Prime kit tomcat.pid: Permission denied error when restarting services for RSA Authentication Manager Prime Kit
2 years ago
Originally Published: 2020-06-04
Article Number
000044631
Applies To
RSA Product Set: SecurID
RSA Product/Service Type: RSA Authentication Manager Prime Kit
Platform: Linux
Issue
The RSA Authentication Manager Prime Kit services (Authentication Manager Integration Services, Help Desk Admin Portal or the Self-Service Portal) fail to start. The operation fails with the following error message. 
/opt/rsa/primekit/tomcat/tomcat-ssp/bin/tomcat.pid: Permission denied
/opt/rsa/primekit/tomcat/tomcat-hdap/bin/tomcat.pid: Permission denied
/opt/rsa/primekit/tomcat/tomcat-amis/bin/tomcat.pid: Permission denied
Cause
The user that is used to run the Tomcat service does not have sufficient permissions to one or more of the directories below:
  • /opt/rsa/primekit/tomcat/tomcat-ssp/bin/
  • /opt/rsa/primekit/tomcat/tomcat-hdap/bin/
  • /opt/rsa/primekit/tomcat/tomcat-amis/bin/
Resolution
The easiest way to resolve this issue is to give full permissions to all users on the problematic directory. 
  1. Use SSH to access the RSA Authentication Manager Prime Kit server.
  2. Run the following command against the directory corresponding to the service with which you are facing the issue.
  • For SSP:
chmod -R 777 /opt/rsa/primekit/tomcat/tomcat-ssp/bin/
  • For HDAP:
chmod -R 777 /opt/rsa/primekit/tomcat/tomcat-hdap/bin/
  • For AMIS:
chmod -R 777 /opt/rsa/primekit/tomcat/tomcat-amis/bin/
  1. Restart the RSA Authentication Manager Prime Kit services:
    service tomcat-amis restart
    service tomcat-hdap restart
    service tomcat-ssp restart

The proper way to resolve this issue is to run the reset_perms script to assign the correct permissions to the directory. To do so:
  1. Use SSH to access the RSA Authentication Manager Prime Kit server.
  2. Go to the <Prime_installation_directory>/scripts/tools:
cd /opt/rsa/primekit/scripts/tools
  1. Run the reset permissions script to correct the permissions for all directories:
./3_reset_perms.sh
  1. Press Enter when prompted to for the script to do its job.
  2. Restart the RSA Authentication Manager Prime Kit services:
service tomcat-amis restart
service tomcat-hdap restart
service tomcat-ssp restart