Prime kit tomcat.pid: Permission denied error when restarting services for RSA Authentication Manager Prime Kit

[#1]

Article Number

000038963

Applies To

RSA Product Set: SecurID
RSA Product/Service Type: RSA Authentication Manager Prime Kit
Platform: Linux

Issue

The RSA Authentication Manager Prime Kit services (Authentication Manager Integration Services, Help Desk Admin Portal or the Self-Service Portal) fail to start. The operation fails with the following error message. 

/opt/rsa/primekit/tomcat/tomcat-ssp/bin/tomcat.pid: Permission denied

/opt/rsa/primekit/tomcat/tomcat-hdap/bin/tomcat.pid: Permission denied

/opt/rsa/primekit/tomcat/tomcat-amis/bin/tomcat.pid: Permission denied

Cause

The user that is used to run the Tomcat service does not have sufficient permissions to one or more of the directories below:

• /opt/rsa/primekit/tomcat/tomcat-ssp/bin/
• /opt/rsa/primekit/tomcat/tomcat-hdap/bin/
• /opt/rsa/primekit/tomcat/tomcat-amis/bin/

Resolution

The easiest way to resolve this issue is to give full permissions to all users on the problematic directory. 

1. Use SSH to access the RSA Authentication Manager Prime Kit server.
2. Run the following command against the directory corresponding to the service with which you are facing the issue.

• For SSP:

chmod -R 777 /opt/rsa/primekit/tomcat/tomcat-ssp/bin/

• For HDAP:

chmod -R 777 /opt/rsa/primekit/tomcat/tomcat-hdap/bin/

• For AMIS:

chmod -R 777 /opt/rsa/primekit/tomcat/tomcat-amis/bin/

3. Restart the RSA Authentication Manager Prime Kit services:

   service tomcat-amis restart
   service tomcat-hdap restart
   service tomcat-ssp restart

The proper way to resolve this issue is to run the reset_perms script to assign the correct permissions to the directory. To do so:

1. Use SSH to access the RSA Authentication Manager Prime Kit server.
2. Go to the <Prime_installation_directory>/scripts/tools:

cd /opt/rsa/primekit/scripts/tools

3. Run the reset permissions script to correct the permissions for all directories:

./3_reset_perms.sh

4. Press Enter when prompted to for the script to do its job.
5. Restart the RSA Authentication Manager Prime Kit services:

service tomcat-amis restart
service tomcat-hdap restart
service tomcat-ssp restart