WebSphere (WAS) Password Recovery

Many a times you might have come across scenarios like you don't remember the passoword of the newly installed WebSphere Application Server (WAS) or you installed it a while back and totally forgot the userid, password or both! Same can be used if you screw up the security configuration too. Here is a lifesaver tip!

Turn off WebSphere Application Server global security from outside the administrative console so that you can access admin console. To do so you can either change the security.xml file of WAS or use the wsadmin tool for it.

Using WAS command-line client wsadmin (run with root privileges):
1) Open a connection to local WAS in offline mode (else you would need to login)
wsadmin -conntype NONE

2) Turn off global security
wsadmin> securityoff

3) Save
wsadmin> $AdminConfig save

OR
Disable security by modifying the security.xml file(s)
1) The security.xml file is located under WSAS_install_root/AppServer/config/cells/cellname. Always store a copy of the security.xml file in a temporary directory before making any changes

2) Open the security.xml file and search for the very first occurrence of enabled="true". This is located inside the tag.

3) Change enabled="true" to enabled="false", then save the file.

You must restart the server for the change to take effect!

Server admins, secure your WAS server installation (tighter OS security) to prevent unauthorized access ;-)


More info:
http://www-01.ibm.com/support/docview.wss?rs=180&context=SSEQTP&q1=disable+global+security+security.xml&uid=swg21105430&loc=en_US&cs=utf-8&lang=en