Troubleshooting Administration Server and Nodes

                                                                                                                                                                                                                                                                                                                                      Back to [Book]     [Topic]

Troubleshooting Administration Server and Nodes

This section provides information on making changes to the configuration files in Administration Server. The following topics are covered:

• Pulling Configuration Changes to the Administration Server
• Making Changes to server.policy File

This section also discusses steps to troubleshoot specific issues with Administration Server and Nodes. The specific issues are discussed in the following topics:

• Deployment Pending Message in Administration Console
• Save and Deploy— Two Different Actions
• Manually Editing Configuration Files
• deploy-config Command Fails
• Where Can I Find wadm CLI?
• Running Administration Server As Non-Root
• Enabling SSL Port on Windows Firewall

Pulling Configuration Changes to the Administration Server

Whenever you make manual changes to the configuration, you should replicate the changes back into the Administration server repository as follows:

wadm> pull-config --user=admin --config=CONFIG_NAME

Note - The operation may take some time depending on the configuration.

Note - Always use the Administration Console or the wadm CLI to edit the settings.

Making Changes to server.policy File

If you are deploying your website containing Java web applications and would like to enable security manager within the web container, then you will need to edit the server instance's server.policy file. In this scenario, Administration Server does not provide a direct command line interface or GUI to edit this server.policy file. But you can still perform the steps as mentioned in the previous section to make any manual edit to the server.policy file.

Deployment Pending Message in Administration Console

Question: When I make changes to a configuration from the GUI, I see a deployment pending message. What does it mean?

Answer:
The deployment pending message indicates that there are changes to the configuration that are saved into the administration server's configuration store. You need to click the Deploy button to save these changes to the instances.

Save and Deploy — Two Different Actions

Question: What is the difference between the Save and Deploy buttons that shows up on every page in the Administration Console within a configuration?

Answer:
If you click on Save, then the changes that you have made through the Administration Console pages are saved only in the configuration store. When you click the Deploy button, the changes will be saved to the instances. Always use the Deploy button to persist your changes to the running instances.

Manually Editing Configuration Files

Question: Can I make manual edits to my configuration files? Will these be reflected in the CLI and GUI?

Answer:
If you need to make manual changes to the configuration files, make the changes within the configuration store. These changes will be reflected in the CLI and GUI and can be deployed using the deploy-config command or by clicking on Deploy button in the GUI. But if you make changes directly in the instance, the Administration Console will show up a warning stating that there are manual modifications to the configuration files and you need to either overwrite these changes with the configuration in the configuration store or else get these changes back into the configuration store overwriting the existing configuration changes.

Note - Always use the Administration Console or the wadm CLI to edit the settings.

Where Are My Changes?

Question: I have made changes to my configuration files in the configuration store. I could not see the configuration affected by my changes.

Answer:
Ensure the deploy-config command has been executed after the changes. See Manually Editing Configuration Files. Log in to the Administration Console and go to that particular configuration. If there is a 'Deployment Pending' message, see Deployment Pending Message in Administration Console.

deploy-config Command Fails

Question: Sometimes the deploy-config fails saying that a server restart is needed. Why?

Answer:
When deploy-config is invoked, the configuration changes in the configuration store are propagated to the instances and the running servers are re-configured so that the configuration changes are picked up. But certain changes cannot be applied dynamically and need a server restart. You will hence need to run a restart-instance command in order to restart the server instances.

Where Can I Find wadm CLI?

If you are using wadm CLI on the same machine where the Administration Server is installed, then you do not need to know the Administration Server's port number. You are required to know the port number only if you have configured Administration Node and need to use wadm CLI to connect to a remote Administration Server.

Question: Where can I find the CLI for Sun Java System Web Server 7.0 administration?

Answer:
The administration CLI is located at install-root/bin/wadm. To use the CLI, you need to know:

• Administration server hostname (default is localhost).
• SSL port for the administration server (default is 8989).
• Administration server user name (default is admin).
• Administration server password.

Note - Administration server needs to be running in order to use the CLI. You can start the server by running install-root/admin-server/bin/startserv.

install-root/samples/admin/scripts directory contains scripts that you can run using the wadm command line utility. wadm is built on a TCLengine and hence supports TCL scripting. These scripts can be used to perform common administrative tasks. They also demonstrate how new utilities can be built on top of existing commands.

The following table describes the scripts:

Table 4-1 Sample{{ wadm}} Scripts

[<validity>]

Running Administration Server As Non-Root

Question: Why does the error "Unable to bind at port <port_number>" occur?

Answer: The administration server and the administration nodes should be run by the same user id in Unix. This is because of the following reason:

• If the instances are not running as part of the root process, the Administration Server will not have sufficient permissions to modify the instance's configuration files.

So for the administration server to perform its job of maintaining the server instances, it either needs to be part of the root process or at least the same user as that of the server instance. However in Solaris 10, you don't need to run the Administration Server as root to bind to port 80 (or < 1024). Execute the following commands:

# su
# /usr/sbin/usermod -K defaultpriv=basic,net_privaddr webservd

Enabling SSL Port on Windows Firewall

On windows, if the firewall is enabled on the node it does not allow any inbound request. The administration server does not respond for a while. This will happen for every node related operation. To troubleshoot this problem, you should perform the following steps:

To Enable Administration Node SSL Port on Windows

1. Start > Settings > Control Panel
2. Click the Windows Firewall icon
   A window appears.
    
3. Click the Exceptions tab
4. Click the Add Port button
   A window appears.
    
5. Enter the name in Name field
6. Enter the Administration Server's port number in Port field
7. Select the TCP option
8. Click the OK button.