users@glassfish.java.net

Re: Problems with enable-secure-admin

From: <forums_at_java.net>
Date: Tue, 30 Aug 2011 12:06:58 -0500 (CDT)

Does the server.log file contain any errors or stack traces?

If you look in the domain.xml file, is the <secure-admin> element present and
is its attribute enabled set to true?

What happens if you try some other command, such as

asadmin uptime

Does that work or do you get a similar error?

You mentioned that the error message displayed on the client side says that
s1as is not found in the truststore.  If secure admin has been enabled, then
the server is going to redirect the asadmin client from http to https.  The
server will provide its cert, and asadmin will look in
~/.asadmintruststore.  This is a private truststore used only by asadmin to
store self-signed certs you have accepted.  If asadmin cannot find the cert
there then it will display some information about the cert and ask you if you
want to trust it.  If you say yes, then it will store that cert into the
truststore at ~/.asadmintruststore. 

Perhaps it is the client side that is having trouble with this and not the
server.

- Tim


--
[Message sent by forum member 'tjquinn']
View Post: http://forums.java.net/node/838746