Sun Microsystems 820433510 - Manual

C The asadmin Utility ............................................................................................................................ 231 The asadmin Utility ........................................................................................................................... 232 C...

Figures FIGURE 1–1 Enterprise Server Instance ........................................................................................ 29 FIGURE 9–1 Role Mapping ........................................................................................................... 105 13

Tables TABLE 1–1 Features Available for Each Profile .......................................................................... 27 TABLE 1–2 Enterprise Server Listeners that Use Ports ............................................................. 30 TABLE 6–1 JNDI Lookups and Their Associated Referen...

Examples EXAMPLE 18–1 Applications Node Tree Structure ......................................................................... 173 EXAMPLE 18–2 HTTP Service Schematic (DeveloperProfile Version) ........................................ 173 EXAMPLE 18–3 HTTP Service Schematic (Cluster and Enterprise...

Preface The Administration guide describes the administrative tasks of the Enterprise Server. This preface contains information about and conventions for the entire Sun GlassFish TM Enterprise Server documentation set. Sun GlassFish Enterprise Server Documentation Set TABLE P–1 Books in the Enterpri...

Typographic Conventions The following table describes the typographic changes that are used in this book. TABLE P–3 Typographic Conventions Typeface Meaning Example AaBbCc123 The names of commands, files, anddirectories, and onscreen computeroutput Edit your .login file. Use ls -a to list all files....

TABLE P–4 Symbol Conventions (Continued) Symbol Description Example Meaning → Indicates menu itemselection in a graphical userinterface. File → New → Templates From the File menu, choose New.From the New submenu, chooseTemplates. Documentation, Support, and Training The Sun web site provides informa...

Enterprise Server Overview Sun GlassFish Enterprise Server administration includes many tasks such as deployingapplications, creating and configuring domains, server instances and resources; controlling(starting and stopping) domains and server instances, managing profiles and clusters,monitoring an...

Enterprise Server includes the Metro web services stack (http://metro.dev.java.net). Metroimplements important WS-* standards and WS-I standardized interoperability profiles inorder to assure interoperability between Java and .NET web services. Enterprise Server includes the implementation of Java B...

If your configuration includes remote server instances, create node agents to manage andfacilitate remote server instances. It is the responsibility of the node agent to create, start, stop,and delete a server instance. Use the command line interface (CLI) commands to set up nodeagents. Command-line...

Enterprise Server Concepts The Enterprise Server consists of one or more domains. A domain is an administrativeboundary or context. Each domain has an administration server (also called DomainAdministration Server or DAS) associated with it and consists of zero or more standaloneinstances and/or clu...

carry out the requests. The DAS is sometimes referred to as the admin server or default server. Itis referred to as the default server because it is the only server instance that gets created on SunGlassFish Enterprise Server installation and can be used for deployments. The DAS is simply aserver in...

TABLE 1–1 Features Available for Each Profile (Continued) Feature Developer Profile Cluster Profile Enterprise Profile (notavailable with Sun GlassFishCommunications Server) Security Manager Disabled Enabled Enabled HADB Not available Not available Available Load balancing Not available Available Av...

Server Instance The server instance is a single Java EE compatible Java Virtual Machine hosting an EnterpriseServer on a single node. Each server instance has a unique name in the domain. A clusteredserver instance is a member of a cluster and receives all of its applications, resources, andconfigur...

names, IP Addresses, and some administration capabilities. For the users, it is almost as if theyhave their own web server, without the hardware and basic server maintenance. These virtualservers do not span application server instances. For more information about virtual servers,see Chapter 13, “Co...

Basic Enterprise Server Commands Administration of the Enterprise Server includes tasks such as creation, configuration, controland management of domains, clusters, node agents, and server instances. This section containsthe following topics: ■ “Creating a Domain” on page 31 ■ “Deleting a Domain” on...

Caution – Do not create an enterprise domain unless you have HADB and the Network Security Services (NSS) keystore. You will not be able to start an enterprise domain unless you haveHADB and NSS. For the preceding create-domain example, the domain’s log files, configuration files, and deployed appli...

Recreating the Domain Administration Server For mirroring purposes, and to provide a working copy of the Domain Administration Server(DAS), you must have: ■ One machine (machine1) that contains the original DAS. ■ A second machine (machine2) that contains a cluster with server instances runningappli...

Java Business Integration Java Business Integration (JBI) is an implementation of the JSR 208 specification ( http://www.jcp.org/en/jsr/detail?id=208 ) for Java Business Integration, a standard developed under the Java Community Process (JCP) as an approach to implementing aservice-oriented architec...

Binding Components Binding Components are proxies for consumers or providers that are outside the JBIenvironment. Binding components typically are based on a standard communications protocol,such as FTP, JMS, or SMTP, or a call to an external service, such as SAP or WebSphere MQ. JBI components have...

Note – The logging levels for JBI Components are often inherited from a parent logger such as the JBI logger. To view and set parent logging levels, in the Admin Console, select CommonTasks and then Application Server. Then, in the Enterprise Server panel, select Logging andthen Log Levels. Look for...

JDBC Resources This chapter explains how to configure JDBC resources, which are required by applications thataccess databases. This chapter contains the following sections: ■ “JDBC Resources” on page 43 ■ “JDBC Connection Pools” on page 44 ■ “How JDBC Resources and Connection Pools Work Together” on...

When creating a JDBC resource, you must identify: 1. The JNDI Name. By convention, the name begins with the jdbc/ string. For example: jdbc/payrolldb . Don’t forget the forward slash. 2. Select a connection pool to be associated with the new JDBC resource. 3. Specify the settings for the resource. 4...

Working with JDBC Connection Pools A JDBC connection pool is a group of reusable connections for a particular database. Whencreating the pool with the Admin Console, the Administrator is actually defining the aspects ofa connection to a specific database. Before creating the pool, you must first ins...

Click OK. ▼ Creating a JDBC Connection Pool and JDBC Resource Using the CLI Use the asadmin create-jdbc-connection-pool command to create a JDBC connection pool. Sample command to create a JDBC connection pool: asadmin create-jdbc-connection-pool --datasourceclassname oracle.jdbc.pool.OracleDataSour...

Editing a JDBC Connection Pool The Edit JDBC Connection Pool page provides the means to change all of the settings for anexisting pool except its name. 1. Change general settings. The values of the general settings depend on the specific JDBC driver that is installed. Thesesettings are the names of ...

Parameter Description Non-transactional Connections Click the check box if you want Application Server to return allnon-transactional connections. Transaction Isolation Makes it possible to select the transaction isolation level for the connectionsof this pool. If left unspecified, the connections o...

Note – An Oracle database user running the capture-schema command needs ANALYZE ANY TABLE privileges if that user does not own the schema. These privileges are granted to the userby the database administrator. For information about capture-schema , see Sun GlassFish Enterprise Server 2.1 Reference M...

Sun GlassFish JDBC Driver for DB2 Databases The JAR files for this driver are smbase.jar , smdb2.jar , and smutil.jar . Configure the connection pool using the following settings: ■ Name: Use this name when you configure the JDBC resource later. ■ Resource Type: Specify the appropriate value. ■ Data...

Sun GlassFish JDBC Driver for Microsoft SQL ServerDatabases The JAR files for this driver are smbase.jar , smsqlserver.jar , and smutil.jar . Configure the connection pool using the following settings: ■ Name: Use this name when you configure the JDBC resource later. ■ Resource Type: Specify the app...

IBM DB2 8.1 Type 2 Driver The JAR files for the DB2 driver are db2jcc.jar , db2jcc_license_cu.jar , and db2java.zip . Set environment variables as follows: LD_LIBRARY_PATH=/usr/db2user/sqllib/lib:${Java EE.home}/lib DB2DIR=/opt/IBM/db2/V8.1 DB2INSTANCE=db2user INSTHOME=/usr/db2user VWSPATH=/usr/db2u...

■ password - Set as appropriate. ■ databaseName - Set as appropriate. Do not specify the complete URL, only the database name. ■ BE_AS_JDBC_COMPLIANT_AS_POSSIBLE - Set to true . ■ FAKE_METADATA - Set to true . MySQL Type 4 Driver The JAR file for the MySQL driver is mysql-connector-java- version -bi...

■ password - Set as appropriate. Inet Sybelux JDBC Driver for Sybase Databases The JAR file for the Inet Sybase driver is Sybelux.jar . Configure the connection pool using the following settings: ■ Name: Use this name when you configure the JDBC resource later. ■ Resource Type: Specify the appropria...

■ xa-driver-does-not-support-non-tx-operations - Set to the value true . Optional: only needed if both non-XA and XA connections are retrieved from the sameconnection pool. Might degrade performance. As an alternative to setting this property, you can create two connection pools, one fornon-XA conne...

Configuring Java Message Service Resources The Enterprise Server implements the Java Message Service (JMS) API by integrating theMessage Queue software into the Enterprise Server. For basic JMS API administration tasks, usethe Enterprise Server Admin Console. For advanced tasks, including administer...

■ In the MQ Scheme and MQ Service fields, type the Message Queue address scheme nameand the Message Queue connection service name if a non-default scheme or service is to beused. Values of all these properties can be updated at run time too. However, only those connectionfactories that are created a...

Configuring the Generic Resource Adapter Prior to deploying the resource adapter, JMS client libraries should be made available to theEnterprise Server. For some JMS providers, client libraries may also include native libraries. Insuch cases, these native libraries should also be made available to t...

Property Name Valid Values Default Value Description RMPolicy ProviderManaged or OnePerPhysicalConnection Provider Managed The isSameRM method on an XAResource is used by the Transaction Manager to determine ifthe Resource Manager instancerepresented by two XAResources are the same. When RMPolicy is...

Configuring JavaMail Resources The Enterprise Server includes the JavaMail API. The JavaMail API is a set of abstract APIs thatmodel a mail system. The API provides a platform-independent and protocol-independentframework to build mail and messaging applications. The JavaMail API provides facilities...

JNDI Resources The Java Naming and Directory Interface (JNDI) is an application programming interface(API) for accessing different kinds of naming and directory services. Java EE components locateobjects by invoking the JNDI lookup method. JNDI is the acronym for the Java Naming and Directory Interf...

TABLE 6–1 JNDI Lookups and Their Associated References JNDI Lookup Name Associated Reference java:comp/env Application environment entries java:comp/env/jdbc JDBC DataSource resource manager connection factories java:comp/env/ejb EJB References java:comp/UserTransaction UserTransaction references ja...

Connector Resources This chapter explains how to configure connectors, which are used to access enterpriseinformation systems (EISs). This chapter contains the following sections: ■ “An Overview of Connectors” on page 81 ■ “Managing Connector Connection Pools” on page 82 ■ “Managing Connector Resour...

Managing Connector Connection Pools ■ “To Create a Connector Connection Pool” on page 82 ■ “To Edit a Connector Connection Pool” on page 83 ■ “To Edit Connector Connection Pool Advanced Attributes” on page 85 ■ “To Edit Connection Pool Properties” on page 87 ▼ To Create a Connector Connection Pool B...

c. In the Additional Properties table, add any required properties. In the previous Create Connector Connection Pool page, you selected a class in theConnection Definition combo box. If this class is in the server’s classpath, then theAdditional Properties table displays default properties. Click Fi...

Using the asadmin commands to change connection pool properties. You can use the asadmin get and set commands to view and change the values of the connection pool properties. To list all the connector connection pools in the server: asadmin list domain.resources.connector-connection-pool.* To view t...

Lazy Association Connections are lazily associated when an operation is performed on them. Also,they are disassociated when the transaction is completed and a componentmethod ends, which helps reuse of the physical connections. Default value is false. Lazy ConnectionEnlistment Enable this option to ...

▼ To Edit Connection Pool Properties Use the Additional Properties tab to modify the properties of an existing pool. The properties specified depend on the resource adapter used by this pool. The name-valuepairs specified by the deployer using this table can be used to override the default values fo...

Equivalent asadmin command delete-connector-connection-pool ▼ To Set Up EIS Access Deploy (install) a connector. Create a connection pool for the connector. Create a connector resource that is associated with the connection pool. Managing Connector Resources ■ “To Create a Connector Resource” on pag...

d. Do one of the following: ■ If you are using the cluster profile, you will see the Targets section of the page. in theTargets section of the page, select the domain, cluster, or server instances where theconnector resource will reside, from the Available field and click Add. If you do not wantto d...

On the Connector Resources page, select the checkbox for the resource to be deleted. Click Delete. Equivalent asadmin command delete-connector-resource ▼ To Configure the Connector Service Use the Connector Service screen to configure the connector container for all resource adaptersdeployed to this...

To create, edit, and delete Connector Connection Pools, click Resources —> AdministeredObject Resources in the Admin Console. Consult the Admin Console Online Help for detailedinstructions on managing connector connection pools. ■ “To Create an Administered Object Resource” on page 91 ■ “To Edit ...

g. Click Finish. Equivalent asadmin command create-admin-object ▼ To Edit an Administered Object Resource In the tree component, expand the Resource node and then the Connectors node. Expand the Administered Object Resources node. Select the node for the administered object resource to be edited. On...

Web and EJB Containers Containers provide runtime support for application components. Application components usethe protocols and methods of the container to access other application components and servicesprovided by the server. The Enterprise Server provides an application client container, anappl...

Editing the Properties of the SIP Container The sub-elements of the SIP container are session-manager and session-properties . store-properties , manager-properties are sub-elements of session-manager . For a complete list of SIP container properties, see TBDlink. To change the properties of the SIP...

Editing SIP Container Session Manager Properties To view the sub-elements of the SIP container session manager properties, use the followingcommand: list server.sip-container.session-config.session-manager.* The two sub-elements are store-properties , manager-properties . To view the attributes of s...

Configuring Security Security is about protecting data: how to prevent unauthorized access or damage to it in storageor transit. The Enterprise Server; has a dynamic, extensible security architecture based on theJava EE standard. Built in security features include cryptography, authentication andaut...

Note – Enclose the alias password in single quotes as shown in the example. 3. Restart the Enterprise Server for the relevant domain. Protecting Files with Encoded Passwords Some files contain encoded passwords that need protecting using file system permissions. Thesefiles include the following: ■ d...

Caution – At this point in time, server instances that are running must not be started and running server instances must not be restarted until the SMP on their corresponding nodeagent has been changed. If a server instance is restarted before changing its SMP, it will fail tocome up. 3. Stop each n...

About Authentication and Authorization Authentication and authorization are central concepts of application server security. Thefollowing topics are discussed related to authentication and authorization: ■ “Authenticating Entities” on page 102 ■ “Authorizing Users” on page 103 ■ “Specifying JACC Pro...

TABLE 9–1 Enterprise Server Authentication Methods (Continued) DIGEST HTTP and SIP Server authenticates the client basedon an encrypted response. SSL and TLS Verifying Single Sign-On Single sign-on enables multiple applications in one virtual server instance to share the userauthentication state. Wi...

Note – Users and groups are designated for the entire Enterprise Server, whereas each application defines its own roles. When the application is being packaged and deployed, theapplication specifies mappings between users/groups and roles, as illustrated in the followingfigure. Users A user is an in...

Roles A role defines which applications and what parts of each application users can access and what they can do. In other words, roles determine users' authorization levels. For example, in a personnel application all employees might have access to phone numbers andemail addresses, but only manager...

In the JDBC realm, the server gets user credentials from a database. The Enterprise Server uses the database information and the enabled JDBC realm option in the configuration file. Fordigest authentication, a JDBC realm should be created with jdbcDigestRealm as the JAAS context. In the solaris real...

Assign a security role to users in the realm. To assign a security role to a user, add a security-role-mapping element to the deployment descriptor that you modified in Step 4 . The following example shows a security-role-mapping element that assigns the security role Employee to user Calvin . <s...

Most importantly, a certificate binds the owner's public key to the owner's identity. Like apassport binds a photograph to personal information about its holder, a certificate binds apublic key to information about its owner. In addition to the public key, a certificate typically includes informatio...

When a Web browser (client) wants to connect to a secure site, an SSL handshake happens: ■ The browser sends a message over the network requesting a secure session (typically, byrequesting a URL that begins with https instead of http ). ■ The server responds by sending its certificate (including its...

If all virtual hosts on a single IP address need to authenticate against the same certificate, theaddition of multiple virtual hosts probably will not interfere with normal SSL operations on theserver. Be aware, however, that most browsers will compare the server's domain name againstthe domain name...

In the Developer Profile, on the server side, the Enterprise Server uses the JSSE format,which uses keytool to manage certificates and key stores. In the Clusters and Enterprise Profile, on the server side, the Enterprise Server uses NSS, which uses certutil to manage the NSS database which stores p...

keytool -delete -noprompt -alias ${cert.alias} -keystore ${keystore.file} -storepass ${keystore.pass} Another example of deleting a certificate from a keystore is shown in “Deleting a Certificate Using the keytool Utility” on page 115 Generating a Certificate Using the keytool Utility Use keytool to...

6. If you have changed the keystore or private key password from their default, then substitute the new password for changeit in the above command. The tool displays information about the certificate and prompts whether you want to trustthe certificate. 7. Type yes , then press Enter. Then keytool d...

Using the certutil Utility Before running certutil , make sure that LD_LIBRARY_PATH points to the location of the libraries required for this utility to run. This location can be identified from the value of AS_NSS_LIB in asenv.conf (product wide configuration file). The certificate database tool, c...

■ Import an RFC text-formatted certificate into an NSS certificate database. certutil -A -a -n ${cert.nickname} -t ${cert.trust.options} -f ${pass.file} -i ${cert.rfc.file} -d ${admin.domain.dir}/${admin.domain}/config ■ Export a certificate from an NSS certificate database in RFC format. certutil -...

pk12util -o -n ${cert.nickname} -h ${token.name} -k ${pass.file} -w ${cert.pass.file} -d ${admin.domain.dir}/${admin.domain}/config ■ Convert a PKCS12 certificate into JKS format (requires a Java source): &lt;target name= " convert-pkcs12-to-jks " depends= " init-common " > &a...

Using Hardware Crypto Accelerator With Enterprise Server You can use hardware accelerator tokens to improve the cryptographic performance and tofurnish a secure key storage facility. Additionally, you can provide end users with mobile securekey storage through smart cards. Sun Java System Applicatio...

For the Microsoft Windows environment, add the location of NSS libraries AS_NSS and the NSS tools directory, AS_NSS_BIN to the PATH environment variable. For simplicity, the procedures described in this section use UNIX commands only. You should replace the UNIXvariables with the Windows variables, ...

Using database directory /var/opt/SUNWappserver/domains/domain1/config ... Listing of PKCS#11 Modules ----------------------------------------------------------- 1. NSS Internal PKCS#11 Module slots: 2 slots attached status: loaded slot: NSS Internal Cryptographic Services token: NSS Generic Crypto ...

Listing Keys and Certificates ■ To list the keys and certificates in the configured PKCS#11 tokens, run the followingcommand: certutil -L -d AS_NSS_DB [-h tokenname ] For example, to list the contents of the default NSS soft token, type: certutil -L -d AS_NSS_DB The standard output will be similar t...

Working With Private Keys and Certificates Use certutil to create self-signed certificates and to import or export certificates. To import or export private keys, use the pk12util utility. For more details, see “Using Network Security Services (NSS) Tools” on page 116 Caution – In Enterprise Server,...

Configuring Message Security Some of the material in this chapter assumes a basic understanding of security and web servicesconcepts. This chapter describes the configuration of message layer security for web services inthe Enterprise Server. This chapter contains the following topics: ■ “Overview o...

Understanding Message Security in the Enterprise Server The Enterprise Server offers integrated support for the WS-Security standard in its web servicesclient and server-side containers. This functionality is integrated such that web services securityis enforced by the containers of the Enterprise S...

Application Deployer The application deployer is responsible for: ■ Specifying (at application assembly) any required application-specific message protectionpolicies if such policies have not already been specified by upstream roles (the developer orassembler). ■ Modifying Sun-specific deployment de...

About Digital Signatures The Enterprise Server uses XML Digital signatures to bind an authentication identity tomessage content . Clients use digital signatures to establish their caller identity, analogous to the way basic authentication or SSL client certificate authentication have been used to do...

Glossary of Message Security Terminology The terminology used in this document is described below. The concepts are also discussed in “Configuring the Enterprise Server for Message Security” on page 133 . ■ Authentication Layer The authentication layer is the message layer on which authentication pr...

Configuring Application-Specific Web ServicesSecurity Application-specific web services security functionality is configured (at application assembly)by defining message-security-binding elements in the Sun-specific deployment descriptors ofthe application. These message-security-binding elements ar...

TABLE 10–1 Message protection policy to WS-Security SOAP message security operation mapping (Continued) Message Protection Policy Resulting WS-Security SOAP message protection operations auth-recipient= " before-content " OR auth-recipient= " after-content " The content of the SOAP m...

6. Restart the Enterprise Server. Message Security Setup Most of the steps for setting up the Enterprise Server for using message security can beaccomplished using the Admin Console, the asadmin command-line tool, or by manually editing system files. In general, editing system files is discouraged d...

■ To specify the default server provider: asadmin set --user admin-user --port admin-port server-config.security-service.message-security-config.SOAP. default_provider=ServerProvider ■ To specify the default client provider: asadmin set --user admin-user --port admin-port server-config.security-serv...

<log-service file= "" level= " WARNING " /> <message-security-config auth-layer= " SOAP " default-client-provider= " ClientProvider " > <provider-config class-name= " com.sun.enterprise.security.jauth.ClientAuthModule " provider-id= " Client...

Configuring the Diagnostic Service The Diagnostic Service provides more visibility into and control of the runtime performance ofa server and its applications, allowing you to diagnose and isolate faults as they occur. This chapter contains the following sections: ■ “What is the Diagnostic Framework...

Installation specific details are collected only for file-based installations. ■ Capture System Information: The following system information is collected by default: ■ Network Settings ■ OS details ■ Hardware information Data collected using native code is not available on the Platform Edition of A...

Transactions By enclosing one or more steps in an indivisible unit of work, a transaction ensures dataintegrity and consistency. This chapter contains the following sections: ■ “About Transactions” on page 143 ■ “Admin Console Tasks for Transactions” on page 145 About Transactions ■ “What is a Trans...

See Also: ■ “Transactions in Java EE Technology” on page 144 ■ “Configuring Transactions” on page 145 Transactions in Java EE Technology Transaction processing involves the following five participants: ■ Transaction Manager ■ Enterprise Server ■ Resource Manager(s) ■ Resource Adapter(s) ■ User Appli...

Workarounds for Specific Databases The Enterprise Server provides workarounds for some known issues with the recoveryimplementations of the following JDBC drivers. These workarounds are used unless explicitlydisabled. ■ Oracle thin driver - The XAResource.recover method repeatedly returns the same s...

When the transaction spans across servers, the server that started the transaction can contactthe other servers to get the outcome of the transactions. If the other servers are unreachable, thetransaction uses the Heuristic Decision field to determine the outcome. In the tree component select the Co...

Select the instance to configure: ■ To configure a particular instance, select the instance’s config node. For example, the defaultinstance, server , select the server-config node. ■ To configure the default settings for all instances, select the default-config node. Select the Transaction Service n...

Restart the Enterprise Server. ▼ To set the keypoint interval Keypoint operations compress the transaction log file. The keypoint interval is the number oftransactions between keypoint operations on the log. Keypoint operations can reduce the size ofthe transaction log files. A larger number of keyp...

Configuring the HTTP Service The HTTP service is the component of the Enterprise Server that provides facilities fordeploying web applications and for making deployed web applications accessible by HTTPclients. These facilities are provided by means of two kinds of related objects, virtual servers a...

Managing Web Services This chapter describes web services management with Enterprise Server. Admin Console andthe asadmin tool enable you deploy, test, and manage web services. You can quickly visualize, understand, monitor, and manage complex web services. You can see all web services deployedin a ...

simple, flexible, text-based markup language. XML data is marked using tags enclosed in angledbrackets. The tags contain the meaning of the data they mark. Such markup allows differentsystems to easily exchange data with each other. A Document Type Definition (DTD) or XML Schema Definition (XSD) des...

service endpoints, along with corresponding WSDL descriptions, and clients. A JAX-RPCbased web service can interact with clients that are not based on Java. Similarly, a JAX-RPCbased client can interact with a non-Java-based web service implementation. Java API for XML registries (JAXR), a Java API ...

Adding a Registry Add or remove a web services registry with Admin Console at Application Server > WebServices | Registry. Use this page to create a Registry Access Point (RAP). When you add aregistry, specify the following paramters: ■ JNDI Name: the connection resource pool (JNDI) name of the r...

Transforming Messages with XSLT Filters You can apply XSLT transformation rules to a web service end point. This enables fine-grainedcontrol of web service requests and responses. You can apply multiple XSLT rules to a webservice end point method, and you can configure the order in which you apply t...

Configuring the Object Request Broker This chapter describes how to configure the Object Request Broker (ORB) and IIOP listeners. Ithas the following sections: ■ “An Overview of the Object Request Broker” on page 161 ■ “Configuring the ORB” on page 162 ■ “Managing IIOP Listeners” on page 162 An Over...

What is the ORB? The Object Request Broker (ORB) is the central component of CORBA. The ORB provides therequired infrastructure to identify and locate objects, handle connection management, deliverdata, and request communication. A CORBA object never talks directly with another. Instead, the object ...

Thread Pools The Java Virtual Machine (JVM) can support many threads of execution at once. To helpperformance, the Enterprise Server maintains one or more thread pools. It is possible to assignspecific thread pools to connector modules and to the ORB. One thread pool can serve multiple connector mod...

Configuring Logging This chapter briefly describes how to configure logging and view the server log. It contains thefollowing sections: ■ “About Logging” on page 165 ■ “Configuring Logging” on page 168 About Logging ■ “Log Records” on page 165 ■ “The Logger Namespace Hierarchy” on page 166 Log Recor...

[#|2006-10-21T13:25:53.852-0400|INFO|sun-appserver9.1|javax.enterprise. system.core|_ThreadID=13;|CORE5004: Resource Deployed: [cr:jms/DurableConnectionFactory].|#] In this example, ■ [# and #] mark the beginning and end of the record. ■ The vertical bar ( | ) separates the record fields. ■ 2006-10-...

Configuring Logging This section contains the following topics: ■ “Configuring General Logging Settings” on page 168 ■ “Configuring Log Levels” on page 168 ■ “Viewing Server Logs” on page 169 Configuring General Logging Settings To configure the general logging settings using the Admin Console: ■ Fo...

Viewing Server Logs To view the log files: ■ In the developer profile, go to Applications Server → Logging → View Log Files. ■ In the cluster and enterprise profiles, go to Configurations → Configuration → Logger Settings → General, and click View Log Files. Use the options provided in the Search Cr...

A window labeled Log Entry Detail appears, with a formatted version of the message. At the end of the list of entries, click the buttons to view earlier or later entries in the log file. Click Advanced Search in the Search Criteria area to make additional refinements to the logviewer. Use the Advanc...

Monitoring Components and Services This chapter contains information about monitoring components using the Enterprise ServerAdmin Console. This chapter contains the following sections: ■ “About Monitoring” on page 171 ■ “Enabling and Disabling Monitoring” on page 191 ■ “Viewing Monitoring Data” on p...

Overview of Monitoring To monitor the Enterprise Server, perform these steps: 1. Enable the monitoring of specific services and components using either the Admin Console or the asadmin tool. For more information on this step, refer to “Enabling and Disabling Monitoring” on page 191 . 2. View monitor...

EXAMPLE 18–1 Applications Node Tree Structure applications |--- application1 | |--- ejb-module-1 | | |--- ejb1 * | | |--- cache (for entity/sfsb) * | | |--- pool (for slsb/mdb/entity) * | | |--- methods | | |---method1 * | | |---method2 * | | |--- stateful-session-store (for sfsb)* | | |--- timers (...

EXAMPLE 18–3 HTTP Service Schematic (Cluster and Enterprise Profile Version) http-service * |---connection-queue * |---dns * |---file-cache * |---keep-alive * |---virtual-server-1* | |--- request * |---virtual-server-2* | |--- request * The Resources Tree The resources node holds monitorable attribu...

EXAMPLE 18–6 JMS Service Schematic jms-service |-- connection-factories [AKA conn. pools in the RA world] | |-- connection-factory-1 (All CF stats for this CF) |-- work-management (All work mgmt stats for the MQ-RA) The ORB Tree The ORB node holds monitorable attributes for connection managers. The ...

■ “Thread Pools Statistics” on page 186 ■ “Transaction Service Statistics” on page 186 ■ “Java Virtual Machine (JVM) Statistics” on page 187 ■ “JVM Statistics in Java SE” on page 187 EJB Container Statistics The EJB container statistics are described in the following tables: ■ Table 18–1 ■ Table 18–...

TABLE 18–5 EJB Cache Statistics (Continued) Attribute Name Data Type Description numpassivationsuccess CountStatistic Number of times passivation completedsuccessfully. Applies only to stateful sessionbeans. The statistics available for Timers are listed in the following table. TABLE 18–6 Timer Stat...

TABLE 18–8 Web Container (Web Module) Statistics Statistic Data Type Comments jspcount CountStatistic Number of JSP pages that havebeen loaded in the web module. jspreloadcount CountStatistic Number of JSP pages that havebeen reloaded in the web module. sessionstotal CountStatistic Total number of s...

TABLE 18–9 HTTP Service Statistics (Developer Profile) Statistic Units Data Type Comments bytesreceived Bytes CountStatistic The cumulative value of the bytesreceived by each of the requestprocessors. bytessent Bytes CountStatistic The cumulative value of the bytes sent byeach of the request process...

TABLE 18–10 JDBC Connection Pool Statistics (Continued) Statistic Units Data Type Description numconnacquired Number CountStatistic Number of logical connectionsacquired from the pool. numconnreleased Number CountStatistic Number of logical connectionsreleased to the pool. JMS/Connector Service Stat...

TABLE 18–11 Connector Connection Pool Statistics (Continued) Statistic Units Data Type Description numconndestroyed Number CountStatistic Number of physical connections thatwere destroyed since the last reset. numconnacquired Number CountStatistic Number of logical connections acquiredfrom the pool....

TABLE 18–13 Connection Manager (in an ORB) Statistics (Continued) Statistic Units Data Type Description totalconnections Number BoundedRangeStatistic Total number of connections to theORB. Thread Pools Statistics The statistics available for the thread pool are shown in the following table. TABLE 18...

TABLE 18–15 Transaction Service Statistics (Continued) Statistic Data Type Description committedcount CountStatistic Number of transactions that have beencommitted. rolledbackcount CountStatistic Number of transactions that have beenrolled back. state StringStatistic Indicates whether or not the tra...

Configuring Monitoring Levels Using the AdminConsole To configure monitoring in the Admin Console: ■ For the developer profile, go to Configuration → Monitoring ■ For the cluster and enterprise profiles, go to Configurations → Configuration → Monitoring By default, monitoring is turned off for all c...

Viewing Monitoring Data ■ “Viewing Monitoring Data in the Admin Console” on page 193 ■ “Viewing Monitoring Data With the asadmin Tool” on page 193 Viewing Monitoring Data in the Admin Console In the developer profile, to view monitoring data, go to Application Server → Monitor. In the cluster and en...

servlet , connection , connectorpool , endpoint , entitybean , messagedriven , statefulsession , statelesssession , httpservice , or webmodule . For example, to view data for jvm on server , enter the following: asadmin>monitor --type jvm --user adminuser server JVM Monitoring UpTime(ms) HeapSize...

To display monitoring statistics for an application component or subsystem for whichmonitoring has been enabled, use the asadmin get command. To get the statistics, type the asadmin get command in a terminal window, specifying a name displayed by the list command in the preceding step. The following...

Another example, application , is a valid monitorable object type and is not a singleton. To address a non-singleton child node representing, for example, the application PetStore , the dotted name is: server.applications.petstore The dotted names can also address specific attributes in monitorable ...

Examples for the list --user admin-user --monitor Command The list command provides information about the application components and subsystems currently being monitored for the specified server instance name. Using this command, you cansee the monitorable components and subcomponents for a server i...

Example 3 Attempt to get a specific attribute from a subsystem: asadmin> get --user admin-user --monitor server.jvm.uptime-lastsampletime Returns: server.jvm.uptime-lastsampletime = 1093215374813 Example 4 Attempt to get an unknown attribute from within a subsystem attribute: asadmin> get --us...

server.applications.petstore.signon-ejb_jar.UserEJB.bean-methods. getUserName.totalnumerrors-count = 0 server.applications.petstore.signon-ejb_jar.UserEJB.bean-methods. getUserName.totalnumerrors-description = Provides the total number of errors that occured during invocation or execution of an oper...

To view all the MBeans, Enterprise Server provides a configuration of the Standard JMXConnector Server called System JMX Connector Server. As part of Enterprise Server startup, aninstance of this JMX Connector Server is started. Any compliant JMX connector client canconnect to the server using this ...

The security-enabled flag for the JMX Connector is false . If you are running the cluster or enterprise profile, or if you have turned on security for the JMX Connector in the developerprofile, this flag is set to true . <!- – The JSR 160 " system-jmx-connector " – –> <jmx-connector...

In the Connect to Agent tab of JConsole, enter user name, password, host name and port (8686,by default). The user name refers to the administration user name and password refers to theadministration password of the domain. Click Connect. In the JConsole window you will see all your MBeans, VM infor...

Start JConsole by running JDK_HOME /bin/jconsole In the Connect to Agent tab of JConsole, enter user name, password, host name and port (8686,by default). The user name refers to the administration user name and password refers to theadministration password of the domain. Click Connect. In the JCons...

Configuring Management Rules This section contains information about setting administration policies to automate routineadministration tasks, configure self-tuning of the application server for diverse runtimeconditions and improve availability by preventing failures. This section also containsinfor...

Java Virtual Machine and Advanced Settings The Java Virtual Machine (JVM) is an interpretive computing engine responsible for runningthe byte codes in a compiled Java program. The JVM translates the Java byte codes into thenative instructions of the host machine. The Enterprise Server, being a Java ...

Automatically Restarting a Domain or NodeAgent If your domain or node agent is stopped unexpectedly (for example, if you need to restart yourmachine), you can configure your system to automatically restart the domain or node agent. This Appendix contains the following topics: ■ “Restarting Automatic...

Restarting Automatically Using inittab on Solaris 9 and LinuxPlatforms To restart your domain on the Solaris 9 or Linux platform, add a line of text to the /etc/inittab file. If you use /etc/rc.local, or your system’s equivalent, place a line in /etc/rc.local that calls the desired asadmin command. ...

Dotted Name Attributes for domain.xml This appendix describes the dotted name attributes that can be used to address the MBean andits attributes. Every element in the domain.xml file has a corresponding MBean. Because the syntax for using these names involves separating names between periods, these ...

Version Commands The version commands return the version string, display a list of all the asadmin commands, and allow you to install the license file. TABLE C–5 Version Commands Command Definition version Displays the version information. If the command cannot communicate withthe administration ser...

Configuration Commands The configuration commands allow you to construct IIOP listeners, lifecycle modules, HTTPand IIOP listeners, profilers, and other subsystems. This section contains the following topics: ■ “HTTP and IIOP Listener Commands” on page 243 ■ “Lifecycle and Audit Module Commands” on ...

TABLE C–9 Lifecycle Module Commands Command Definition create-lifecycle-module Creates a lifecycle module. The lifecycle modules provide a means of runningshort or long duration Java-based tasks within the application serverenvironment. delete-lifecycle-module Removes the specified lifecycle module....

TABLE C–11 JVM Options and Virtual Server Commands Command Definition create-jvm-option Creates JVM options in the Java configuration or profiler elements of the domain.xml file. If JVM options are created for a profiler, they are used to record the settings needed to get a particular profiler going...

TABLE C–13 Transaction Commands Command Definition freeze-transaction Freezes the transaction subsystem during which time all the inflighttransactions are suspended. Invoke this command before rolling back anyinflight transactions. Invoking this command on an already frozentransaction subsystem has ...

TABLE C–15 User Management Commands (Continued) Command Definition update-file-user Updates an existing entry in the keyfile using the specified user_name , user_password and groups. Multiple groups can be entered by separating them, with a colon ( : ). list-file-users Creates a list of file users s...

TABLE C–17 Database Commands Command Definition start-database Starts the Java DB server that is available with the Application Server. Use thiscommand only for working with applications deployed to the ApplicationServer. stop-database Stops a process of the Java DB server. Java DB server is availab...

Verify Command The XML verifier command verifies the content of the domain.xml file. TABLE C–22 Verify Command Command Definition verify-domain-xml Verifies the content of the domain.xml file. Custom MBean Commands The MBean commands allow you to manage and register custom MBeans. The commands aresu...