Adding the IBM HTTP server user to the pkcs11 group

Non-root users running applications using the PKCS#11 API must belong to the pkcs11 group.

IBM HTTP server (IHS) usually runs under the Linux™ nobody user. So the nobody user must be added to the pkcs11 group. The root user is automatically added when the pkcss_startup is called the first time.

List pkcs11 group members and add the nobody user if applicable:

Sample commands: adding the Linux nobody user to the pkcs11 group

# grep pkcs11 /etc/group 
pkcs11:!:64:root
# usermod -G pkcs11 nobody