Hi Kshitiz,
Thank You for the info. I switched to the Apache server
(version: Apache/2.2.16) and successfully managed to get it working as a
software loadbalancer with lbplugin. However there is one big BUT regarding
exporting DAS certificate with certutil (needed for the auto-apply feature).
In the High Availability Administration guide for GlassFish 2.1.1, chapter 4,
section "Using Apache Web server"
(download.oracle.com/docs/cd/E19879-01/821-0182/abdhg/index.html [1]) it's
written that: "/You must manually export the DAS certificate using the
following command/" and the command given is:
appserver-install-dir/lib/upgrade/certutil -L -d
appserver-instance-dir/config -n s1as -a -o sjsas.crt
When I execute this command I always get the following error: "certutil:
could not find certificate named "s1as": security library: bad database." and
an empty sjsas.crt file is created. What is even more surprising is the fact
that after executing this command I cannot start my domain because of:
[#|2011-04-07T11:17:13.734+0200|WARNING|sun-appserver2.1|javax.enterprise.system.stream.err|_ThreadID=10;_ThreadName=main;_RequestID=646538d7-9140-4d58-ab2e-016571b5915c;|java.lang.reflect.InvocationTargetException
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at com.sun.enterprise.server.PELaunch.main(PELaunch.java:415) Caused by:
java.lang.UnsatisfiedLinkError: *no nspr4 in java.library.path*
at java.lang.ClassLoader.loadLibrary(ClassLoader.java:1734) at
java.lang.Runtime.loadLibrary0(Runtime.java:823) at
java.lang.System.loadLibrary(System.java:1028) at
com.sun.enterprise.ee.security.EESecuritySupportImpl.loadNSSNativeLibrary(EESecuritySupportImpl.java:176)
at
com.sun.enterprise.ee.security.EESecuritySupportImpl.initNSS(EESecuritySupportImpl.java:133)
at
com.sun.enterprise.ee.security.EESecuritySupportImpl.<init>(EESecuritySupportImpl.java:95)
at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native
Method) at
sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:39)
at
sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:27)
at
java.lang.reflect.Constructor.newInstance(Constructor.java:513)
at java.lang.Class.newInstance0(Class.java:355) at
java.lang.Class.newInstance(Class.java:308) at
com.sun.enterprise.pluggable.PluggableFeatureFactoryBaseImpl.invoke(PluggableFeatureFactoryBaseImpl.java:84)
at $Proxy0.getSecuritySupport(Unknown Source) at
com.sun.enterprise.security.SecurityUtil.getSecuritySupport(SecurityUtil.java:364)
at
com.sun.enterprise.security.SSLUtils.<clinit>(SSLUtils.java:102)
at
com.sun.enterprise.security.SecurityLifecycle.onInitialization(SecurityLifecycle.java:101)
at
com.sun.enterprise.server.ApplicationServer.onInitialization(ApplicationServer.java:265)
at
com.sun.enterprise.server.ondemand.OnDemandServer.onInitialization(OnDemandServer.java:103)
at com.sun.enterprise.server.PEMain.run(PEMain.java:399)
at com.sun.enterprise.server.PEMain.main(PEMain.java:336) ...
5 more |#] I tried exporting DAS certificate with certutil tool in two
different environments (Ubuntu Linux and Solaris OS) and both trials ended
with me not being able to start the neither domain becasue of the above stack
trace. Recreating domain (deleting & creating) would help, but the first time
certutil is used (even to list available certificates) on a new domain and
the domain crashes... Any suggestions? Regards, Jiggster
[1]
http://download.oracle.com/docs/cd/E19879-01/821-0182/abdhg/index.html
--
[Message sent by forum member 'jiggster']
View Post: http://forums.java.net/node/676485