Briefly:
Glassfish 2.1.1 patch 20 is installed. During problem free installation the DAS and default node agent are installed and configured on a host. DAS is started without problems. Starting node-agent (no matter if default one or the one created with create-node-agent, listing bellow) failed with "java.security.AccessControlException: access denied".
Where does it trying to connect? iportalt1:8686? There is some listening process.
What credentials are missing?
Does anybody has any idea what to check or debug level of what component to increase?
Thanx
Environment:
Solaris 10 u9 zone
Applied Recommended patches from February,14th 2013
Glassfish 2.1.1 p20 (128643-34)
NSS_NSPR_JSS 3.13.1 patch for requested by Glassfish (119213-27)
das.properties:
#Domain Administraion Server Connection Properties
#Mon Feb 18 17:06:12 CET 2013
agent.das.protocol=rmi_jrmp
agent.das.port=8686
agent.das.host=iportalt1
agent.das.isSecure=true
nodeagent.properties
#Node Agent Connection Properties
#Mon Feb 18 17:06:12 CET 2013
agent.bind.status=BOUND
agent.adminPort=48503
agent.root=/opt/SUNWappserver/nodeagents
agent.protocol=rmi_jrmp
agent.doNotConfirmServerCert=true
agent.client.host=iportalt1
agent.adminHost=0.0.0.0
node-agent's server.log:
Feb 18, 2013 5:07:04 PM com.sun.enterprise.admin.servermgmt.launch.ASLauncher buildCommand
INFO:
/usr/jdk/instances/jdk1.6.0/bin/java
-Dcom.sun.aas.instanceRoot=/opt/SUNWappserver/nodeagents/iportalt1-na/agent
-Dcom.sun.aas.configRoot=/opt/SUNWappserver/config
-Dcom.sun.aas.defaultLogFile=/opt/SUNWappserver/nodeagents/iportalt1-na/agent/logs/server.log
-Dcom.sun.aas.instanceName=iportalt1-na
-Dcom.sun.aas.isNodeAgent=true
-Dcom.sun.aas.promptForIdentity=true
-Dcom.sun.appserv.admin.pluggable.features=com.sun.enterprise.ee.admin.pluggable.EEClientPluggableFeatureImpl
-Dcom.sun.appserv.nss.db=/opt/SUNWappserver/nodeagents/iportalt1-na/agent/config
-Dcom.sun.appserv.pluggable.features=com.sun.enterprise.ee.server.pluggable.EEPluggableFeatureImpl
-Djava.endorsed.dirs=/opt/SUNWappserver/lib/endorsed
-Djava.library.path=/opt/SUNWappserver/lib:/opt/SUNWappserver/lib:/opt/SUNWappserver/lib
-Djava.security.auth.login.config=/opt/SUNWappserver/nodeagents/iportalt1-na/agent/config/login.conf
-Djava.util.logging.manager=com.sun.enterprise.server.logging.ServerLogManager
-Djmx.invoke.getters=true
-XX:+UnlockDiagnosticVMOptions
-XX:LogFile=/opt/SUNWappserver/nodeagents/iportalt1-na/agent/logs/jvm.log
-XX:+LogVMOutput
-cp
/opt/SUNWappserver/lib/comms-appserv-rt.jar:/opt/SUNWappserver/lib/appserv-launch.jar:/opt/SUNWappserver/lib/appserv-rt.jar:/opt/SUNWappserver/lib/appserv-ee.jar:/opt/SUNWappserver/lib/jxta.jar:/opt/SUNWappserver/lib/appserv-admin.jar:/opt/SUNWappserver/lib/appserv-ext.jar:/opt/SUNWappserver/lib/appserv-se.jar:/opt/SUNWappserver/lib/shoal-gms.jar:/opt/SUNWappserver/lib/javaee.jar
com.sun.enterprise.ee.nodeagent.NodeAgentMain
start
startInstancesOverride=NOTSET
syncInstances=false
monitorInterval=5
restartInstances=true
[#|2013-02-18T17:07:05.333+0100|INFO|sun-appserver2.1.1|javax.ee.enterprise.system.nodeagent|_ThreadID=10;_ThreadName=main;|NAGT0025:The node agent could not configure logging levels. Default logging level will be used.|#]
[#|2013-02-18T17:07:15.007+0100|SEVERE|sun-appserver2.1.1|javax.ee.enterprise.system.nodeagent|_ThreadID=10;_ThreadName=main;|NAGT0030:There was an unknown error while communicating with Domain Administration Server (DAS). The actual exception stack trace follows ...
java.security.AccessControlException: access denied (javax.management.MBeanPermission com.sun.enterprise.ee.synchronization.Synchronization#-[com.sun.appserv:category=config,type=synchronization] registerMBean)
at java.security.AccessControlContext.checkPermission(AccessControlContext.java:374)
at java.security.AccessController.checkPermission(AccessController.java:549)
at java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
at com.sun.jmx.interceptor.DefaultMBeanServerInterceptor.checkMBeanPermission(DefaultMBeanServerInterceptor.java:1806)
at com.sun.jmx.interceptor.DefaultMBeanServerInterceptor.registerMBean(DefaultMBeanServerInterceptor.java:309)
at com.sun.jmx.mbeanserver.JmxMBeanServer.registerMBean(JmxMBeanServer.java:482)
at com.sun.enterprise.interceptor.DynamicInterceptor.registerMBean(DynamicInterceptor.java:259)
at com.sun.enterprise.admin.server.core.jmx.SunoneInterceptor.registerMBean(SunoneInterceptor.java:276)
at com.sun.enterprise.admin.server.core.jmx.SunoneInterceptor.manufactureAndRegisterMBean(SunoneInterceptor.java:667)
at com.sun.enterprise.admin.server.core.jmx.SunoneInterceptor.registerWithPersistenceCheck(SunoneInterceptor.java:692)
at com.sun.enterprise.admin.server.core.jmx.SunoneInterceptor.getClassLoaderFor(SunoneInterceptor.java:576)
at com.sun.enterprise.interceptor.DynamicInterceptor.getClassLoaderFor(DynamicInterceptor.java:562)
at javax.management.remote.rmi.RMIConnectionImpl$5.run(RMIConnectionImpl.java:1351)
at java.security.AccessController.doPrivileged(Native Method)
at javax.management.remote.rmi.RMIConnectionImpl.getClassLoaderFor(RMIConnectionImpl.java:1347)
at javax.management.remote.rmi.RMIConnectionImpl.invoke(RMIConnectionImpl.java:801)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at sun.rmi.server.UnicastServerRef.dispatch(UnicastServerRef.java:303)
at sun.rmi.transport.Transport$1.run(Transport.java:159)
at java.security.AccessController.doPrivileged(Native Method)
at sun.rmi.transport.Transport.serviceCall(Transport.java:155)
at sun.rmi.transport.tcp.TCPTransport.handleMessages(TCPTransport.java:535)
at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:790)
at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:649)
at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:886)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:908)
at java.lang.Thread.run(Thread.java:662)
at sun.rmi.transport.StreamRemoteCall.exceptionReceivedFromServer(StreamRemoteCall.java:255)
at sun.rmi.transport.StreamRemoteCall.executeCall(StreamRemoteCall.java:233)
at sun.rmi.server.UnicastRef.invoke(UnicastRef.java:142)
at com.sun.jmx.remote.internal.PRef.invoke(Unknown Source)
at javax.management.remote.rmi.RMIConnectionImpl_Stub.invoke(Unknown Source)
at javax.management.remote.rmi.RMIConnector$RemoteMBeanServerConnection.invoke(RMIConnector.java:993)
at com.sun.enterprise.ee.admin.proxy.MBeanServerProxy.invoke(MBeanServerProxy.java:148)
at $Proxy0.ping(Unknown Source)
at com.sun.enterprise.ee.synchronization.PingCommand.execute(PingCommand.java:93)
at com.sun.enterprise.ee.synchronization.BaseSynchronizationDriver.synchronizeInternal(BaseSynchronizationDriver.java:168)
at com.sun.enterprise.ee.synchronization.BaseSynchronizationDriver.synchronize(BaseSynchronizationDriver.java:129)
at com.sun.enterprise.ee.nodeagent.NodeAgent.synchronizeWithDASInternal(NodeAgent.java:640)
at com.sun.enterprise.ee.nodeagent.NodeAgent.synchronizeWithDASInternal(NodeAgent.java:597)
at com.sun.enterprise.ee.nodeagent.BaseNodeAgent.run(BaseNodeAgent.java:170)
at com.sun.enterprise.ee.nodeagent.NodeAgentMain.startup(NodeAgentMain.java:277)
at com.sun.enterprise.ee.nodeagent.NodeAgentMain.main(NodeAgentMain.java:428)
|#]
[#|2013-02-18T17:07:15.012+0100|SEVERE|sun-appserver2.1.1|javax.ee.enterprise.system.nodeagent|_ThreadID=10;_ThreadName=main;|NAGT0035:The NodeAgent failed to complete the intial synchronization with the DAS. Please make sure the DAS is running and is accessible from the NodeAgents server|#]
[#|2013-02-18T17:07:17.013+0100|WARNING|sun-appserver2.1.1|javax.ee.enterprise.system.nodeagent|_ThreadID=10;_ThreadName=main;|NAGT0013:Stopping Node Agent...|#]