Sun Microsystems 820433510 instruction

Using JConsole

The security-enabled flag for the JMX Connector is false. If you are running the cluster or enterprise profile, or if you have turned on security for the JMX Connector in the developer profile, this flag is set totrue.

<!- – The JSR 160 "system-jmx-connector"– –> <jmx-connector accept-all="false"address="0.0.0.0"

auth-realm-name="admin-realm"enabled="true" name="system" port="8686" protocol="rmi_jrmp" security-enabled="true"/>

...

</jmx-connector>

<!- – The JSR 160 "system-jmx-connector"– –>

Prerequisites for Connecting JConsole to Application Server

The JConsole setup has two parts: a server end and a client end. For this example, the Enterprise Server domain is installed on a machine called appserver.sun.com, which is a powerful Solaris server. This is the server end.

The client end also has an installation of Enterprise Server. Let us assume that the client end is a Windows machine with Java SE 6.0 and Enterprise Server installed.

Note – The Enterprise Server installation is needed on the client end only when your Enterprise Server domain has security enabled on the remote machine (the default for cluster and enterprise profiles). If you just want to administer an Enterprise Server developer profile domain on the Solaris machine above, you do not need the Enterprise Server installation on this client machine.

If the server and client ends are on the same machine, you can use localhost to specify the host name.

▼Connecting JConsole to Application Server

This procedure describes connecting JConsole to Enterprise Server without security enabled on the JMX Connector. By default, security is not enabled on Enterprise Server for the developer profile.

1Start the domain on appserver.sun.com.

2Start JConsole by running JDK_HOME/bin/jconsole.

Chapter 18 • Monitoring Components and Services

211

Image 211

Sun Microsystems 820433510 manual Prerequisites for Connecting JConsole to Application Server

Contents

Sun Microsystems, Inc Network Circle Santa Clara, CA Sun GlassFish Enterprise Server 2.1 Administration Guide 090122@21808 Contents Jdbc Resources Java Business Integration Foreign JMS Providers Accessing Remote ServersConfiguring JMS Provider Properties IBM Informix Type 4 Driver CloudScape 5.1 Type 4 Driver Web and EJB Containers Configuring Security 127 153 141149 Virtual Servers 149 Http Listeners 150 163 What is the ORB? 162 Iiop Listeners158 161 219 About Management Rules 215 Configuring Management Rules 216Tuning the JVM Settings 219 215 244 Asadmin UtilityProfiler and SSL Commands 231Page Figures Page JVM Statistics for Java SE Runtime 189 Tables Deployment Commands 239 Remote Commands Required Options 234Server Lifecycle Commands 237 List and Status Commands 238 Examples Page Sun GlassFish Enterprise Server Documentation Set PrefaceTable P-1Books in the Enterprise Server Documentation Set Table P-2Default Paths and File Names Default Paths and File Names Table P-3Typographic Conventions Symbol ConventionsSymbol Conventions Typographic Conventions Third-Party Web Site References Documentation, Support, and TrainingSun Welcomes Your Comments This section contains the following topics Enterprise Server OverviewEnterprise Server Overview and Concepts Enterprise Server Overview Http//hostnameport Tools for AdministrationAdmin Console For example To list the commands available within asadmin Command-line Interface asadmin UtilityJConsole Enterprise Server Concepts Domain Administration Server DASDomain Usage Profiles 1Features Available for Each Profile Cluster Features Available for Each ProfileNode Agent 1Enterprise Server Instance Server Instance 2Enterprise Server Listeners that Use Ports Ports in the Enterprise Server Creating a Domain Basic Enterprise Server CommandsHttp//hostname5000 Listing Domains Deleting a DomainStarting the Domain Restarting the Domain Starting the Default Domain on WindowsStopping the Default Domain on Windows Stopping the Domain Starting a Node Agent Starting a ClusterStopping a Cluster Creating a Node Agent Restarting an Instance Stopping a Node AgentStarting an Instance Stopping an Instance To migrate the DAS Recreating the Domain Administration Server Change Page JBI Components Service EnginesJava Business Integration JBI Environment JBI Component Loggers Binding Components Service Assemblies JBI Descriptors Shared Libraries Jdbc Resources Jdbc Resources How Jdbc Resources and Connection Pools Work Together Jdbc Connection Pools Setting Up Database Access Creating a Jdbc Connection Pool Working with Jdbc Connection Pools Click OK Editing a Jdbc Connection Pool Change connection validation settings By calling the con.getAutoCommit and con.getMetaData methods Editing Jdbc Connection Pool Advanced Attributes Creation Retry Attempts is greater than Configurations for Specific Jdbc Drivers Configurations for Specific Jdbc Drivers DataSource Classname Specify one of the following Java DB Type 4 Driver DataSource Classname com.sun.sql.jdbcx.db2.DB2DataSource Sun GlassFish Jdbc Driver for DB2 Databases Sun GlassFish Jdbc Driver for Microsoft SQL Server Databases DataSource ClassnameSpecify one of the following IBM DB2 8.1 Type 2 DriverDataSource Classname com.ibm.db2.jcc.DB2SimpleDataSource DeferPrepares Set to false Inet Oraxo Jdbc Driver for Oracle 8.1.7 and 9.x Databases MySQL Type 4 DriverCom.mysql.jdbc.jdbc2.optional.MysqlDataSource Jdbcinetoralocalhost1521payrolldb Inet Merlia Jdbc Driver for Microsoft SQL Server DatabasesDataSource Classname com.inet.ora.OraDataSource DataSource Classname com.inet.tds.TdsDataSource DataSource Classname com.inet.syb.SybDataSource Inet Sybelux Jdbc Driver for Sybase Databases Jdbcoraclethin@localhost1521customerdb OCI Oracle Type 2 Driver for Oracle 8.1.7 DatabasesJdbcoracleoci@localhost1521customerdb CloudScape 5.1 Type 4 Driver IBM Informix Type 4 DriverDataSource Classname com.ibm.db2.jcc.DB2DataSource Page JMS Resources Configuring Java Message Service Resources Relationship Between JMS Resources and Connector Resources JMS Destination Resources JMS Connection FactoriesJMS Physical Destinations Configuring JMS Provider Properties Foreign JMS Providers Accessing Remote Servers Resource Adapter Properties Configuring the Generic Resource Adapter False Foreign JMS Providers ManagedConnectionFactory Properties Activation Spec Properties Administered Object Resource Properties Configuring Java Message Service Resources Message causes a runtime exception Creating a JavaMail Session Configuring JavaMail Resources Creating a JavaMail Session Jndi Resources Java EE Naming Services Naming References and Binding Information Using External Jndi Repositories and Resources Using Custom Resources1JNDI Lookups and Their Associated References Using External Jndi Repositories and Resources An Overview of Connectors Connector Resources To Create a Connector Connection Pool Managing Connector Connection PoolsSpecify this name when creating a connector resource Create-connector-connection-pool To Edit a Connector Connection Pool Same transaction level as that specified in resource To Edit Connector Connection Pool Advanced Attributes Pool. Default value is false To Edit Connection Pool Properties To Delete a Connector Connection PoolTo create security maps for connector connection pools To Edit Security Maps for Connector Connection Pools Delete-connector-connection-pool Managing Connector ResourcesTo Set Up EIS Access To Create a Connector Resource To Delete a Connector Resource To Edit a Connector ResourceCreate-connector-resource To Configure the Connector Service Managing Administered Object ResourcesDelete-connector-resource To Create an Administered Object Resource Delete-admin-object To Edit an Administered Object ResourceTo Delete an Administered Object Resource Create-admin-object SIP Servlet Container Web and EJB Containers Editing SIP Container General Attributes Editing the Properties of the SIP ContainerEditing SIP Container Session Properties EJB Container Web ContainerEditing SIP Container Session Manager Properties Page Understanding Application and System Security Configuring Security Tools for Managing Security Asadmin create-password-alias --user admin jms-password Managing Security of PasswordsEncrypting a Password in the domain.xml File Asadmin create-password-alias --user admin alias-name Restart the Enterprise Server Protecting Files with Encoded PasswordsChanging the Master Password Restart the Enterprise Server for the relevant domain Working with the Master Password and Keystores Changing the Admin Password Authenticating Entities About Authentication and Authorization1Enterprise Server Authentication Methods Specifying Jacc Providers Authorizing UsersVerifying Single Sign-On Understanding Users, Groups, Roles, and Realms Configuring Message Security Groups Users Realms Roles Create a Jdbc realm To Configure a Jdbc Realm for a Web, EJB Application About Digital Certificates Introduction to Certificates and SSLFollowing topics are discussed in this section About Certificate Chains About Secure Sockets Layer About Ciphers Using Name-based Virtual Hosts About Certificate Files About Firewalls Using the keytool Utility Using Java Secure Socket Extension Jsse ToolsChanging the Location of Certificate Files Delete a certificate from a keystore of type JKS Display certificate information from a keystore of type JKS Generating a Certificate Using thekeytool Utility Certificate was added to keystore Saving cacerts.jks Deleting a Certificate Using thekeytool Utility Storepass password Using Network Security Services NSS ToolsKeytool -delete Certutil -L -d $CERTDBDIR Using the certutil UtilityVerify the certificates generated in the previous bullet Display available certificates Move a certificate from an NSS database to JKS format Delete a certificate from an NSS certificate database List available token modules in an NSS store Modutil -list -dbdir $admin.domain.dir/$admin.domain/configAdd a new PKCS11 module or token Delete a PKCS11 module from an NSS store About Configuring Hardware Crypto Accelerators Using Hardware Crypto Accelerator With Enterprise Server Standard output will look similar to the following Configuring PKCS#11 TokensModutil -list -dbdir Asnssdb This section describes the following topics Managing Keys And Certificates Standard output will be similar to the following Listing Keys and Certificates Configuration for the SCA 1000 hardware accelerator Configuring J2SE 5.0 PKCS#11 ProvidersWorking With Private Keys and Certificates Name=HW1000 Library=/opt/SUNWconn/crypto/lib/libpkcs11.so Property name=mytoken value=&InstallDir/mypkcs11.cfg 126 Overview of Message Security Configuring Message Security Understanding Message Security in the Enterprise Server System AdministratorAssigning Message Security Responsibilities Application Developer Application DeployerAbout Username Tokens About Encryption About Digital SignaturesAbout Message Protection Policies Response Policy Glossary of Message Security Terminology Securing a Web Service Configuring Application-Specific Web Services Security Configuring the Enterprise Server for Message SecuritySecuring the Sample Application Actions of Request and Response Policy Configurations Configuring a JCE Provider Configuring Other Security FacilitiesAfter You Finish Security.provider.1=sun.security.provider.Sun Save and close the file Enabling Providers for Message Security Message Security Setup To specify the default server provider Configuring the Message Security ProviderTo specify the default client provider Enabling Message Security for Application Clients Creating a Message Security Provider Response-policy Further Information What is the Diagnostic Framework? Configuring the Diagnostic ServiceDiagnostic Service Framework Generating a Diagnostic Report Transactions What is a Transaction?About Transactions Transactions in Java EE Technology What is a Transaction? on Configuring Transactions on Workarounds for Specific Databases Admin Console Tasks for TransactionsConfiguring Transactions This section explains how to configure transaction settings Set any needed properties To set a transaction timeout value To set the location of the transaction logs To set the keypoint interval Default value is Virtual Servers Configuring the Http Service Http Listeners Configuring the Http Service 151 152 Overview of Web Services Managing Web Services Java EE Web Service Standards Web Services Standards Deploying Web Services Deploying and Testing Web Services Web Services Security Using Web Services RegistriesViewing Deployed Web Services Testing Web Services Adding a Registry Publishing a Web Service to a Registry Transforming Messages with Xslt Filters Monitoring Web Services Monitoring Web Service Messages Viewing Web Service Statistics 160 An Overview of the Object Request Broker Configuring the Object Request Broker Iiop Listeners Configuring the ORBWhat is the ORB? Managing Iiop Listeners Thread Pools Working with Thread Pools About Logging Configuring LoggingLog Records 1Enterprise Server Logger Namespaces Logger Namespace Hierarchy JTS Enterprise Server Logger Namespaces Configuring General Logging Settings Configuring LoggingConfiguring Log Levels 171000.000 Viewing Server LogsDetails ThreadID=13 About Monitoring Monitoring Components and ServicesMonitoring in the Enterprise Server Following sections describe these sub-trees Overview of MonitoringAbout the Tree Structure of Monitorable Objects Applications Tree Http Service Tree JMS Service Tree Connector Service TreeResources Tree Orb Connection-managers Connection-manager-1 About Statistics for Monitored Components and ServicesORB Tree Thread Pool Tree 1EJB Statistics EJB Container Statistics 3EJB Session Store Statistics 2EJB Method Statistics EJB Session Store Statistics 5EJB Cache Statistics 4EJB Pool Statistics Web Container Statistics 6Timer Statistics7Web Container Servlet Statistics 8Web Container Web Module Statistics Http Service Statistics Jdbc Connection Pools Statistics 9HTTP Service Statistics Developer Profile 10JDBC Connection Pool Statistics 11Connector Connection Pool Statistics JMS/Connector Service Statistics Statistics for Connection Managers in an ORB 12Connector Work Management Statistics13Connection Manager in an ORB Statistics 14Thread Pool Statistics Transaction Service Statistics15Transaction Service Statistics Thread Pools Statistics 17JVM Statistics for Java SE- Class Loading 15 Transaction Service StatisticsJava Virtual Machine JVM Statistics JVM Statistics 19JVM Statistics for Java SE- Garbage Collection 18JVM Statistics for Java SE- Compilation20JVM Statistics for Java SE- Memory 21JVM Statistics for Java SE Operating System Following table22JVM Statistics for Java SE Runtime 23JVM Statistics for Java SE Thread Info 24JVM Statistics for Java SE Threads Enabling and Disabling Monitoring To Configure Monitoring Levels Using asadmin Configuring Monitoring Levels Using the Admin ConsoleReturns Viewing Monitoring Data Viewing Monitoring Data in the Admin ConsoleViewing Monitoring Data With the asadmin Tool To Use the asadmin monitor Command to View Monitoring Data 531628032 45940736 Understanding and Specifying Dotted Names Command returns the following attributes and dataAsadmin get --user adminuser --monitor server.jvm Server.http-service Server.applications.petstore Examples of the list and get Commands Asadmin list --user admin-user--monitor server.applications Examples for the list --user admin-user --monitor CommandExamples for the get --user admin-user --monitor Command Asadmin list --user admin-user--monitor server Attempt to get all attributes from a Java EE application Asadmin get --user admin-user--monitor server.jvm Returns output will be similar to Asadmin get --user admin-user--monitor server.jvm.badnameTo Use the PetStore Example Attempt to get a specific attribute from a subsystem Asadmin list -m server.applications.petstore.signon-ejbjar Server.http-service Server.resources Server.thread-poolsReturns with dotted name removed for space considerations Monitoring Components and Services 201 Expected Output for list and get Commands at All Levels Applications Level Top Level Application has been deployed. It is not applicable if a Monitoring Components and Services 205 List -m Server.applications.app1 29Thread-Pools Level 28HTTP-Service Level Resources Level 31Transaction-Service LevelORB Level Level Using JConsoleJVM Level Securing JConsole to Application Server Connection Connecting JConsole to Application Server Prerequisites for Connecting JConsole to Application Server Connecting JConsole Securely to Application Server Monitoring Components and Services 213 214 About Management Rules Configuring Management Rules Configuring Management Rules Configuring Management Rules 217 218 Tuning the JVM Settings Java Virtual Machine and Advanced Settings Configuring Advanced Settings Restarting Automatically on Solaris Automatically Restarting a Domain or Node AgentThis Appendix contains the following topics Restarting Automatically on Solaris Restarting Automatically on the Microsoft Windows Platform Creating a Windows Service Start= auto DisplayName= display-name Security for Automatic Restarts Process name=as-service-name Sysproperty key=-XrsJvm-options-Xrs/jvm-options 226 Top Level Elements Dotted Name Attributes for domain.xml Top Level Elements Elements Not Aliased Elements Not Aliased 230 Asadmin Utility Asadmin Utility Appendix C The asadmin Utility 233 Table C-1Remote Commands Required Options Common Options for Remote Commands Prefix followed by the password name in uppercase letters Multimode Command Get, Set, and List Commands Table C-2Server Lifecycle Commands Server Lifecycle Commands Table C-2 Server Lifecycle Commands List and Status CommandsTable C-3List and Status Commands Table C-4Deployment Commands Deployment Commands Table C-6Message Queue Commands Version CommandsMessage Queue Administration Commands Table C-5Version Commands Table C-7Resource Management Commands Resource Management Commands Table C-7 Resource Management Commands Table C-8IIOP Listener Commands Configuration CommandsHttp and Iiop Listener Commands Lifecycle and Audit Module Commands Table C-10Profiler and SSL Commands Profiler and SSL CommandsJVM Options and Virtual Server Commands Table C-9Lifecycle Module Commands Table C-12Threadpool and Auth-Realm Commands Threadpool and Auth-Realm CommandsTransaction and Timer Commands Table C-11JVM Options and Virtual Server Commands Table C-14Transaction Commands User Management CommandsRegistry Commands Table C-13Transaction Commands Database Commands Rules and Monitoring CommandsTable C-16Rules and Monitoring Commands Table C-18Diagnostic and Logging Commands Diagnostic and Logging CommandsWeb Service Commands Table C-17Database Commands Table C-20Security Commands Security Service Commands Table C-21Password Commands Password Commands Custom MBean Commands Verify CommandService Command Table C-25Property Command Property Command ACC Index JMS Logging ORB 256