I try to enable WebLogic domain wide administrator port with online WLST script.
import os
# Deployment Information
domainname = os.environ.get('DOMAIN_NAME', 'base_domain')
admin_name = os.environ.get('ADMIN_NAME', 'AdminServer')
domainhome = os.environ.get('DOMAIN_HOME', '/u01/oracle/user_projects/domains/' + domainname)
ssl_port = os.environ.get('SSL_PORT', '7999')
admin_port = os.environ.get('SSL_ADMIN_PORT', '8888')
print('admin_name : [%s]' % admin_name);
# Read Domain in Offline Mode
# ===========================
connect(username,password,server_url)
edit()
print ""
print "================== SSL configuration ==================="
startEdit()
# Configure SSL
#===================
cd('/Servers/' + admin_name)
set('KeyStores', 'CustomIdentityAndJavaStandardTrust')
set('CustomIdentityKeyStoreFileName', '/u01/oracle/certificates/keystore')
set('CustomIdentityKeyStorePassPhraseEncrypted', encrypt('weblogic1'))
set('CustomIdentityKeyStoreType', 'jks')
cd('SSL/' + admin_name)
set('Enabled', 'True')
set('ListenPort', int(ssl_port))
set('ServerPrivateKeyAlias', key_alias)
set('ServerPrivateKeyPassPhraseEncrypted', encrypt('weblogic1'))
set('TwoWaySSLEnabled', 'true')
print("Set CustomIdentityAndJavaStandardTrust # [%s]" % "/u01/oracle/certificates/keystore")
print("Key alias: [%s]" % key_alias)
print("Enabled SSL listen port # [%s]" % ssl_port)
print("Enabled two-way SSL authentication")
# Enable administration port
# ===========================
cd ('/')
set('AdministrationPortEnabled', 'true')
set('AdministrationPort', int(admin_port))
print("Enabled administration port # [%s]" % admin_port)
# Save, activate and exit
# ==========================
print ""
save()
activate()
exit()
However, the script throws following error
<Jun 13, 2018 7:26:41,805 AM GMT> <Warning> <RMI> <BEA-080005> <An exception was
generated by the RMI server: Remote call rejected due to wrong channel usage
java.lang.SecurityException: User 'principals=[weblogic, Administrators]' has a
dministration role. All tasks by adminstrators must go through an Administration
Port. Channel:Default[t3][1]:t3(t3):127.0.0.1:7001:null:-1, endpoint:weblogic.r
jvm.RJVMImpl#50ad6c43 - JVMID: '2801878478613847958C:172.17.0.2R:-50326164812424
17496S:172.17.0.2:kkv:admin' connect time: 'Wed Jun 13 07:26:37 GMT 2018', serve
rRef:594523856.
java.lang.SecurityException: User 'principals=[weblogic, Administrators]' has ad
ministration role. All tasks by adminstrators must go through an Administration
Port. Channel:Default[t3][1]:t3(t3):127.0.0.1:7001:null:-1, endpoint:weblogic.rj
vm.RJVMImpl#50ad6c43 - JVMID: '2801878478613847958C:172.17.0.2R:-503261648124241
7496S:172.17.0.2:kkv:admin' connect time: 'Wed Jun 13 07:26:37 GMT 2018', server
Ref:594523856
at weblogic.rmi.internal.BasicServerRef.ensureAdministratorUsesAdminChan
nel(BasicServerRef.java:433)
at weblogic.rmi.internal.BasicServerRef.checkPriviledges(BasicServerRef.
java:1089)
at weblogic.rmi.internal.BasicServerRef.dispatch(BasicServerRef.java:378
)
at weblogic.rmi.internal.BasicServerRef.dispatch(BasicServerRef.java:108
1)
at weblogic.rjvm.RJVMImpl.dispatchRequest(RJVMImpl.java:1405)
Truncated. see log file for complete stacktrace
>
<Jun 13, 2018 7:26:41,817 AM GMT> <Warning> <RMI> <BEA-080005> <An exception was
generated by the RMI server: Remote call rejected due to wrong channel usage
java.lang.SecurityException: User 'principals=[weblogic, Administrators]' has a
dministration role. All tasks by adminstrators must go through an Administration
Port. Channel:Default[t3][1]:t3(t3):127.0.0.1:7001:null:-1, endpoint:weblogic.r
jvm.RJVMImpl#50ad6c43 - JVMID: '2801878478613847958C:172.17.0.2R:-50326164812424
17496S:172.17.0.2:kkv:admin' connect time: 'Wed Jun 13 07:26:37 GMT 2018', serve
rRef:594523856.
java.lang.SecurityException: User 'principals=[weblogic, Administrators]' has ad
ministration role. All tasks by adminstrators must go through an Administration
Port. Channel:Default[t3][1]:t3(t3):127.0.0.1:7001:null:-1, endpoint:weblogic.rj
vm.RJVMImpl#50ad6c43 - JVMID: '2801878478613847958C:172.17.0.2R:-503261648124241
7496S:172.17.0.2:kkv:admin' connect time: 'Wed Jun 13 07:26:37 GMT 2018', server
Ref:594523856
at weblogic.rmi.internal.BasicServerRef.ensureAdministratorUsesAdminChan
nel(BasicServerRef.java:433)
at weblogic.rmi.internal.BasicServerRef.checkPriviledges(BasicServerRef.
java:1089)
at weblogic.rmi.internal.BasicServerRef.dispatch(BasicServerRef.java:378
)
at weblogic.rmi.internal.BasicServerRef.dispatch(BasicServerRef.java:108
1)
at weblogic.rjvm.RJVMImpl.dispatchRequest(RJVMImpl.java:1405)
Truncated. see log file for complete stacktrace
>
<Jun 13, 2018 7:26:41,850 AM GMT> <Warning> <RMI> <BEA-080005> <An exception was
generated by the RMI server: Remote call rejected due to wrong channel usage
java.lang.SecurityException: User 'principals=[weblogic, Administrators]' has a
dministration role. All tasks by adminstrators must go through an Administration
Port. Channel:Default[t3][1]:t3(t3):127.0.0.1:7001:null:-1, endpoint:weblogic.r
jvm.RJVMImpl#50ad6c43 - JVMID: '2801878478613847958C:172.17.0.2R:-50326164812424
17496S:172.17.0.2:kkv:admin' connect time: 'Wed Jun 13 07:26:37 GMT 2018', serve
rRef:594523856.
java.lang.SecurityException: User 'principals=[weblogic, Administrators]' has ad
ministration role. All tasks by adminstrators must go through an Administration
Port. Channel:Default[t3][1]:t3(t3):127.0.0.1:7001:null:-1, endpoint:weblogic.rj
vm.RJVMImpl#50ad6c43 - JVMID: '2801878478613847958C:172.17.0.2R:-503261648124241
7496S:172.17.0.2:kkv:admin' connect time: 'Wed Jun 13 07:26:37 GMT 2018', server
Ref:594523856
at weblogic.rmi.internal.BasicServerRef.ensureAdministratorUsesAdminChan
nel(BasicServerRef.java:433)
at weblogic.rmi.internal.BasicServerRef.checkPriviledges(BasicServerRef.
java:1089)
at weblogic.rmi.internal.BasicServerRef.dispatch(BasicServerRef.java:378
)
at weblogic.rmi.internal.BasicServerRef.dispatch(BasicServerRef.java:108
1)
at weblogic.rjvm.RJVMImpl.dispatchRequest(RJVMImpl.java:1405)
Truncated. see log file for complete stacktrace
>
<Jun 13, 2018 7:26:41,852 AM GMT> <Warning> <RMI> <BEA-080005> <An exception was
generated by the RMI server: Remote call rejected due to wrong channel usage
java.lang.SecurityException: User 'principals=[weblogic, Administrators]' has a
dministration role. All tasks by adminstrators must go through an Administration
Port. Channel:Default[t3][1]:t3(t3):127.0.0.1:7001:null:-1, endpoint:weblogic.r
jvm.RJVMImpl#50ad6c43 - JVMID: '2801878478613847958C:172.17.0.2R:-50326164812424
17496S:172.17.0.2:kkv:admin' connect time: 'Wed Jun 13 07:26:37 GMT 2018', serve
rRef:594523856.
java.lang.SecurityException: User 'principals=[weblogic, Administrators]' has ad
ministration role. All tasks by adminstrators must go through an Administration
Port. Channel:Default[t3][1]:t3(t3):127.0.0.1:7001:null:-1, endpoint:weblogic.rj
vm.RJVMImpl#50ad6c43 - JVMID: '2801878478613847958C:172.17.0.2R:-503261648124241
7496S:172.17.0.2:kkv:admin' connect time: 'Wed Jun 13 07:26:37 GMT 2018', server
Ref:594523856
at weblogic.rmi.internal.BasicServerRef.ensureAdministratorUsesAdminChan
nel(BasicServerRef.java:433)
at weblogic.rmi.internal.BasicServerRef.checkPriviledges(BasicServerRef.
java:1089)
at weblogic.rmi.internal.BasicServerRef.dispatch(BasicServerRef.java:378
)
at weblogic.rmi.internal.BasicServerRef.dispatch(BasicServerRef.java:108
1)
at weblogic.rjvm.RJVMImpl.dispatchRequest(RJVMImpl.java:1405)
Truncated. see log file for complete stacktrace
>
<Jun 13, 2018 7:26:41,863 AM GMT> <Warning> <RMI> <BEA-080005> <An exception was
generated by the RMI server: Remote call rejected due to wrong channel usage
java.lang.SecurityException: User 'principals=[weblogic, Administrators]' has a
dministration role. All tasks by adminstrators must go through an Administration
Port. Channel:Default[t3][1]:t3(t3):127.0.0.1:7001:null:-1, endpoint:weblogic.r
jvm.RJVMImpl#50ad6c43 - JVMID: '2801878478613847958C:172.17.0.2R:-50326164812424
17496S:172.17.0.2:kkv:admin' connect time: 'Wed Jun 13 07:26:37 GMT 2018', serve
rRef:594523856.
java.lang.SecurityException: User 'principals=[weblogic, Administrators]' has ad
ministration role. All tasks by adminstrators must go through an Administration
Port. Channel:Default[t3][1]:t3(t3):127.0.0.1:7001:null:-1, endpoint:weblogic.rj
vm.RJVMImpl#50ad6c43 - JVMID: '2801878478613847958C:172.17.0.2R:-503261648124241
7496S:172.17.0.2:kkv:admin' connect time: 'Wed Jun 13 07:26:37 GMT 2018', server
Ref:594523856
at weblogic.rmi.internal.BasicServerRef.ensureAdministratorUsesAdminChan
nel(BasicServerRef.java:433)
at weblogic.rmi.internal.BasicServerRef.checkPriviledges(BasicServerRef.
java:1089)
at weblogic.rmi.internal.BasicServerRef.dispatch(BasicServerRef.java:378
)
at weblogic.rmi.internal.BasicServerRef.dispatch(BasicServerRef.java:108
1)
at weblogic.rjvm.RJVMImpl.dispatchRequest(RJVMImpl.java:1405)
Truncated. see log file for complete stacktrace
>
<Jun 13, 2018 7:26:41,868 AM GMT> <Warning> <RMI> <BEA-080005> <An exception was
generated by the RMI server: Remote call rejected due to wrong channel usage
java.lang.SecurityException: User 'principals=[weblogic, Administrators]' has a
dministration role. All tasks by adminstrators must go through an Administration
Port. Channel:Default[t3][1]:t3(t3):127.0.0.1:7001:null:-1, endpoint:weblogic.r
jvm.RJVMImpl#50ad6c43 - JVMID: '2801878478613847958C:172.17.0.2R:-50326164812424
17496S:172.17.0.2:kkv:admin' connect time: 'Wed Jun 13 07:26:37 GMT 2018', serve
rRef:594523856.
java.lang.SecurityException: User 'principals=[weblogic, Administrators]' has ad
ministration role. All tasks by adminstrators must go through an Administration
Port. Channel:Default[t3][1]:t3(t3):127.0.0.1:7001:null:-1, endpoint:weblogic.rj
vm.RJVMImpl#50ad6c43 - JVMID: '2801878478613847958C:172.17.0.2R:-503261648124241
7496S:172.17.0.2:kkv:admin' connect time: 'Wed Jun 13 07:26:37 GMT 2018', server
Ref:594523856
at weblogic.rmi.internal.BasicServerRef.ensureAdministratorUsesAdminChan
nel(BasicServerRef.java:433)
at weblogic.rmi.internal.BasicServerRef.checkPriviledges(BasicServerRef.
java:1089)
at weblogic.rmi.internal.BasicServerRef.dispatch(BasicServerRef.java:378
)
at weblogic.rmi.internal.BasicServerRef.dispatch(BasicServerRef.java:108
1)
at weblogic.rjvm.RJVMImpl.dispatchRequest(RJVMImpl.java:1405)
Truncated. see log file for complete stacktrace
>
"
You will have to re-connect to the server due to some changes" "
you have made."
Disconnected from weblogic server: admin
<Jun 13, 2018 7:26:41,878 AM GMT> <Warning> <RMI> <BEA-080005> <An exception was
generated by the RMI server: Remote call rejected due to wrong channel usage
java.lang.SecurityException: User 'principals=[weblogic, Administrators]' has a
dministration role. All tasks by adminstrators must go through an Administration
Port. Channel:Default[t3][1]:t3(t3):127.0.0.1:7001:null:-1, endpoint:weblogic.r
jvm.RJVMImpl#50ad6c43 - JVMID: '2801878478613847958C:172.17.0.2R:-50326164812424
17496S:172.17.0.2:kkv:admin' connect time: 'Wed Jun 13 07:26:37 GMT 2018', serve
rRef:326931496.
java.lang.SecurityException: User 'principals=[weblogic, Administrators]' has ad
ministration role. All tasks by adminstrators must go through an Administration
Port. Channel:Default[t3][1]:t3(t3):127.0.0.1:7001:null:-1, endpoint:weblogic.rj
vm.RJVMImpl#50ad6c43 - JVMID: '2801878478613847958C:172.17.0.2R:-503261648124241
7496S:172.17.0.2:kkv:admin' connect time: 'Wed Jun 13 07:26:37 GMT 2018', server
Ref:326931496
at weblogic.rmi.internal.BasicServerRef.ensureAdministratorUsesAdminChan
nel(BasicServerRef.java:433)
at weblogic.rmi.internal.BasicServerRef.checkPriviledges(BasicServerRef.
java:1089)
at weblogic.rmi.internal.BasicServerRef.dispatch(BasicServerRef.java:378
)
at weblogic.rmi.internal.BasicServerRef.dispatch(BasicServerRef.java:108
1)
at weblogic.rjvm.RJVMImpl.dispatchRequest(RJVMImpl.java:1405)
Truncated. see log file for complete stacktrace
>
<Jun 13, 2018 7:26:41,881 AM GMT> <Warning> <RMI> <BEA-080005> <An exception was
generated by the RMI server: Remote call rejected due to wrong channel usage
java.lang.SecurityException: User 'principals=[weblogic, Administrators]' has a
dministration role. All tasks by adminstrators must go through an Administration
Port. Channel:Default[t3][1]:t3(t3):127.0.0.1:7001:null:-1, endpoint:weblogic.r
jvm.RJVMImpl#50ad6c43 - JVMID: '2801878478613847958C:172.17.0.2R:-50326164812424
17496S:172.17.0.2:kkv:admin' connect time: 'Wed Jun 13 07:26:37 GMT 2018', serve
rRef:594523856.
java.lang.SecurityException: User 'principals=[weblogic, Administrators]' has ad
ministration role. All tasks by adminstrators must go through an Administration
Port. Channel:Default[t3][1]:t3(t3):127.0.0.1:7001:null:-1, endpoint:weblogic.rj
vm.RJVMImpl#50ad6c43 - JVMID: '2801878478613847958C:172.17.0.2R:-503261648124241
7496S:172.17.0.2:kkv:admin' connect time: 'Wed Jun 13 07:26:37 GMT 2018', server
Ref:594523856
at weblogic.rmi.internal.BasicServerRef.ensureAdministratorUsesAdminChan
nel(BasicServerRef.java:433)
at weblogic.rmi.internal.BasicServerRef.checkPriviledges(BasicServerRef.
java:1089)
at weblogic.rmi.internal.BasicServerRef.dispatch(BasicServerRef.java:378
)
at weblogic.rmi.internal.BasicServerRef.dispatch(BasicServerRef.java:108
1)
at weblogic.rjvm.RJVMImpl.dispatchRequest(RJVMImpl.java:1405)
Truncated. see log file for complete stacktrace
>
Exiting WebLogic Scripting Tool.
Initializing WebLogic Scripting Tool (WLST) ...
Welcome to WebLogic Server Administration Scripting Shell
Type help() for help on available commands
admin_name : [admin]
Connecting to t3s://localhost:8881 with userid weblogic ...
<Jun 13, 2018 7:26:50 AM GMT> <Info> <Security> <BEA-090905> <Disabling the Cryp
toJ JCE Provider self-integrity check for better startup performance. To enable
this check, specify -Dweblogic.security.allowCryptoJDefaultJCEVerification=true.
>
<Jun 13, 2018 7:26:50 AM GMT> <Info> <Security> <BEA-090906> <Changing the defau
lt Random Number Generator in RSA CryptoJ from ECDRBG128 to HMACDRBG. To disable
this change, specify -Dweblogic.security.allowCryptoJDefaultPRNG=true.>
<Jun 13, 2018 7:26:50 AM GMT> <Info> <Security> <BEA-090909> <Using the configur
ed custom SSL Hostname Verifier implementation: weblogic.security.utils.SSLWLSHo
stnameVerifier$NullHostnameVerifier.>
Successfully connected to Admin Server "admin" that belongs to domain "kkv".
Location changed to edit tree.
This is a writable tree with DomainMBean as the root.
To make changes you will need to start an edit session via startEdit().
For more help, use help('edit').
Regardless of the error, the port seems to be enabled. But how could I avoid this error, i.e. still allow the current WLST edit session to use non secure channel after enabling administration port in the current edit session, and activate the changes and exit cleanly without the error message?
Related
Hello so here is the problem
I have generated CSR on CentOS and purchased SSL on Comodo.
I have added following lines to ssl.conf
ServerName mydomain.com
DocumentRoot /var/www/html
SSLEngine on
SSLCertificateKeyFile /etc/pki/tls/certs/mydomain.key
SSLCertificateFile /etc/pki/tls/certs/mydomain.crt
SSLCACertificateFile /etc/pki/tls/certs/mydomainCA.crt
and following lines to httpd.conf
<VirtualHost *:80>
ServerName thedomain.com
Redirect "/" "https://thedomain.com/"
</VirtualHost>
After this when I do systemctl restart httpd it gives me following error:
Job for httpd.service failed because the control process exited with error code. See "systemctl status httpd.service" and "journalctl
-xe" for details.
and when I check journalctl -xe for details this is what it reads:
-- Subject: Unit httpd.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- Unit httpd.service has finished starting up.
-- The start-up result is done. Nov 24 18:36:01 MyWay polkitd[568]: Unregistered Authentication Agent for unix-process:6639:684652621
(system bus name :1.4409, object path
/org/freedesktop/PolicyKit1/AuthenticationAgent, locale e Nov 24
18:36:04 MyWay sshd[6652]: Invalid user oracle from 80.241.211.237
port 54600 Nov 24 18:36:04 MyWay sshd[6652]: input_userauth_request:
invalid user oracle [preauth] Nov 24 18:36:04 MyWay sshd[6652]:
pam_unix(sshd:auth): check pass; user unknown Nov 24 18:36:04 MyWay
sshd[6652]: pam_unix(sshd:auth): authentication failure; logname=
uid=0 euid=0 tty=ssh ruser= rhost=vmi306916.contaboserver.net Nov 24
18:36:06 MyWay sshd[6652]: Failed password for invalid user oracle
from 80.241.211.237 port 54600 ssh2 Nov 24 18:36:06 MyWay sshd[6652]:
Received disconnect from 80.241.211.237 port 54600:11: Normal
Shutdown, Thank you for playing [preauth] Nov 24 18:36:06 MyWay
sshd[6652]: Disconnected from 80.241.211.237 port 54600 [preauth] Nov
24 18:36:16 MyWay sshd[6651]: Received disconnect from 112.85.42.94
port 31545:11: [preauth] Nov 24 18:36:16 MyWay sshd[6651]:
Disconnected from 112.85.42.94 port 31545 [preauth] Nov 24 18:36:18
MyWay polkitd[568]: Registered Authentication Agent for
unix-process:6655:684654361 (system bus name :1.4410
[/usr/bin/pkttyagent --notify-fd 5 --fallback], object path
/org/freedes Nov 24 18:36:18 MyWay systemd[1]: Stopping The Apache
HTTP Server...
-- Subject: Unit httpd.service has begun shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- Unit httpd.service has begun shutting down. Nov 24 18:36:19 MyWay systemd[1]: Stopped The Apache HTTP Server.
-- Subject: Unit httpd.service has finished shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- Unit httpd.service has finished shutting down. Nov 24 18:36:19 MyWay systemd[1]: Starting The Apache HTTP Server...
-- Subject: Unit httpd.service has begun start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- Unit httpd.service has begun starting up. Nov 24 18:36:19 MyWay systemd[1]: httpd.service: main process exited, code=exited,
status=1/FAILURE Nov 24 18:36:19 MyWay kill[6667]: kill: cannot find
process "" Nov 24 18:36:19 MyWay systemd[1]: httpd.service: control
process exited, code=exited status=1 Nov 24 18:36:19 MyWay systemd[1]:
Failed to start The Apache HTTP Server.
-- Subject: Unit httpd.service has failed
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- Unit httpd.service has failed.
-- The result is failed. Nov 24 18:36:19 MyWay systemd[1]: Unit httpd.service entered failed state. Nov 24 18:36:19 MyWay systemd[1]:
httpd.service failed. Nov 24 18:36:19 MyWay polkitd[568]: Unregistered
Authentication Agent for unix-process:6655:684654361 (system bus name
:1.4410, object path /org/freedesktop/PolicyKit1/AuthenticationAgent,
locale e [
So I have checked lot os solutions but this problems still exists, please note that when I comment out all changes in httpd.conf and ssl.conf apache starts working back normally.
Thanks all in advance
SOLVED
Renaming file to PEM helped the case, besides this I came across some other issues that were causing error ( looking ata apache logs helped me to solv them )
Memory for apache was full so I had to increase it.
I had duplicated SSLCertificateKeyFile in the ssl.conf file and I commented out the default file link.
I have two servers Server A and Server B :
I want to make admin server on Server A and manage servers on server B .Manage servers on B will be pointing to Server A admin . I tried using this configuration but manage servers are not able to start giving below error, Admin server A is running
Configuration :
Server A : Only Admin , Port 9001
Server B : No admin , Only 2 Manage servers : Port 7002, 7003 pointing to Server A admin
**Error logs :
<May 7, 2014 4:11:40 PM IST> <Info> <WebLogicServer> <BEA-000377> <Starting WebLogic Server with IBM J9 VM Version 2.3 from IBM Corporation>
<May 7, 2014 4:11:41 PM IST> <Info> <Management> <BEA-141107> <Version: WebLogic Server 9.2 MP3 Mon Mar 10 08:28:41 EDT 2008 1096261 >
<May 7, 2014 4:11:44 PM IST> <Emergency> <Management> <BEA-141151> <The admin server could not be reached at http://172.21.153.108.>
<May 7, 2014 4:11:44 PM IST> <Info> <Configuration Management> <BEA-150018> <This server is being started in managed server independence mode in the absence of the admin server.>
<May 7, 2014 4:11:44 PM IST> <Info> <WebLogicServer> <BEA-000215> <Loaded License : /usr/local/bea/bea92/license.bea>
<May 7, 2014 4:11:44 PM IST> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to STARTING>
<May 7, 2014 4:11:44 PM IST> <Info> <WorkManager> <BEA-002900> <Initializing self-tuning thread pool>
<May 7, 2014 4:11:44 PM IST> <Notice> <Log Management> <BEA-170019> <The server log file /usr/local/bea/bea92/user_projects/domains/RxConnect/servers/Store_MS1/logs/Store_MS1.log is opened. All server side log events will be written to this file.>
<May 7, 2014 4:11:48 PM IST> <Error> <Security> <BEA-090870> <The realm "myrealm" failed to be loaded: weblogic.security.service.SecurityServiceException: com.bea.common.engine.ServiceInitializationException: java.lang.IllegalArgumentException: port out of range:-1.
weblogic.security.service.SecurityServiceException: com.bea.common.engine.ServiceInitializationException: java.lang.IllegalArgumentException: port out of range:-1
at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.initializeRealm(CommonSecurityServiceManagerDelegateImpl.java:469)
at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.loadRealm(CommonSecurityServiceManagerDelegateImpl.java:822)
at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.initializeRealms(CommonSecurityServiceManagerDelegateImpl.java:851)
at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.initialize(CommonSecurityServiceManagerDelegateImpl.java:1007)
at weblogic.security.service.SecurityServiceManager.initialize(SecurityServiceManager.java:854)
Truncated. see log file for complete stacktrace
com.bea.common.engine.ServiceInitializationException: java.lang.IllegalArgumentException: port out of range:-1
at com.bea.common.engine.internal.ServiceEngineImpl.findOrStartService(ServiceEngineImpl.java:342)
at com.bea.common.engine.internal.ServiceEngineImpl.findOrStartService(ServiceEngineImpl.java:292)
at com.bea.common.engine.internal.ServiceEngineImpl.lookupService(ServiceEngineImpl.java:263)
at com.bea.common.engine.internal.ServicesImpl.getService(ServicesImpl.java:71)
at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.initializeRealm(CommonSecurityServiceManagerDelegateImpl.java:461)
Truncated. see log file for complete stacktrace
java.lang.IllegalArgumentException: port out of range:-1
at java.net.InetSocketAddress.<init>(InetSocketAddress.java:136)
at java.net.Socket.<init>(Socket.java:226)
at netscape.ldap.LDAPConnSetupMgr.connectServer(LDAPConnSetupMgr.java:499)
at netscape.ldap.LDAPConnSetupMgr.openSerial(LDAPConnSetupMgr.java:435)
at netscape.ldap.LDAPConnSetupMgr.connect(LDAPConnSetupMgr.java:274)
Truncated. see log file for complete stacktrace
>
<May 7, 2014 4:11:48 PM IST> <Notice> <Security> <BEA-090082> <Security initializing using security realm myrealm.>
<May 7, 2014 4:11:48 PM IST> <Critical> <WebLogicServer> <BEA-000362> <Server failed. Reason:
There are 1 nested errors:
weblogic.security.service.SecurityServiceRuntimeException: [Security:090399]Security Services Unavailable
at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.doBootAuthorization(CommonSecurityServiceManagerDelegateImpl.java:898)
at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.initialize(CommonSecurityServiceManagerDelegateImpl.java:1029)
at weblogic.security.service.SecurityServiceManager.initialize(SecurityServiceManager.java:854)
at weblogic.security.SecurityService.start(SecurityService.java:141)
at weblogic.t3.srvr.SubsystemRequest.run(SubsystemRequest.java:64)
at weblogic.work.ExecuteThread.execute(ExecuteThread.java:209)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:181)
>
<May 7, 2014 4:11:48 PM IST> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to FAILED>
<May 7, 2014 4:11:48 PM IST> <Error> <WebLogicServer> <BEA-000383> <A critical service failed. The server will shut itself down>
<May 7, 2014 4:11:48 PM IST> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to FORCE_SHUTTING_DOWN>**
i'm trying to get CouldBees working. Heres the error i get when im running:
C:\cloudbees-sdk-1.5.0>bees init --proxyHost=localhost --proxyPort=8008 (or 8080)
You have not created a CloudBees configuration profile, let's create
one now... Enter your default CloudBees API end point [us | eu]: eu
Enter your CloudBees account email address: abs#abs.com
Enter your CloudBees account password: Jul 18, 2013 1:32:09 PM
org.apache.commons.httpclient.HttpMethodDirector execute WithRetry
INFO: I/O exception (java.net.ConnectException) caught when processing
request: Connection refused: connect Jul 18, 2013 1:32:09 PM
org.apache.commons.httpclient.HttpMethodDirector execute WithRetry
INFO: Retrying request Jul 18, 2013 1:32:10 PM
org.apache.commons.httpclient.HttpMethodDirector execute WithRetry
INFO: I/O exception (java.net.ConnectException) caught when processing
request: Connection refused: connect Jul 18, 2013 1:32:10 PM
org.apache.commons.httpclient.HttpMethodDirector execute WithRetry
INFO: Retrying request Jul 18, 2013 1:32:11 PM
org.apache.commons.httpclient.HttpMethodDirector execute WithRetry
INFO: I/O exception (java.net.ConnectException) caught when processing
request: Connection refused: connect Jul 18, 2013 1:32:11 PM
org.apache.commons.httpclient.HttpMethodDirector execute WithRetry
INFO: Retrying request
ERROR: Initialization failure: Cannot create configuration
Can anyone read out what's causing this error?
It looks like the SDK can't establish Internet connections to the CloudBees website. If you are running behind a proxy, you will need to use proxy flags to connect.
bees init --proxyHost=YOUR_PROXY_HOST --proxyPort=YOUR_PROXY_PORT
This is covered in the CloudBees SDK docs: Running behind a proxy
It helps, to set the system time exactly to six hours ago (US-time).
Also cloudbees documentation sais, that You should create on your file system (under Windows7) c:\Users\Your_User.bees\bees.config file, which contains following line (if you want to call cloudbbees eu server):
bees.api.url=https\://api-eu.cloudbees.com/api>
but actually it didn't help in my case (maybe outdated version)
I am trying to restart my weblogic server (Weblogic Server Version: 10.3.5). It throws the below error. I used to restart is regularly earlier but it is throwing this error today.
I have replaced the boot.properties file with the correct username and password and on trying to restart, I see that it is getting encrypted, but the server is not starting up. I have also tried modifying the config.xml and entered the decrypted password, but still I get the error.
Starting WLS with line:
/usr/lib/jvm/java-1.6.0-openjdk-1.6.0.0.x86_64/bin/java -server -Xms2048M -Xmx2048M -XX:MaxPermSize=512M -Dweblogic.Name=ManagedServer -Djava.security.policy=/u01/Oracle/Middleware/wlserver_10.3/server/lib/weblogic.policy -Dweblogic.security.SSL.trustedCAKeyStore=/u01/Oracle/Middleware/wlserver_10.3/server/lib/cacerts -da -Dplatform.home=/u01/Oracle/Middleware/wlserver_10.3 -Dwls.home=/u01/Oracle/Middleware/wlserver_10.3/server -Dweblogic.home=/u01/Oracle/Middleware/wlserver_10.3/server -Dweblogic.management.discover=false -Dweblogic.management.server=http://kbzuatapp:7001 -Dwlw.iterativeDev=false -Dwlw.testConsole=false -Dwlw.logErrorsToConsole=false -Dweblogic.ext.dirs=/u01/Oracle/Middleware/patch_wls1035/profiles/default/sysext_manifest_classpath:/u01/Oracle/Middleware/patch_ocp360/profiles/default/sysext_manifest_classpath -Djava.security.egd=file:/dev/./urandom weblogic.Server
<Oct 19, 2012 8:01:35 PM MMT> <Info> <Security> <BEA-090905> <Disabling CryptoJ JCE Provider self-integrity check for better startup performance. To enable this check, specify -Dweblogic.security.allowCryptoJDefaultJCEVerification=true>
<Oct 19, 2012 8:01:36 PM MMT> <Info> <Security> <BEA-090906> <Changing the default Random Number Generator in RSA CryptoJ from ECDRBG to FIPS186PRNG. To disable this change, specify -Dweblogic.security.allowCryptoJDefaultPRNG=true>
<Oct 19, 2012 8:01:36 PM MMT> <Info> <WebLogicServer> <BEA-000377> <Starting WebLogic Server with OpenJDK 64-Bit Server VM Version 19.0-b09 from Sun Microsystems Inc.>
<Oct 19, 2012 8:01:37 PM MMT> <Info> <Security> <BEA-090065> <Getting boot identity from user.>
Enter username to boot WebLogic server:Error: Failed to get value from Standard Input
Enter password to boot WebLogic server:
<Oct 19, 2012 8:01:37 PM MMT> <Info> <Management> <BEA-141107> <Version: WebLogic Server 10.3.5.0 Fri Apr 1 20:20:06 PDT 2011 1398638 >
<Oct 19, 2012 8:01:38 PM MMT> <Error> <Configuration Management> <BEA-150021> <The admin server failed to authenticate the identity of the user starting the managed server. The reason for the error is .>
<Oct 19, 2012 8:01:38 PM MMT> <Emergency> <Management> <BEA-141151> <The admin server could not be reached at http://kbzuatapp:7001.>
<Oct 19, 2012 8:01:38 PM MMT> <Info> <Configuration Management> <BEA-150018> <This server is being started in managed server independence mode in the absence of the admin server.>
<Oct 19, 2012 8:01:38 PM MMT> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to STARTING>
<Oct 19, 2012 8:01:38 PM MMT> <Info> <WorkManager> <BEA-002900> <Initializing self-tuning thread pool>
<Oct 19, 2012 8:01:38 PM MMT> <Notice> <LoggingService> <BEA-320400> <The log file /u01/Oracle/Middleware/user_projects/domains/KBZUAT/servers/ManagedServer/logs/ManagedServer.log will be rotated. Reopen the log file if tailing has stopped. This can happen on some platforms like Windows.>
<Oct 19, 2012 8:01:38 PM MMT> <Notice> <LoggingService> <BEA-320401> <The log file has been rotated to /u01/Oracle/Middleware/user_projects/domains/KBZUAT/servers/ManagedServer/logs/ManagedServer.log00011. Log messages will continue to be logged in /u01/Oracle/Middleware/user_projects/domains/KBZUAT/servers/ManagedServer/logs/ManagedServer.log.>
<Oct 19, 2012 8:01:38 PM MMT> <Notice> <Log Management> <BEA-170019> <The server log file /u01/Oracle/Middleware/user_projects/domains/KBZUAT/servers/ManagedServer/logs/ManagedServer.log is opened. All server side log events will be written to this file.>
<Oct 19, 2012 8:01:41 PM MMT> <Notice> <Security> <BEA-090082> <Security initializing using security realm myrealm.>
<Oct 19, 2012 8:01:41 PM MMT> <Critical> <Security> <BEA-090403> <Authentication for user denied>
<Oct 19, 2012 8:01:41 PM MMT> <Critical> <WebLogicServer> <BEA-000386> <Server subsystem failed. Reason: weblogic.security.SecurityInitializationException: Authentication for user denied
weblogic.security.SecurityInitializationException: Authentication for user denied
at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.doBootAuthorization(CommonSecurityServiceManagerDelegateImpl.java:965)
at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.initialize(CommonSecurityServiceManagerDelegateImpl.java:1050)
at weblogic.security.service.SecurityServiceManager.initialize(SecurityServiceManager.java:873)
at weblogic.security.SecurityService.start(SecurityService.java:141)
at weblogic.t3.srvr.SubsystemRequest.run(SubsystemRequest.java:64)
Truncated. see log file for complete stacktrace
Caused By: javax.security.auth.login.FailedLoginException: [Security:090304]Authentication Failed: User javax.security.auth.login.LoginException: [Security:090301]Password Not Supplied
at weblogic.security.providers.authentication.LDAPAtnLoginModuleImpl.login(LDAPAtnLoginModuleImpl.java:261)
at com.bea.common.security.internal.service.LoginModuleWrapper$1.run(LoginModuleWrapper.java:110)
at java.security.AccessController.doPrivileged(Native Method)
at com.bea.common.security.internal.service.LoginModuleWrapper.login(LoginModuleWrapper.java:106)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
Truncated. see log file for complete stacktrace
Any help would be great. Thanks!
Got the solution. I deleted the edit.lok file and then tried the restart. It worked.
As for me, I had to edit the file boot.properties and set there AGAIN the login and password for the weblogic server. The previous values were encrypted and obviously, some SW couldn't manage it correctly.
try to remove the ManagedServerDir/data/ldap directory.
do not forget to backup
Just do a root level search for boot.properties & edit.lok in the weblogic server and delete them. (take the back up before deleting it) and restart the server.
It works :-)
I have solved in this way:
Under {domain}\servers\AdminServer\data\ldap delete just files on the root and not the ones inside ldapfiles
Remove username - passwrod from boot.properties file under {domain}\servers\AdminServer\security
After the restart, it asks me the credentails and it works as expected.
The cloudbees SDK 1.1 is attempting to connect to localhost:8080 when I run commands.
Any idea what I need to do to fix it?
Example
bees app:info -v
# CloudBees SDK version: 1.1
Enter application ID (ex: account/appname) : account/app
API call: http://localhost:8080/api?timestamp=1344846702&v=1.0&api_key=KEY&action=application.info&app_id=account%2Fapp&format=xml&sig_version=1&sig=SIGN
Aug 13, 2012 6:31:42 PM org.apache.commons.httpclient.HttpMethodDirector executeWithRetry
INFO: I/O exception (java.net.ConnectException) caught when processing request: Connection refused
Aug 13, 2012 6:31:42 PM org.apache.commons.httpclient.HttpMethodDirector executeWithRetry
INFO: Retrying request
Aug 13, 2012 6:31:42 PM org.apache.commons.httpclient.HttpMethodDirector executeWithRetry
INFO: I/O exception (java.net.ConnectException) caught when processing request: Connection refused
Aug 13, 2012 6:31:42 PM org.apache.commons.httpclient.HttpMethodDirector executeWithRetry
INFO: Retrying request
Aug 13, 2012 6:31:42 PM org.apache.commons.httpclient.HttpMethodDirector executeWithRetry
INFO: I/O exception (java.net.ConnectException) caught when processing request: Connection refused
Aug 13, 2012 6:31:42 PM org.apache.commons.httpclient.HttpMethodDirector executeWithRetry
INFO: Retrying request
ERROR: Connection refused
Thank you
Jono
Add bees.api.url=https\://api.cloudbees.com/api to ~/.bees/bees.config
After backing up ~/.bees and then running bees init and recreating my bees configuration directory I noticed the extra entry in bees.config.