Sun Microsystems 820682310 manual Mutual Authentication Not Working With the Application Client

Page 37

Issues Related to Security

grant codeBase "file:/.../build/sparc_SunOS/sec/-"{ permission java.util.PropertyPermission "*", "read,write";

};

Mutual Authentication Not Working With the Application Client

Description

This failure can occur when the keystore and truststore properties are not set properly.

Solution

Set the following properties on the JVM:

javax.net.ssl.keyStore=

<keystore-file-path>;javax.net.ssl.trustStore=<truststore-file-path>

To use the application client, set the environment variable VMARGS to the following value:

-Djavax.net.ssl.keyStore=${admin.domain.dir}/${admin.domain}/config/keystore.jks

-Djavax.net.ssl.trustStore=${admin.domain.dir}/${admin.domain}/config/cacerts.jks

Chapter 2 • Specific Issues

Image 37

Contents Sun GlassFish Enterprise Server v3 Prelude Troubleshooting GuideSun Microsystems, Inc 4150 Network Circle Santa Clara, CA U.S.A This distribution may include materials developed by third parties 1 Overview of Enterprise Server Troubleshooting ContentsWas Application Deployment Successful? Administration FAQs How Do I Use Update Tool to Extend My Enterprise Server Installation? Update Tool FAQsIndex Preface “Symbol Conventions” on page “Default Paths and File Names” on pageEnterprise Server Documentation Set “Enterprise Server Documentation Set” on pageContinued TABLE P-1 Books in the Enterprise Server Documentation SetTypographic Conventions Related Documentationhttp//developers.sun.com/javadb Default Paths and File Names Symbol ConventionsThe following table explains symbols that might be used in this book Symbol ConventionsSearching Sun Product Documentation Documentation, Support, and TrainingThird-Party Web Site References Sun Welcomes Your Comments “Identifying the Problem” on page “Troubleshooting Tools” on page Identifying the Problem“Where to Go for More Information” on page First StepsReview Known Issues Verify System Requirements and ConfigurationSearch the Product Documentation Search the GlassFish Mailing Lists and ForumsWhat Is Your Environment? When Does the Problem Occur?Gathering Information Search the SunSolve KnowledgebaseWhat Is Different? What Is Your System Configuration?Examining Log Files Monitoring the System Troubleshooting ToolsOperating System Utilities “Operating System Utilities” on pageStack Traces and Thread Dumps Type the following commandVisualVM To Obtain a Server Thread DumpWhere to Go for More Information Page Cannot Access Local Server http//localhost8080 Specific Issues“Cannot Access Local Server http//localhost8080” on page “Cannot Access Remote Server” on pageDid the Server Start? To Determine Which Port Number the Server Is Actually UsingWas the Server Started at the Expected Port? DescriptionIs the Proxy Setting Causing a Problem? Cannot Access Remote ServerSolution “Is the Proxy Setting Causing a Problem?” on page“Is the Administration Console Running on the Expected Port?” on page Cannot Access the Administration Console“Is the Security Manager Disabled?” on page Is the Application Server Running?Is the Administration Console Running on the Expected Port? Cannot Access a Server ApplicationIs the Security Manager Disabled? “Administrator User Name or Password Not Known” on pageTo Remove the User Name and Password Completely Administrator User Name or Password Not KnownWas Application Deployment Successful? 1 Stop the server, if it is currently runningServer Will Not Start on Windows Port Conflict 8 Restart the server for the new user name-password to take effect4 Start the server 7 Uncomment the security-constraint element in the web.xml fileTwo Server Instances Bind to Same Port on Windows SolutionHas an Ungraceful Shutdown Occurred on a Previously Running Server? DescriptionError When Deploying EAR Issues Related to ApplicationsCannot Produce a JVM Thread Dump After Server Crash http//blogs.sun.com/quinn/entry/deploymentinglassfishv3prelude Cannot Find SunDeploymentManagerasadmin start-domain Command Fails Issues Related to asadminError CLI143 There is more than one domain SolutionError Could Not Start Domain Cannot Stop Domain Using asadmin stop-domainUsing asadmin set Command Might Produce Unexpected Results Issues Related to EclipseGeneral Installation Issues Related to Installation and UpgradeCannot Upgrade Issues Related to JNDI Issues Related to JavaMailCannot Configure JavaMail Resources Cannot Deploy a Mail Session as a JNDI ResourceIssues Related to Security Issues Related to MySQLException When Creating MySQL Connection Pool java.security.AccessControlException AccessMutual Authentication Not Working With the Application Client Page Administration FAQs Frequently Asked QuestionsWhich asadmin Commands are Supported? “Administration FAQs” on page “Application FAQs” on pageEclipse FAQs Application FAQsHow Do I Debug Applications? How Do I Change Application Permissions?How Do I Extend the Administration Console? Extensibility FAQsHow Do I Develop Add-On Components? How Do I Add Containers?JDBC FAQs Java Persistence FAQsJersey FAQs What Java Persistence Support Is Available?Rails and JRuby FAQs OpenESB FAQsIf I Deploy an Application Using the glassfishrails That Application?Gem documentation http//glassfishgem.rubyforge.org What Options Are Available for Running JRuby With Enterprise Server?Warbler information http//caldersphere.rubyforge.org/warbler Update Tool FAQs Security FAQsWhat Happens When No Server Side Realm Is Configured? Can I Change the Keystore Password?After you start your Enterprise Server instance, the default location for the Administration Console is http//localhost4848/ at least one Enterprise Server domain must be started before you can launch the Administration Console. Unless you declined to check for updates during installation, you will be notified of available updates in the message area. Update Tool can also be accessed on the command line by running the updatetool command in the as-install/bin directory. Extensive online help is provided for both versions Index