IBM Tivoli Access Manager WebSEAL：Webseal密钥错误无法启动

[Mr.Lok]

1. cd /var/pdweb/keytab-Webseal*
ls –al
-rw------- 1 ivmgr ivmgr 10088 Feb 04 10:06 instance-webseald.kdb
-rw------- 1 ivmgr ivmgr 0 Feb 04 10:06 instance-webseald.sth

2.备份示例
pdbackup -action backup -list /opt/pdweb/etc/amwebbackup-instance.lst

3.验证备份
tar -tvf /var/PolicyDirector/pdbackup/amwebbackup-instance.lst_03MonthYYY.HH_MM.tar

4.删除并重新创建实例用户账户
svrsslcfg -unconfig –f /dev/null -n instance-webseald -h hostname -A sec_master -P mima

5.清除原有密钥文件
rm /var/pdweb/keytab-instance/instance-webseald.kdb
rm /var/pdweb/keytab-instance/instance-webseald.sth

6.新建账户重新生成密钥文件
svrsslcfg -config -f /opt/pdweb/etc/webseald-Webseal*.conf -d /var/pdweb/keytab-Webseal*(keytab目录) -n instance-weseald*(webseal实例名称) -h 主机名 -A sec_master -P 密码-r 7235 -S - -s local -l yes -g SecurityGroup,secmgrd-servers,webseal-servers

7.重启webseal
pdweb start Webseal

8.查看webseal实时日志
cd /var/pdweb/log/
cat webseal.log