
    --property assign-groups=have.client.cert  certificate

    This creates the new <auth-realm> with the assign-groups property.

  3. Stop and restart the Application Server registry domain.