After completing the Application Server upgrade, use the asadmin tool to run the following commands to set the <auth-realm> in domain.xml:
Go to as-install/bin and run the following command:
./asadmin delete-auth-realm --host localhost --port 6489 certificate |
This removes the old auth-realm certificate, if one exists.
Run the following command:
./asadmin create-auth-realm --terse=false --echo=true --interactive=true \ --user admin --host localhost --port 6489 --classname \ com.sun.enterprise.security.auth.realm.certificate.CertificateRealm \ --property assign-groups=have.client.cert certificate |
This creates the new <auth-realm> with the assign-groups property.
Stop and restart the Application Server registry domain.