Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

remote weblogic server identity exception

When I try to start a weblogic server (which runs on another server) from my local machine I am getting below error. I can stop this weblogic server without any problem but I couldn't start. There are username and password fields in boot.properties file but I don't know what are they. Is there any idea?

<Critical> <WebLogicServer> <BEA-000386> <Server subsystem failed. 
Reason: weblogic.security.SecurityInitializationException: 
Authentication denied: Boot identity not valid; 
The user name and/or password from the boot identity file (boot.properties) is not valid. The boot identity may have been changed since the boot identity file was created. Please edit and update the boot identity file with the proper values of username and password. The first time the updated boot identity file is used to start the server, these new values are encrypted.
weblogic.security.SecurityInitializationException: Authentication denied: Boot identity not valid; The user name and/or password from the boot identity file (boot.properties) is not valid. The boot identity may have been changed since the boot identity file was created. Please edit and update the boot identity file with the proper values of username and password. The first time the updated boot identity file is used to start the server, these new values are encrypted.
at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.doBootAuthorization(CommonSecurityServiceManagerDelegateImpl.java:960)
at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.initialize(CommonSecurityServiceManagerDelegateImpl.java:1054)
at weblogic.security.service.SecurityServiceManager.initialize(SecurityServiceManager.java:873)
at weblogic.security.SecurityService.start(SecurityService.java:148)
at weblogic.t3.srvr.SubsystemRequest.run(SubsystemRequest.java:64)
Truncated. see log file for complete stacktrace
like image 255
hellzone Avatar asked Dec 13 '13 13:12

hellzone


People also ask

What is the difference between identity and trust keystore in WebLogic?

For trust, you only need the certificates (non-sensitive data) in the keystore. However, for identity, you add the certificate and the private key (sensitive data) in the keystore.

What causes stuck threads in WebLogic?

WebLogic Server diagnoses a thread as stuck if it is continually working (not idle) for a set period of time. You can tune a server's thread detection behavior by changing the length of time before a thread is diagnosed as stuck, and by changing the frequency with which the server checks for stuck threads.


2 Answers

just delete file which is ManagedServerDir/data/ldap & restart domain yourdomain/bin ./startWeblogic.sh

like image 121
Poyraz Avatar answered Sep 26 '22 02:09

Poyraz


You can save username and password in your boot.properties file.

In production mode, the boot.properties file doesn’t exist. Need to create this file in

$DOMAIN_HOME/servers/AdminServer/security

I think you need check this path and this properties. May be the password or username is incorrect.

Here is link which show how to create and find this propreties.

If it doesn't find or can't rewrite it, you can start the server without the boot.properties file:

java -Dweblogic.management.username=username-Dweblogic.management.password=password -Dweblogic.system.StoreBootIdentity=true -Dweblogic.Name=myAdminServer weblogic.Server

This script, I find in this page.


Edit:

Now I found some usefull tips in another forum.

  1. edit the boot.properties file, use plain text username and password instead of encrypted like:
    Username: weblogic password: Weblogic1
    After start the server from command line, it will encrypt again automitically.
  2. remove the ManagedServerDir/data/ldap directory completely.
  3. Always keep backup of files before removing it.
  4. Now try to start the server from the command prompt and provide the username/password used to login to the Admin Console.

And found this tip from weblogictips user of same forum:

I think before try these tips that you should check your the authentication provider for the domain. If it is external then you may need to reset the password from external ldap.

Also move the ldap dir and boot.properties files if locally present.

Only difference in case the server is started through the Admin Console / WLST is that you have to move the nodemanager dir also present is the doamin_home/servers/ms1/data/nodemanager


I hope these tips are help to you. If not please try delete username and password (don't necessary to delete username= in file) in all boot.properties file and start from beginning...

like image 20
herry Avatar answered Sep 23 '22 02:09

herry