Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

WAS 6.1.0.15. Node synchronize fails with security on

1,602 views
Skip to first unread message

christian.land...@ementor.dk

unread,
Apr 23, 2008, 10:41:28 AM4/23/08
to
After creating new application server in the admin console, the node cannot be synchronized.

The following is from nodeagent/SystemOut.log:

08-04-23 16:29:50:445 CEST 00000055 NodeSync E ADMS0005E: The system is unable to generate synchronization request: com.ibm.websphere.management.exception.AdminException: Admin client connection to deployment manager is unavailable; nodeagent has not discovered the dmgr

at com.ibm.ws.management.sync.NodeSync.getAdminClient(NodeSync.java:521)

at com.ibm.ws.management.sync.NodeSync.getCellRepositoryEpoch(NodeSync.java:396)
at com.ibm.ws.management.sync.NodeSyncTask.doSync(NodeSyncTask.java:258)

at com.ibm.ws.management.sync.NodeSyncTask.run(NodeSyncTask.java:178)

at java.lang.Thread.run(Thread.java:797)

If I disable security and restart, then the synchronization succeeds. But enabling security again yields same problem again.

Any ideas?

/Chr

Devanand Jamisetti

unread,
Apr 23, 2008, 12:51:45 PM4/23/08
to
what parameters did you give for the syncNode command? did you specify the username/password. Best way is to enter those values in the soap.client.props for the DM and NA.

Is the Deployment Manager UP? or any firewall issues to connect to the SOAP port? Can you also check if the cell discovery and the node discovery ports are listening

christian.land...@ementor.dk

unread,
Apr 23, 2008, 3:09:45 PM4/23/08
to
Let me first say that I am a rookie with regards to administrating the WAS.

I only work within the administrative console, so I have not specified username/password.

Deployment manager and node is all on the same machine so there ought not be any firewall issues as I see it.

Could you describe where you would enter the values you mention.

I suppose the deployment manager is up, how can I check it?

/Chr

Devanand Jamisetti

unread,
Apr 23, 2008, 4:36:43 PM4/23/08
to
There are number of ways to check the status of dmgr,

first check the Dmgr Sysout log at /opt/WebSphere/AppServer/profiles/Dmgr01/logs/dmgr/SystemOut.log

to see if it started properly.

go to /opt/WebSphere/AppServer/profiles/Dmgr01/bin and run serverStatus.sh(.bat) dmgr (serverStatus "servername")

should say something like, The Deployment Manager "dmgr" is STARTED

Since security is enabled by default, use the command syncNode.sh(.bat) "hostname" 8879 -conntype SOAP -username **** -password **** from the server profile dir

christian.land...@ementor.dk

unread,
Apr 24, 2008, 3:42:35 AM4/24/08
to
As expected the deployment manager was started.

But I noticed this a bit up in the log:

Caused by: javax.management.JMRuntimeException: ADMN0022E: Access is denied for the isNodeSynchronized operation on NodeSync MBean because of insufficient or empty credentials.

soap.client.props has

com.ibm.SOAP.securityEnabled=false

I still tried the synchNode command but it required the nodeagent be shut down (ADMU0403E: The syncNode command may only be run when the node agent is stopped.), and I dare not do that while users are on the system, so I'll try that tonight.

The part I wonder most is that we have another server with the same setup that has no trouble synchronizing although global security is enabled.

christian.land...@ementor.dk

unread,
Apr 24, 2008, 5:00:02 PM4/24/08
to
Now I have tried the synchNode command. It seems to succeed, but the console just displays a questionmark. But starting the nodeagent again switches the status right back to 'Not synchronized'.

Everything seems to running alright, so it puzzles me.

I even tried filling in the soap.client.props info - didn't help either.

/Chr

Devanand Jamisetti

unread,
Apr 24, 2008, 7:31:09 PM4/24/08
to
stop the nodeagent, remove the contents of wstemp directory in the ApSrv profile, then try syncing. Also include the -trace parameter for the syncNode command to figure out the issue.

Devanand Jamisetti

unread,
Apr 24, 2008, 7:34:23 PM4/24/08
to
try hitting the refresh button couple of times, the question mark button might disappear and give the green check if there are no issues. Make sure, there is nodeagent discovery and deployments discovery statements are in the corresponding SystemOut logs.

ga...@us.ibm.com

unread,
May 29, 2008, 3:02:44 PM5/29/08
to
Go through your SystemOut.log file and see if you are receiving any LTPA related errors.

The security handshake between the node & DMgr happens based on LTPA keys and if the keys mismatch, the node synchronization process can throw an error complaining about the credentials.

ZOLTAN...@raiffeisen.ch

unread,
Jun 18, 2009, 7:34:34 AM6/18/09
to
Although our system is the version 6.1.0.19 but my problems are almost the same: I've changed the wasadmin password and after system restart I cannot synchronize the nodes... and it does give me LTPA-related exceptions.

Can someone tell me how to fix this problem, what are the steps?

Many thanks in advance

ZOLTAN...@raiffeisen.ch

unread,
Jun 18, 2009, 9:26:29 AM6/18/09
to
Hi all,
please ignore my previous post... the technote under

http://www-01.ibm.com/support/docview.wss?uid=swg21256653

solved the problem.

Cheers

0 new messages