000038963 - Prime kit tomcat.pid: Permission denied error when restarting services for RSA Authentication Manager Prime Kit

Document created by RSA Customer Support Employee on Jun 10, 2020
Version 1Show Document
  • View in full screen mode

Article Content

Article Number000038963
Applies ToRSA Product Set: SecurID
RSA Product/Service Type: RSA Authentication Manager Prime Kit
Platform: Linux
IssueThe RSA Authentication Manager Prime Kit services (Authentication Manager Integration Services, Help Desk Admin Portal or the Self-Service Portal) fail to start. The operation fails with the following error message. 

/opt/rsa/primekit/tomcat/tomcat-ssp/bin/tomcat.pid: Permission denied



/opt/rsa/primekit/tomcat/tomcat-hdap/bin/tomcat.pid: Permission denied



/opt/rsa/primekit/tomcat/tomcat-amis/bin/tomcat.pid: Permission denied
CauseThe user that is used to run the Tomcat service does not have sufficient permissions to one or more of the directories below:
  • /opt/rsa/primekit/tomcat/tomcat-ssp/bin/
  • /opt/rsa/primekit/tomcat/tomcat-hdap/bin/
  • /opt/rsa/primekit/tomcat/tomcat-amis/bin/
ResolutionThe easiest way to resolve this issue is to give full permissions to all users on the problematic directory. 
  1. Use SSH to access the RSA Authentication Manager Prime Kit server.
  2. Run the following command against the directory corresponding to the service with which you are facing the issue.

  • For SSP:


chmod -R 777 /opt/rsa/primekit/tomcat/tomcat-ssp/bin/


  • For HDAP:


chmod -R 777 /opt/rsa/primekit/tomcat/tomcat-hdap/bin/


  • For AMIS:


chmod -R 777 /opt/rsa/primekit/tomcat/tomcat-amis/bin/


  1. Restart the RSA Authentication Manager Prime Kit services:

    service tomcat-amis restart
    service tomcat-hdap restart
    service tomcat-ssp restart


The proper way to resolve this issue is to run the reset_perms script to assign the correct permissions to the directory. To do so:
  1. Use SSH to access the RSA Authentication Manager Prime Kit server.
  2. Go to the <Prime_installation_directory>/scripts/tools:


cd /opt/rsa/primekit/scripts/tools


  1. Run the reset permissions script to correct the permissions for all directories:


./3_reset_perms.sh


  1. Press Enter when prompted to for the script to do its job.
  2. Restart the RSA Authentication Manager Prime Kit services:


service tomcat-amis restart
service tomcat-hdap restart
service tomcat-ssp restart

Attachments

    Outcomes