Hi All,

I have to implement ITCS v9.0

Users defined as having Security & System Administrative authority under this section we have user id's

exp : operator, admistrator, deployer roles

Now in this section below two Id's are added. Please suggest what is these id's, where it should be used.

1. WebSphere Application Server Process ID
 2. WebSphere Application Server Security ID

Thanks,
Chinna.

Chinna,

Can you please clarify what ITCS v9.0 is.  I'm not familiar with what this specification (?) is and what your end goal is. 

The other parts of your question seem as though you are looking to impliment fine grain security and integrate it with an LDAP repository...  If this is the case, I encourage you to first explore the IBM infocenter link on security here (publib.boulder.ibm.com/infocenter/wasinf...)

If you still have outstanding questions, please provide additional details including OS, WAS version, etc. 

Hi Erik,

Thanks for your response.

 It's correct these are come's under security or Fine grained  adminstration security.

In my env we need to maintain security standards.  ITCS stands for Information Technology security standards.

This section we need to create id's.

Users defined as having Security & System Administrative authority	WebSphere Application Server Configurators
WebSphere Application Server Operators
WebSphere Application Server Administrators
WebSphere Application Server iscadmins (V6.1.X and V7.0.X Specific)
WebSphere Application Server Deployer (V6.1.X and V7.0.X Specific)
WebSphere Application Server Adminsecuritymanager (V6.1.X and V7.0.X Specific) WebSphere Application Server Auditor (V7.0.X Specific)
WebSphere Application Server Security ID (V6.0.X Specific)

We have above id's and role to create. But not sure what to create for below two Id's

Websphere Application server Process Id
Websphere Application server Security Id

Websphere Application server Process Id - my understand it's system generated PID, when we start the process.


Thanks,
chinna.

ITCS stands for Information Technology security standards ... then it should be ITSS 

• Websphere Application server Process Id - I think, this is the user id who runs the websphere process. 

 

• Websphere Application server Security Id - This could be the primary user name which you configured while setting up security [like LDAP integration etc..]. But ask your ITCS team what are their expectations. 

Assuming Joseph is correct (and he normally is) then you need two distinct IDs where the one process running the WebSphere DMGR service has the ability to run Windows Services (normally an added permission.)

The other account will be used in the DMGR for the LDAP integration.