This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
Index
Aacclerators for SSL, 561ace.bat file, 759–760active coordinator, high availability manager and,
154, 157, 160, 160administrative privileges for setup, 32administrator identification for security, 480, 481,
487–488, 488, 496–497, 497AdminTask global object, 23advisors function of Dispatcher, 354
AIXadministrative privileges for setup of, 32loopback adapter configuration on, 364–366, 365
Apache Monitor tool, HTTP Server (IBM) and, 124–125, 125Apache Web Server, HTTP Server and, 9applet containers, packaging in J2EE and, 701application assembler, packaging in J2EE and, 703application client containers, packaging in J2EE and, 701application client JAR files, packaging in J2EE and, 702application component provider, packaging in J2EE and, 703application scope, 23application servers, 6–9, 6, 25, 51–87, 89–110
adding new feature to existing installation of, 96–99,97, 108–110
admin console and, 53, 84, 91–92, 92admin server in, 6–7application-update capabilities in, 23architecture and components of, 52–53, 53backup and recovery in, 101–102, 101, 102, 103Base package and, 52, 53bin directory in, 64, 93–94creating, on custom profile node after federation,
245–248, 246, 247, 248custom installation option for, 58, 59default applications (snoop, hello, hitcount) in, 69–72, 83default creation of, 8DefaultApplication application for, 53directory setup for, 52, 52t, 54, 55, 58, 58, 63, 64–65, 64disk space requirements for, 56domain name server (DNS) and, host names, 62
Note: Boldface numbers indicate illustrations; t indicates a table. 771
configuration for, 438–447external caching, 449–451, 450
EJB container in, 7Embedded HTTP Server (EHS) in, 7essential steps in, 52–53Express package and, 52, 53–64federating nodes and, 35–37, 35, 36, 37, 242–245, 243,
245cell management of, 249–251, 250
file transfer applications in, 53First Steps tool to verify installation of, 63, 67–68, 67fixes for, applying, 63–64flow chart for installation of, 53–54, 54horizontal cluster creation for, 41–42, 41horizontal clustering with highly
host names for, 61–62, 61installation directory for, 52installation failure and, 82–83installation. See silent installation of, belowIP addresses and, host names, 62J2C service in, 7–8Java Virtual Machine (JVM) in, 6JNDI naming server and, 8Launchpad program for, 56, 57–58license agreement for, 57logging in, 56, 57–58, 63, 78–87
profile creation for, 183, 207–216, 208network interface cards (NICs) and, host names, 62node names for, 61–62, 61, 84–86, 85PlantsByWebSphere application for, 53, 100, 100port configuration for, 59–61, 60, 86, 87, 87, 105product binaries and configuration repository in, 53
profiles for, 8–9, 9, 33–34, 33command prompt for, 74creation of, 52, 53, 65, 65, 73–77, 74default vs. subsequent, 75–76deletion of, 93directory for, 65, 76, 77, 77naming the profile in, 75, 75node and host names for, 76port configuration for, 76, 76Profile Creation Wizard for, 74–76starting a particular profile in, 90–91, 91verifying creation of, 77Windows services for, choosing, 77
profileTemplates directory in, 65registering and downloading software for, 54Sample applications for, 65
choosing to install, 59, 59deploying, 98–99, 98, 99
Secure Sockets Layer (SSL) and, configuration forHTTP server and, 584–592
security server in, 8Service Integration Bus (SIBus) and, 8, 72–73, 73silent installation of, 104–110, 107
Cell option for, 106directory setup for, 104installation directory for, 105, 108Javadoc installation in, 105port configuration in, 105response files for, 104–105sample application installation in, 105upgrading or adding features through, 108–110verifying installation in, 108, 108Windows service option for, 106
starting enterprise applications on, 92, 92starting, 89–90, 90stopping enterprise applications on, 92stopping, 89–90system prerequisites for, 57–58template for, 8–9, 9temporary (TMP) directory setup for, 55, 55unconfiguring Web server definition from, 177–178, 178uninst directory in, 65uninstalling enterprise applications on, 92–93uninstalling, 102–103update installer tool for, 606, 607–608upgrading, 94–96, 95, 96, 108–110verifying installation of, 63, 66, 108, 108
admin console for, 68–69, 68, 69browser for, using default application for, 69–72, 120First Steps tool for, 63, 67–68, 67hello servlet for, 70, 70hitcount servlet for, 70–72, 71log files for, 66, 66, 67
772
Index
snoop servlet for, 69–70, 70Windows services for, 72
verifying status of, 91Web container in, 7Web services engine in, 7WebSphere Rapid Deployment (WRD) and, 23, 50
welcome panel for, 57, 57Windows service and, 63–63, 63, 106, 630–632, 631,
632xclock or xeyes command for, in Unix systems, 56, 56
BackupConfig archive and, 684–685, 685–686cells of federated application server nodes and, 251HTTP Server (IBM) and, 125–126Network Deployment package application server
horizontal clustering, 18–19, 19architecture of, 301, 301creation of, 41–42, 41custom profile for, 302Deployment Manager for creating, 303–304, 303, 304directory structure of, 307distributed plug-in installation for, 303federating node for, 302, 303HTTP Server (IBM) installation for, 303logging in, 308, 308naming, 304, 304prerequisite tasks before creation of, 302–303
Note: Boldface numbers indicate illustrations; t indicates a table. 773
Index
clustering, horizontal, continuedprofile configuration for, 302reviewing information about, 305, 305second and additional, 305, 305verifying configuration of, 305–307, 306, 307weight value (numbers) for, 304, 304with highly available/workload-management
(HA/WLM)), 18–19, 19workload management configuration for, 305–307,
306Load Balancer and, 377–378, 377
IP addresses for, 354–355high availability and, 416–417, 416, 417, 418, 418,
431–432, 432memory-to-memory replication and, 309request processing in, 285–287, 286Service Integration Bus (SIBus) and, adding server or
cluster as member of, 644–645, 645vertical, 17–18, 17, 18
applications selected for, 291, 291create and configure, 287–300Deployment Manager setup for, 290–294, 291directory structure for, 299, 299federating node for, 289, 290host alias configuration for, 296–298, 297, 298HTTP Server (IBM) installation for, 290logging in, 299, 300naming, 292–293, 293new cluster creation in, 291, 292plug-in installation for, 290port assignment for, 289, 298, 298prerequisite tasks for, 288–290, 288profile creation for, 288–289, 288, 289reviewing information about, 294, 294second and additional cluster creation in, 293, 293verifying, 294–296, 294, 295, 296virtual host configuration for, 296–298, 296weight values (numbers) for, 292, 293with distributed remote plug-in, 17–18, 18workload management in, 294–296, 294, 295, 296
Collector Tool, 668–676analyzing output of, 670–671full mode output, 674IBM Support use of, 668–669installation directory run of, 673JAR files used by, 668–669, 674–675running, 669–670sample output from 673–676summary mode for, 672–673, 675–676text file created from, 676tips and suggestions for better use of, 671–672Unix systems and, 672Windows systems and, 672
color coding in logs, 679common secure interoperability (CSI) option, 477, 478conf directory, HTTP Server (IBM) and, 122configuration, 25–50
data, Service Data Objects (SDOs), 24Data Replication Service (DRS), 24data source creation, for WebSphere Bank, 718, 720, 721data store, messaging engine and, 339, 339database drivers, database session persistence and,
324–326, 324, 325database session persistence, 320–334, 321. See also
session persistencecluster preparation for, 321, 323, 323configuring, 321, 322database creation for, 322DB2 installation and database creation in, 334–336,
335, 336hitcount to verify, 321Java 2 Connector (J2C) authentication in, 321,
325–326, 326Java Database Connectivity (JDBC) provider in, 321,
326–329, 327, 328, 329Java Naming and Directory Interface (JNDI) name for,
321, 330–332, 331nodes and clusters accessible to, 322–323session failover verification in, using hitcount,
332–334, 333, 334testing database connection from admin console,
329–330, 330user name and passwords for, 322WebSphere variable pointing to Type 4 drivers for,
324–326, 324, 325database support
Network Deployment package and, 16session persistence for, 45, 45, 46
dates, synchronizing date and time (clock), 31DB2 Universal Database (DB2 UDB), 4, 5
horizontal clustering with highlyavailable/workload-management (HA/WLM)) for,18–19, 19
installation and database creation in, 334–336, 335, 336Network Deployment package and, 16
default profiles, 75–76DefaultApplication application, 53dependency packages, packaging in J2EE and, 708–710deployer, packaging in J2EE and, 703–704Deployment Manager, 3, 5
admin console for, 33, 33, 204application server management using, 16–17, 17backup and recovery for, 204–205
connecting to, through admin console, 202creating profile for, 194–207, 194custom profile federated to, 217–218, 218cell management in, 13–14directory structure for, 195–196, 196distributed remote plug-in installation for, 38–41, 39, 40federating nodes for, 14, 35–37, 35, 36, 37
add nodes in, 234, 234from admin console of, 232–242directory structure after federation and, 240–241,
240, 241host name and SOAP address port assignment to
nodes in, 234–235, 235logging process of, 236, 236, 237removing admin capability in, automatic, 240, 240Service Integration Bus (SIBus) and messaging
engines inclusion in, 235verifying, using admin console, 237–239, 237, 238,
239verifying, using log files, 236–237, 236, 237Windows service selection for, 235, 235, 239–240
horizontal clustering with highlyavailable/workload-management (HA/WLM)) for,18–19, 19
HTTP server remote management using, 41, 41local, managed node of distributed plug-in, 261–262log file for, 199, 199logging with, 205–207, 206, 206–207tmanaging, 203–205naming, 195, 195Network Deployment package, 183, 194–207network interface cards (NICs) and, 196node agents and, 14node, host, and cell names for, 196–197, 197port configuration for, 197–198, 197product update installation and, 606–607profile for, 15, 32–33, 32
directory structure after, 199–200, 200starting, 203, 204status checking of, 204stopping, 203verifying creation of, using First Steps console for,
certificate authority certificates for, 575–583iKeyman utility. See iKeyman utility, 575
Note: Boldface numbers indicate illustrations; t indicates a table. 775
Index
digital certificates, continuedsandbox.com test certificate for, 570, 570security alert concerning expired/mismatched
certificates and, 568–569, 569Dispatcher. See Load Balancerdistinguished name (DN), security and, 490–491distributed plug-in for HTTP Server, 25, 255–283
categories of, 256, 257configurations possible for, 255–256, 257directory locations for symbolic references, 259, 259tdistributed plug-in for HTTP Server and Snoop servlet
federating node for, 271generating file for, propagating to remote Web
server using admin, 273install and configure, 271–272, 271location of, 272naming Web server for, 271, 271node agent process in, 271verifying installation of, using browser, 274, 274verifying installation of, using log and
configuration files for, 272WebSphere configuration for, 272–273, 272
remote, unmanaged node, 274–279, 275administrative user ID and password creation for, 277install and configure, 275–277, 276location of, 277
naming Web server for, 276–277, 276verifying installation of, using browser, 279verifying installation of, using log and
configuration files, 277WebSphere configuration for, 277–279, 278, 279
request processing in, 258–259, 258understanding and performing tasks for, 257–259unmanaged nodes in, 255–256, 257vertical clustering and, 290Web server definition for, manual configuration from
admin console, 279–283adding node to, 279–280, 280adding Web server definition to WebSphere for,
281–283, 281, 282,distributed remote plug-in, 38–41, 39, 40domain name server (DNS), 31–32
adapter beans in, 456admin console for Caching Proxy in, 460, 460application server configuration for, 438, 443–447,
444–447external caching, 449–451, 450
CacheMonitor application deployment for, 440CacheQueries directive for, 460, 460CacheTimeMargine directive for, 460, 460Caching Proxy in, 435, 463–468
administrator user for, 465, 465connecting to, 466, 466installation of, 464logging, 467, 467mapping rules for, 465, 465snoop servlet and, 466–467, 467starting and stopping, 464starting from console, 467, 468welcome page for, 466, 466Windows service setup for, 464
cluster-aware dynacache object caching (cachereplication) in, 462–463, 463
content-based load balancing, high availability and, 413
776
Index
DynacacheEsi.ear application deployment in, 449dynamic content caching in, 458–461, 459, 460Edge Side Include (ESI) processor in, 435, 436,
447–454, 448enabling, 438, 439, 460–461enterprise application configuration for, 438, 441–443,
442, 443external caching, 451, 451
external cache group and member configuration for,449–451, 450, 455–457, 455
architecture of, 414, 415cluster IP address for, 414–418, 416, 417, 418,
431–432, 432configuration overview, 414content-based load balancing and, 413Dispatcher in, 414–415Dispatcher login for, 420, 420failover mode operation in, 428, 428failure in, simulating for testing, 430, 430heartbeat option for, 420–421, 420, 421, 430HTTP Server welcome screen for, 419, 419IP address assignment in, 416–418, 416, 417, 418primary Load Balancer server setup for, 415–417,
416, 419–422, 419reach target server configuration for, 432–433, 433recovery options for, 421–424, 421, 422, 423,
430–432, 431scripts for, 424–428, 425, 426, 427secondary Load Balancer server setup in, 417–418,
418, 419, 422–424, 423Site Selector and, 413verifying configuration for, 428–432, 429version verification and fix pack level for, 418, 418
host address assignment for, 456IP addresses in, 416–418, 416, 417, 418Java 2 Enterprise Edition (J2EE), 435Java Server Pages (JSP) and, 435, 436Load Balancer and, 458–461, 459logging, 457, 458monitoring, 440plug-in file configuration for, 448–448, 448, 449policies for, 444, 445pushing cached content to ESI processor in, 447–454, 448pushing dynamic content to Caching Proxy in,
Edge Side Include (ESI) processor, dynamic caching and,435, 436, 447–454, 448
efixes, 606. See also product update installationEJB application JAR files, packaging in J2EE and, 702EJB containers in, 700–701Embedded HTTP Server (EHS), 9, 19
application server and, 7local plug-in for HTTP Server and, 139
Enterprise Application Archive (EAR), 50Application Server Toolkit (AST) and, 717AutoAppInstall mode for, 732–733automatic removal of, 734, 734packaging in J2EE and, 699, 702, 710–711support for, 23WebSphere Bank and, 710–711, 717. See also
WebSphere Bank
Note: Boldface numbers indicate illustrations; t indicates a table. 777
732–734, 732–733XML files added to EAR directory in, 712, 712t
Enterprise Java Beans (EJB), 1, 687application server and, container, 7EJB containers in, 700–701packaging in J2EE and, 699replication and failover support for, 24
event handling, J2EE Management API and, 752–761, 753executor function of Dispatcher, 354Express package for WAS V6, 2, 3–5, 4, 11–12, 11, 12
application server and, 52, 53–64. See also applicationservers
HTTP Server (IBM), 9–10profile creation in, 8unsupported architectures in, no spraying, 12, 12
Extended Deployment (XD) page for WAS v. 6, 3external caching, 447–454, 448ExternalCacheManager directive, 459, 459
Ffailover, process vs. system, 14Fast Response Cache Accelerator, 131federating application server nodes, 2–3, 14, 25, 35–37,
35, 36, 37, 229–254, 229, 230, 233application invocation in, 248, 249application server command prompt for, 242–245,
243, 245cell management following, 249–251, 250
backup and recovery of cell in, 251starting application server, 251starting node agent process in, 250, 250
creating application server on custom profile nodeafter federation, 245–248, 246, 247, 248
custom profile for, 34–35, 34, 244–245, 245Deployment Manager admin console for, 232–242
add nodes in, 234, 234directory structure after federation and, 240–241,
240, 241federating additional nodes, 241–242, 241, 242host name and SOAP address port assignment to
nodes in, 234–235, 235logging process of, 236, 236, 237removing admin capability in, automatic, 240, 240Service Integration Bus (SIBus) and messaging
engines inclusion in, 235verifying, using admin console, 237–239, 237, 238, 239verifying, using log files, 236–237, 236, 237Windows service selection for, 235, 235, 239–240
(WRD)automatic deployment of, 735–741command-line notification for update to, 740, 741configuration of, 735HelloWorld.java source file in, 736–738modifying HelloWorld output string in, 739–740notification of successful deployment in, 738–739
High Availability Manager (HA Manager), 23, 337. Seealso Service Integration Bus (SIBus)core groups and active coordinator for, 345–346, 345, 346policies set for, 346–348, 346, 347
high availability Load Balancer. See Load Balancer, highavailability
highly available persistent service, enable/configuration,43, 43
highly available/workload-managed (HA/WLM) clusteredenvironment, 18–19, 19, 25–50administrative privileges for setup of, 32application server in, 51–87. See also application
serverapplication server profile for, 33–34, 33architecture of, 26–27, 26clustering and, 26custom profile for, 34–35, 34Deployment Manager profile for, 32–33, 32distributed remote plug-in and,
Web server as managed node, 38, 39Web server as unmanaged node, 39, 40
Edge Server/Load Balancer for, 26, 47–49, 47, 48, 49high availability configuration for, 48–49, 48, 49install, configure, verify, 47–48, 47Monitoring tool for, 48, 48
federating nodes for, 35–37, 35, 36, 37highly available persistent service enable/configuration
for, 43, 43horizontal cluster creation in, 41–42, 41HTTP Server (IBM) and, 26, 37–38, 37, 38messaging engine for, 46, 46minimum OS/hardware requirements for, 29node name/identification (DNS) and ping for, 31–32plug-ins and, 26pre-installation tasks for, 29–32, 29readiness for, preparatory flow chart and steps, 28–29, 28Service Integration Bus (SIBus) for, 46, 46session persistence and, 26, 43–46, 44, 45, 46synchronizing date and time (clock) for, 31TCP/IP network and port configuration for, 30–31, 30tuser privileges set up for, 29–30verification of set up in, 26–27, 27
hosts file, 31–32htdocs directory, HTTP Server (IBM) and, 122HTTP Server (IBM), 4, 6, 9–10, 10, 25, 111–136
admin console to manage, 22, 22Apache Monitor tool for, 124–125, 125Apache Web Server and, 9architecture of, 111, 112backup and recovery in, 125–126bin directory for, 122conf directory for, 122Cryptographic Message Syntax (CMS) and, 561Custom installation for, 116, 116directory setup for, 113, 113, 115–116, 115, 116t, 118,
120–123, 121, 131, 132disk space requirements for, 114distributed plug-in for, 25, 255–283. See also
distributed plug-in for HTTP Serverdownloading trial version of, 113dynamic shared objects (DSOs) in, 122–123Embedded HTTP Server (EHS) in, 7, 9, 19Fast Response Cache Accelerator in, 131highly available/workload-managed (HA/WLM)
clustering and, 26horizontal clustering with highly
htdocs directory for, 122HTTPServer base component for, 116, 117iKeyman utility in, 561installation of, 37–38, 37, 111, 112–118, 112Launchpad program for, 114license agreement for, 115, 131Load Balancer for. See Load Balancerlocal plug-in configuration for, 11, 11logging in, 114, 122, 126–130, 127, 127–129t
command prompt to start fails, 129connection to welcome page fails, 129logon fails in, 129problem scenarios in, 127–130tracing and, configuring for, 129–130, 130
logs directory for, 122managing, 123–126
Note: Boldface numbers indicate illustrations; t indicates a table. 779
Index
HTTP Server (IBM), continuedmodules directory for, 122–123multiple
installing and configuring on same machine,133–136, 133
register HTTP Server processes as Windowsservices and verify in, 135–136, 136
second instances, making adjustments to, 134verifying installation of, 134–135Windows services and, 134
multiple Web servers with multiple application serverprofiles and, 170–175, 171–175
multiprofile local or remote plug-in for, 11–12, 12netstat command for, 31, 31Network Deployment package and, 16plug-in for. See plug-in for HTTP Serverplug-in propagation in, 22, 22port configuration for, 117, 117, 132
certificates and, 568–569, 569security components for, 116, 117security values for, 131session persistence and, 25, 43–46, 44, 45, 46,
309–336. See also session persistencesilent installation of, 130–133
Admin rights required for, 130directory setup for, 131, 132Fast Response Cache Accelerator in, 131license agreement in, 131port configuration for, 132response files for, 131, 132security values for, 131verifying installation of, 133Windows service for, 131–132, 132
starting, 123starting HTTP Admin Server in, 123–124static content on, 9, 122stopping, 123stopping HTTP Admin Server in, 123–124temporary (TMP) directory setup for, 113–114
testing connection for, 568–570, 569tracing and, configuring for, 129–130, 130uninst directory for, 123uninstalling, 126upgrading, 115–116, 116verifying installation of, 118–120, 134–135
log files for, 119Windows services panel for, 119–120, 119
virtual host creation for, 562, 567–568Welcome page for, 38, 38, 114, 115, 121, 419, 419Windows service for, 117–118, 118, 131–132, 132, 134
HTTP serversdistributed remote plug-in installation for, 38–41, 39, 40dynamic cache and, 49Endpoint Listener (HTTP) application for, 647–648,
admin DN and directory database configuration for,520, 520, 521
admin identification and setup in, 525–528, 526, 527, 528configuration mode of, 557–558, 557, 558Configuration Tool in, 523, 523, 524, 523, 556–557container branches in, 532–535, 533, 534, 535database setup for, 521–522, 521, 522DB2 instance for, 519, 519, 555–557directory configuration for, 523–525, 525directory server instance creation for, 518–523, 519,
557–558, 557directory tree creation for, 515, 528–543, 529
container branches in, 532–535, 533, 534, 535deleting the directory tree, 544–545, 544
780
Index
domain attributes for, 531, 531, 532logging onto server instance of, 529–530, 529, 530managing entries in, 530–531, 530, 531root node entry in, 530, 530stopping directory server for, 545, 545structural object classes list for, 531, 531user (principal) entries in, 536–539, 536, 537, 538, 539user group creation in, 540–543, 540, 541, 542, 543verifying server is running for, 529
directory tree deletion in, 544–545, 544downloading, 515–516encryption options for, 518error log for, 558features/components selection for, 517, 517installation directory for, 517, 517Instance Administration Tool in, 518, 518key file (ldapkey.kdb) in, 546, 547, 547LDAP Interchange Format (LDIF) for, 515, 543–545ldapsearch search filter for, 558lightweight directory access protocol (LDAP) and,
489, 515logging onto server instance of, 529–530, 529, 530, 552login panel for, 552, 552network interface selection for, 519password stash file in, 546, 547–548, 548port configuration for, 516, 520, 520principals in, 536public key certificate added to WebSphere trust file,
connection configuration for, 551–555directory creation for, 546iKeyman utility for, JVM and, 546key database file configuration for, 553, 554key file (ldapkey.kdb) creation for, 546, 547, 547password stash file in, 546, 547–548, 548port configuration for, 554–555, 554self-signed certificate creation, 548–550, 549, 550server configuration for, 552–553, 553WebSphere and, configuring between, 598–603
self-signed certificate creation in, 548–550, 549, 550Simple Object Access Protocol (SOAP), 516stopping the directory server in, 545, 545suffix for directory tree in, 523–525, 524trace facility for, 558troubleshooting, 555–558user (principal) entries in, 536–539, 536, 537, 538, 539user creation for, 516user group creation in, 540–543, 540, 541, 542, 543verifying server is running for, 529Web Administrator Tool in, 525–528, 526Windows services in, 525, 525
icons used in logs, 679iKeyman utility
digital certificates and, 499–507Secure Sockets Layer (SSL) and, 561
inbound services, 637Service Integration Bus (SIBus) and, 649–650, 650
Informix databases, Network Deployment package and, 16installation and configuration, 25–50. See also
configurationInstance Administration Tool, IBM Tivoli Directory
Server (ITDS) and, 518, 518instances, multiple, binary file sharing in, 21interface address, content-based load balancing and, 402, 402interim fixes, efixes, 606. See also product update
installationInternet Explorer, importing public certificate from, 571,
571, 573–575, 573, 574, 575Internet Information Server (IIS), port configuration and,
custom Java administrative client creation and,749–761ace.bat file for, 759–760AdminClient instance for, 750, 750handling events in, 752–761, 753MBean location for, 750–751, 751t, 751MBean used in, 751, 752registering for events in, 752running administrative client program in, 760–761sample program for, 753–759
dump name space utility in, 743, 743–744Java Management Extensions (JMX) interface, 743Management Enterprise JavaBean (MEJB) and, 743MBeans and
Admin Service interface for, 763direct access of instance of, 763extending use with, 761–766factory class for, 762JMX type, 761–762
Note: Boldface numbers indicate illustrations; t indicates a table. 781
Index
J2EE Management API, Mbeans, continuedJMXManageable and CustomService interface for,
735–741Management API in. See J2EE Management APImanagement of, 50packaging in, 699–705
applet containers in, 701application client containers in, 701application client JAR files in, 702application components in, 700class loading schemes and, 705–707configuring, 707creating the EAR file for, 707–708dependency packages in, 708–710deployment modules in, 700EJB application JAR files in, 702EJB containers in, 700–701, 700enhanced EAR files in, 705, 711–715, 712t, 713,
699, 702, 710–711Java archive (JAR) files in, 702Java Connector Architecture (JCA) and, 702limitations of, 704–705resource adapter (RAR) files in, 702roles in, 702–704runtime containers in, 700structure of, 708Web application WAR files in, 702Web archive (WAR) files in, 702Web containers in, 701what can be packaged in, 700–702XML files added to EAR directory in, 712, 712t
WebSphere Bank and, 718, 724, 725Java Naming and Directory Interface (JNDI)
application server and, naming server, 8database session persistence and, 321, 330–332, 331dump name space utility in, 694, 694–697, 743, 743–744
Java Server Page (JSP), 1, 735dynamic caching and, 435, 436local plug-in for HTTP Server and, 139packaging in J2EE and, 699
Java Virtual Machine (JVM), application server and, 6Java, custom Java administrative client creation, 749–761JavaScript, 9JAXP, 701JMX type MBeans, 761–762
Kkey store files, digital certificates and, 498
LLDAP Interchange Format (LDIF), 515, 543–545LDAP. See lightweight directory access protocol (LDAP)ldapsearch search filter, IBM Tivoli Directory Server
IBM Tivoli Directory Server (ITDS) and, 49–50, 515Secure Sockets Layer (SSL) and, 598–603security and, 49synchronizing date and time (clock) for, 31
lightweight directory access protocol (LDAP) registry,469, 488–497. See also security, lightweight directoryaccess protocol and
lightweight third party authentication (LTPA), 472–482,484, 485, 486, 493, 494Secure Sockets Layer (SSL) and, 602–603security and, 477, 478
782
Index
Linuxadministrative privileges for setup of, 32loopback adapter configuration on, 364–366, 365
Load Balancer, 353–412advisor function in, 380, 380advisor function in, 406–407, 406advisors function of Dispatcher in, 354architecture of, 355, 355cluster IP addresses in, 354–355configuration overview, 356console of, 370–372, 371content-based load balancing, 387–412, 399
adding HTTP servers for, 404–406, 405, 406client gateway address for, 400–401, 401cluster address for, 401–402, 402configuring, 409–412, 410, 411Dispatcher configuration file for, 407, 407Dispatcher configuration for, 400–412forwarding method selection in, 403–404, 403interface address for, 402, 402IP address assignment for, 400Network Address Translation/Network Address
Port Translation (NAT/NAPT), 397port assignment for, 403–404, 403return address in, 399, 404, 404starting manager and advisor functions in,
406–407, 406, 407verifying configuration of, 411–412, 411, 412verifying forwarding from command prompt in,
408, 408verifying request spraying in, 409
Content-Based Routing (CBR) request processing in, 354Dispatcher component of, 354dsserver function of Dispatcher in, 354dynamic caching and, 458–461, 459executor function of Dispatcher in, 354high availability in, 413–433host connection in, 382–383, 382, 383HTTP servers and request spraying in, 354installing, 368
configuration wizard for, 372–373configure the network for, 356–360console of, 370–372, 371directory structure for, 366, 367, 368DNS entry for cluster address in, 374, 374fix pack application for, 373–374IP address assignment for, 356–360, 357, 358, 359,
362–363, 363, 365–366, 366, 374, 374, 378Java system variable setting in, 372–373, 372, 373Launchpad for, 367license agreement for, 368location for, 368, 369log files for, 370, 370
loopback adapter configuration for, 360–366, 362,381
loopback adapter on other operating systems,364–366, 365
MAC addresses of servers in, 359, 359multiple HTTP servers, configuring to spray
requests, 375–381network adapter for, 361, 361pinging HTTP servers to test, 358–359route delete command and routing tables in, 364, 364route print command and routing table verification
for, 360, 360, 363, 363temporary (TMP) directory setup for, 367verifying, 369–373, 370
installing, 355–389IP addresses in, 354–360, 3571, 358, 362–366, 363,
366, 374, 374, 378, 393–395, 394, 395IP sprayer use of, 353logging in, 389–390, 389, 390loopback adapter for, 360–366, 362, 381manager function, 354, 406–407, 406manager statistics on, 388, 388Media Access Control (MAC) address request
processing in, 354monitor for, 387, 387, 388Network Address Translation/Network Address Port
adding servers for, 378–380, 379, 380advisor startup for, 380, 380cluster address assignment in, 377–378, 377Dispatcher configuration for, 375–381, 375Host Connection error in, 376–377, 377host specification for, 376loopback adapter configuration for, 381No Host Keys error in, 376, 376operating system selection for, 381port assignment and, 377, 378, 378testing, 385–389, 386
Note: Boldface numbers indicate illustrations; t indicates a table. 783
Index
Load Balancer, continuedsticky time configuration in, 386–387subcomponents of, 353testing, using HTML page, 384–385, 385verifying configuration of, 383–384, 384
local distributed plug-in. See distributed plug-in for HTTPServer
Log Analyzer, 677–683, 678color coding in, 679icons used in, 679showlog tool for, 680–681, 681–682Symptoms database and, updating, 680thread dumping in, 682–683tracing and, 666unit of work (UOW) entries in, 677–678
Secure Sockets Layer (SSL) and, 597–598, 597, 598Service Integration Bus (SIBus) and, 349, 350showlog tool for, 680–681, 681–682strings for, trace and logging, 657–659, 659tthread dumping in, 682–683tracing and, 656–657unit of work (UOW) entries in, 677–678vertical clustering and, 299, 300
logs directoryapplication server and, 64HTTP Server (IBM) and, 122
MManagement Enterprise JavaBean (MEJB), 743manager function of Dispatcher, 354managing WebSphere Application Server v 6, 50,
655–697 . See also J2EE Management APIBackupConfig archive and, 684–685, 685–686Collector Tool for, 668–676
analyzing output of, 670–671full mode output, 674IBM Support use of, 668–669installation directory run of, 673JAR files used by, 668–669, 674–675running, 669–670sample output from 673–676summary mode for, 672–673, 675–676text file created from, 676tips and suggestions for better use of, 671–672Unix systems and, 672Windows systems and, 672
dump name space utility in, 694, 694–697, 743, 743–744First Failure Data Capture tool in, 676–677heap dump analysis and, 683–684, 683t, 684Log Analyzer for, 677–683, 678
color coding in, 679icons used in, 679showlog tool for, 680–681, 681–682Symptoms database and, updating, 680thread dumping in, 682–683unit of work (UOW) entries in, 677–678
Performance Monitoring Infrastructure (PMI) and, 687performance monitoring with Tivoli Performance
Viewer, 687–688, 688RestoreConfig archive and, 686, 686–687tracing for, 655–668
advanced format of, 666application server trace service and, management
of, 664–665basic format of, 666configuring, 659–660, 660diagnostic settings for, 666–668Dump Files and, 668Enable Log in, 667enabling at server startup, 659–662, 660, 661enabling on client and standalone applications,
663–664enabling on running server, 662–663, 662fields in output of, 665–666interpreting output from, 665–666Log Analyzer format of, 666logging and, 656–657
784
Index
Saving changes to configuration and, 668strings for, trace and logging, 657–659, 659tTrace Output format in, 668Trace Output properties in, 667
verbose class loader in, 693, 693verbose garbage collection (GC) in, 690–692, 691, 692version information using versionInfo command in,
689, 689–690mapping rules, Caching Proxy server and, 465, 465MBeans, 761–766
Admin Service interface for, 763direct access of instance of, 763factory class for, 762JMX type, 761–762JMXManageable and CustomService interface for, 763registering, 762–766SnoopMBean.java code, 764SnoopMBean.xml code, 764–766SnoopMBeanImpl.java code, 764
Media Access Control (MAC) address request processing,Load Balancer and, 354
memory-to-memory replication, 309–320, 310. See alsosession persistenceclient-only mode in, 311client–server mode in, 311cluster members and, 309hitcount to verify session failover, 315–320, 316–320HTTP session failover in, 314–320log files for, 314mode for, 311, 313, 313replication domain in, 309, 311–312, 312server-only mode in, 311starting the cluster after, 313–314, 314tracing for, 314, 314, 320
memory-to-memory session persistence, 43–44, 44messaging engine (ME), 23, 25, 337. See also Service
Integration Bus (SIBus)application server and, 8, 72–73, 73cluster specified for, 340, 341data store for, 339, 339default installation of, 21federating nodes and, 235highly available/workload-managed (HA/WLM)
clustering and creation/configuration of, 46, 46Java Message Service in, 23Network Deployment package application server
profile and, 216Service Integration Bus (SIBus) and, 637SIBus creation in, 340–341, 340, 341verifying messaging engine configuration and failover
in, 341–342, 342workload sharing (optional) configuration for,
342–344, 343, 344modules directory, HTTP Server (IBM) and, 122–123
Network Deployment package for WAS V.6, 3, 3, 5–6, 5,13–14, 13, 183–227application invocation in, 248, 249application server profile and, 51, 183, 207–216, 208
adding new features to, 216backup and recovery for, 216directory structure after creation of, 211–212, 212directory structure for, 208–209fix packs applied to, 215log files for, 211logging during creation of, 213, 214, 214–215tmanaging the environment for, 216messaging engine enabling for, 216multiple profiles for, 216naming profile for, 208node and host name for, 209, 209port configuration for, 209–210, 209, 210product binary installation for, 208Profile Creation wizard for, 208Service Integration Bus (SIBus) configuration for, 216Service Integration Bus Web Services Enablement
(SIBWS) and, 216verifying creation of, using First Steps, 212–213, 213Windows service selection for, 210–211
architecture of, 16–19, 17, 18, 19, 184, 184Caching Proxy and, 435. See also dynamic cachingcustom profile in, 183, 216–222, 217
directory structure after creation of, 220, 220, 221directory structure for, 218federating to Deployment Manager, 217–218, 218logging problems and, 221, 221, 222tnaming, 218node and host name for, 219, 219port configuration for, 219product binaries installation for, 217Profile Creation wizard for, 217verifying installation of, 219, 220
Note: Boldface numbers indicate illustrations; t indicates a table. 785
Index
Network Deployment package for WAS V.6, continueddatabase support in, 16DB2 and, 16deployment manager for, 183, 194–207
admin console connection for, 204backup and recovery for, 204–205connecting to, through admin console, 202creating profile for, 194–207, 194directory structure for, 195–196, 196, 199directory structure after, 199–200, 200log file for, 199, 199logging with, 205–207, 206, 206–207tmanaging, 203–205naming, 195, 195network interface cards (NICs) and, 196node, host, and cell names for, 196–197, 197port configuration for, 197–198, 197starting, 203, 204status checking of, 204stopping, 203verifying creation of, using First Steps console for,
201, 201, 202verifying installation of, 199Windows service selection for, 198, 198, 199,
202–203, 203directory structure for, 186, 186, 188, 188, 189
after application server profile creation, 211–212,212
disk space requirements for, 187distributed local plug-in for, 17, 17distributed remote plug-in for, 38–41, 39, 40dynamic caching and. See dynamic caching, 435Edge Server/Load Balancer and, 16horizontal clustering with highly
available/workload-management (HA/WLM),18–19, 19, 25. See also highly available/workloadmanagement
host names for, 185–186, 186HTTP Server (IBM) and, 9–10, 16installation wizard for, 188–227installation, 183–227, 184Launchpad program for, 187license agreement for, 187Load Balancer and. See Load Balancerlogging, product binary installation and, 192–193, 192,
193tmultiple application servers in, Deployment Manager
admin console and, 16–17, 17nodes and cells in, 13–14, 13plug-ins and, 16
port configuration for, 185–186product binaries installation for, 183, 184–193
profile creation in, 8, 14–16, 15sample applications for, selecting, 189, 189silent installation for, 222–227, 223–225
directory setup for, 223, 224, 224Javadoc feature for, 224license agreement for, 224product binary installation in, 223–226profile creation and, 225, 226–227response files for, 222, 223, 224, 225, 225sample applications and, 224temporary (TMP) directory for, 223–224verifying, 226
single-machine installation hints for, 184–185spraying requests using, 12symbolic references in, directory locations for, 184,
185ttemporary (TMP) variable for, 186, 187upgrading to, from Base or Express package, 188verifying product binary installation in, 189–190vertical and horizontal clustering in, 285–308. See also
clustering (horizontal and vertical)vertical clustering with distributed remote plug-in for,
17–18, 18network interface cards (NICs), application server and,
host names and, 62node agents, 14nodes, 13–14, 13
application server and, 84–86, 85naming, 61–62, 61
cells vs., 13–14, 13clusters and, 14, 17, 18copying key and trust files to, 506, 511, 512custom profile for, 34–35, 34Deployment Manager profile for, 32–33, 32distributed local plug-in for, 17, 17distributed remote plug-in for, 38–41, 39, 40failover and, process vs. system, 14federation of, 14, 25, 35–37, 35, 36, 37horizontal clustering with highly
available/workload-management (HA/WLM)),18–19, 19
InvocationTargetExeception errors and, 84–86, 85managed vs. unmanaged, 255–256, 257. See also
distributed plug-in for HTTP Servermanaged, Web server as, 38, 39name/identification (DNS) and ping for, 31–32Network Deployment package
node agents and, 14profile creation and, 76security and, synchronization issues in, 495–496, 496synchronization of, 495–496synchronizing date and time (clock) between, 31unmanaged, Web server as, 39, 40vertical clustering with distributed remote plug-in for,
17–18, 18Windows services and, node agent process as,
632–633, 633, 636
Oobject request brokers (ORBs), security and, 477, 478operating system registries, 469, 482–488, 483. See also
security, operating system registries inoperating system support, 2
minimum requirements for highlyavailable/workload-managed (HA/WLM)clustering and, 29
Oracle, Network Deployment package and, 16outbound Web services, 637
Ppackaging in J2EE, 699–705
applet containers in, 701application client containers in, 701application client JAR files in, 702application components in, 700class loading schemes and, 705–707configuring, 707creating the EAR file for, 707–708dependency packages in, 708–710deployment modules in, 700EJB application JAR files in, 702EJB containers in, 700–701enhanced EAR files in, 705, 711–715, 712t, 713, 714,
702, 710–711Java archive (JAR) files in, 702Java Connector Architecture (JCA) and, 702limitations of, 704–705resource adapter (RAR) files in, 702roles in, 702–704runtime containers in, 700structure of, 708Web application WAR files in, 702Web archive (WAR) files in, 702Web containers in, 701what can be packaged in, 700–702
Performance Monitoring Infrastructure (PMI), 687performance monitoring with Tivoli Performance Viewer,
687–688, 688persistence, session. See session persistencepersistent service
enabling, 350, 350Service Integration Bus (SIBus), 348–351, 348, 349transaction log directories for, 349transaction service configuration for, 349, 350
ping, 31–32PlantsByWebSphere application for application server,
53, 100, 100Platform Messaging, 23platform support for WAS v 6, 2plug-in for HTTP Server, 10–12, 10, 11, 12, 137–182
backup and recovery for, 175directory structure of, 147distributed local, 137
144, 147disk space requirements for, 141–142Embedded HTTP Server (EHS) and, 139horizontal clustering and, highly
available/workload-management(HA/WLM),18–19, 19
host names and ports entered directly to, 139installation of, step-by-step, 139–147, 140Java Server Pages (JSP) and, 139Launchpad installation wizard for, 142–147, 143–146licensing agreement for, 142log and configure files for, 148–149, 148, 149multiple Web servers with multiple application
server profiles and, 173–175, 171–175naming the Web server for, 145, 145plugin-cfg.xml file in, 138port configuration for, 144–145, 145
Note: Boldface numbers indicate illustrations; t indicates a table. 787
Index
plug-in for HTTP Server, local, continuedprofile configuration and, multiprofile
environments, 146request-processing behavior of HTTP Server with,
138–139, 138symbolic references in, directory locations for, 139,
140ttemporary (TMP) environment variable setting for,
141third-party Web servers and, 142Uniform Resource Identifier (URI) entries in, 139verifying installation of, 147–151, 148–151vertical clustering and, 17, 17Web server for, 143, 143, 144–145, 145, 146, 146
multiple Web servers with multiple application serverprofiles and, 170–175, 171–175
multiprofile local or remote, 11–12, 12Network Deployment package and, 16product update installation and, 617–620, 618, 619propagation of, to HTTP Server, 22, 22remote, 11, 11, 137
admin console configuration for, 159–160, 160admin server and, 154, 157, 160, 160architecture of, 151–153, 152configuration files for, 155configurewebserver-definition-name.bat file for,
151, 155copying configuration batch files for, 154default location for, 156, 156demilitarized zone (DMZ) use and, 157directory structure for, 155federated nodes and, 156fix packs for, installing, 157generating and propagating files for, 161–163, 161,
162, 163host name or DNS for, 156HTTP Server won’t start after installation of,
167–168, 168installation of, 154–163, 154logging for problem determination in, 163–170,
164, 164–166t, 167multiple Web servers with multiple application
server profiles and, 174–175, 171–175naming of, 155, 155node identification for, 156, 156plugin-cfg.xml file for, 151request-processing behavior of HTTP Server with,
152–153, 152, 153snoop servlet won’t work with, 168–169, 169, 170troubleshooting problems with, 161–170, 162, 163user ID and password required for, 154, 157, 160, 160verifying installation of, 157vertical clustering and, 17–18, 18
Web server definition for, configuring WebSpherefor, 157–158, 158, 159
Secure Sockets Layer (SSL) and, configuration forapplication server and, 584–592
silent installation of, 178–182configuration files for, 180, 180default location in, 180–181, 181directory structure for, 179license agreement for, 179mapping existing applications to Web server and,
181, 181naming the Web server for, 180port configuration for, 180response files and temporary directory for,
178–179verifying, 182Web server selection for, 179, 179
unconfiguring Web server definition from applicationserver and, 177–178, 178
application server and, 606, 607–608backing up your configuration before, 612, 612concurrent updates and, 607Deployment Manager and, 606–607environments amenable to, 606fix packs and, 606fixes (interim fixes, efixes) and, 606HTTP Server (IBM) and, 615–617, 616, 617Java processes stopped for, 611list of updates for, 609–611, 610, 611Load Balancer, 620–625, 621–625plug-in for HTTP Server and, 617–620, 618, 619profiles and, 607readme documents for, 611refresh packs and, 606releases and, 606restarting and testing following, 614–615step by step for, 607–608symbolic file system reference for, 608, 608tterminology used when referring to, 605, 605tuninstalling interim fixes and, 613unzipping archive files for, 613update installer tool for, 606update program run for, 613–614, 613, 614version determination for, 608–609versionInfo utility for, 606, 608–609, 609WebSphere and, 606–608
rule-based load balancingadding HTTP server to cluster for, 392–393, 392, 393adding IP address rule for restricted users in, 393–394,
394adding IP address rule for unrestricted users in,
394–395, 395Always True rule in, 395–396, 396Load Balancer and, 390–397review and test, 396–397, 397rule options selection for, 391–392, 391stickymask (affinity address mask) for, 390
runtime containers, packaging in J2EE and, 700
Ssamples directory, application server and, 65sandbox.com test certificate, 570, 570scopes, in configuration of resources and variables, 23scripts, Load Balancer high availability and, 424–428,
425, 426, 427search filter, IBM Tivoli Directory Server (ITDS) and, 558Secure Sockets Layer (SSL), 50, 559–603
acclerators for, 561certificate authority certificates, 559, 575–583
certificate signing request (CSR) for, 576–579,577, 578
copying key file artifacts for, 583copying text of, Begin and End Certificate markers
for, 575iKeyman utility for, 575labels in, 581–582opening key file for, 575–576, 576receiving VeriSign signed certificate for, 580–581,
581testing configuration for, 583VeriSign certificate signing request (CSR) for,
576–579, 577, 578VeriSign free trial certificate for, 578, 578VeriSign Test CA Root certificate for, 579–580,
580, 582–583, 583configuration repertoires for, 592, 593, 594, 595connection establishment for, 559Cryptographic Message Syntax (CMS) and, 561encryption in, 559handshake (client/server) in, 560, 560HTTP Server (IBM), 561–570
public key infrastructure (PKI) for, 561, 563–567,563–566
sandbox.com test certificate for, 570, 570security alert concerning expired/mismatched
certificates and, 568–569, 569
symbolic file system references for, 562, 562ttesting connection for, 568–570, 569virtual host creation for, 562, 567–568
HTTP Server plug-in–application serverapplication server setup for, 588–592, 589configuration between, 584–592configuration repertoires for, 592, 593, 594, 595copying key and trust files to other nodes for, 591creating self-signed certificate for, 586–587, 587, 589deleting signer certificates for, 586, 587, 589directory creation for key and trust files in, 588extracting certificate from Web container key for, 590extracting certificate from plug-in key for, 588importing plug-in certificate for, 590–591, 590, 591inbound channel selection for, 594, 595key file creation for, 588–589, 589managing SSL artifacts in, 593, 593password setup for, 586, 586plug-in setup for, 584–588, 585selecting server Web container for, 594, 594testing connection for, 596troubleshooting connection for, 597–598, 597, 598trust file creation for, 590validity period for, 587, 589virtual host and aliases for, 595–596, 595Web container, configuring between, 592–598
IBM Tivoli Directory Server (ITDS) and, 515, 546–551iKeyman utility in, 561, 575importing public certificate from a browser for
574, 575importing public certificate into a browser for,
570–583inbound channel selection for, 594, 595Java Key Store (JKS) key files and, 561lightweight directory access protocol (LDAP) and,
489, 491, 598–603logging in, 597–598, 597, 598managing SSL artifacts in, 593, 593passwords and, 586, 586performance cost limitations of, 561port configuration and, 30–31, 30tpublic key infrastructure (PKI) for, 561, 563–567,
563–566sandbox.com test certificate for, 570, 570security alert concerning expired/mismatched
certificates and, 568–569, 569SSL configuration repertoires and, 498–499, 498, 499testing connection for, 568–570, 569, 596troubleshooting connection for, 597–598, 597, 598validity period for, 587, 589
790
Index
virtual host and aliases for, 595–596, 595, 562,567–568
Web container certificate added to plug-in key file for,591–592, 592
WebSphere and ITDS, 598–603ITDS public key certificate added to WebSphere
trust file, 599–602, 600, 601lightweight third party authentication (LTPA) and,
602–603WebSphere configured for, with LDAP registry
communications, 602–603security, 49, 469–514
active protocol list options in, 477, 478, 494admin roles in, 513–514, 514administrator identification for, 496–497, 497, 480,
481, 487–488, 488application server and, 8authentication in, 469, 493authorization in, 469cache timeout values in, 477, 478, 484, 486, 494case sensitivity for authentication in, 491cells and, 483–487, 495–496, 496client key file creation in, 508, 508common secure interoperability (CSI) option in, 477, 478console group creation for, 487–488, 488, 496–497, 497copying key and trust files to nodes, 506, 511creating registry files for, 470–472custom registries in, 469, 470–482
active protocol list options in, 477, 478administrator identification for, 480, 481cache timeout values in, 477, 478common secure interoperability (CSI) option in,
477, 478creating registry files for, 470–472enabling, 476–477error messages on configuration of, 477groups registry in, 474, 475, 481–482, 481Java 2 security option in, 477, 478lightweight third party authentication (LTPA) in,
472–482, 477, 478multiple machines and, 471object request brokers (ORBs) in, 477, 478passwords in, 475–476, 476, 479, 480public key infrastructure (PKI) certificates in, 479remote method invocation/Internet InterORB
protocol (RMI/IIOP) and, 477, 478single signon (SSO) property in, 476, 476user name in, 479, 480user registry configuration in, 472–482, 473, 474
digital certificate store files, 498–513adding WebSphere server certificate to trust file in,
505, 505, 506, 510–512, 512
copying key and trust files to all nodes, 506, 511,512
deleting signer certificates in, 502dummy key and trust files shipped with WebSphere
and, 470, 498, 499–507iKeyman utility in, 499–507key store files in, 498new client key file creation in, 508, 508new key file creation in, 500, 500, 501new trust file creation in, 504–505passwords in, 513replacing dummy files in, 507–513replacing, 498–513, 498self-signed certificate creation in, 502–504, 503,
504, 508–510, 509SSL configuration repertoires and, 498–499, 498, 499trust file attribute setting for, 506, 507trust file creation in, 510trust store files in, 498updating client properties files for, 512validity period setting in, 509
digital certificates in, 469distinguished name (DN) in, 490–491domain name in, 484–485dummy key and trust files shipped with WebSphere
495–496, 496expired/mismatched certificates alert, 568–569, 569global security option in, 485, 486, 494, 494groups registry in, 474, 475, 481–482, 481host names in, 490HTTP Server (IBM) and, 116, 117iKeyman utility in, 499–507Java 2 Enterprise Edition (J2EE) in, 469Java 2 security option in, 477, 478, 485–486Java Authorization Contract for Containers (JACC)
and, 24key file creation in, 500, 500, 501key store files in, 498lightweight directory access protocol (LDAP) registry
and, 469, 488–497active protocol list options, 494administrator identification for, 496–497, 497advanced settings (Additional Properties) for,
491–492, 493authentication in, 493cache timeout values, 494case sensitivity for authentication in, 491console group creation for, 496–497, 497distinguished name (DN) for, 490–491error messages on configuration of, 495–496, 496global security settings for, 494, 494
Note: Boldface numbers indicate illustrations; t indicates a table. 791
Index
security, LDAP, continuedgroup filter options in, 491host names in, 490IBM Tivoli Directory Server (ITDS) in, 489Java 2 security in, 494lightweight third party authentication (LTPA), 493,
494passwords in, 490port configuration for, 490reuse connection option in, 491search timeout setting in, 491Secure Sockets Layer (SSL) and, 489, 491server identity for, 489single signon (SSO) property, 493synchronization of nodes issues in, 495–496, 496user registry in, 490–491, 490
lightweight third party authentication (LTPA), 472,477, 478, 484, 485, 486, 493, 494
MBeans and, 763multiple machines and, 471object request brokers (ORBs) in, 477, 478operating system registries in, 469, 482–488, 483
cache timeout values, 484, 486console group creation for, 487–488, 488domain name for, 484–485error messages on configuration of, 486global security option in, 485, 486Java 2 security in, 485–486lightweight third party authentication (LTPA), 484,
485, 486single signon (SSO) property, 484, 485user and group configuration for, 482–483WebSphere security configuration for, 483
passwords in, 469, 475–476, 476, 479, 480, 490, 513port configuration for, 490public key infrastructure (PKI) certificates in, 479registry for, 469remote method invocation/Internet InterORB protocol
(RMI/IIOP) and, 477, 478reuse connection option in, 491search timeout setting in, 491Secure Sockets Layer (SSL) and, 50, 489, 491,
498–499, 498, 598–599self-signed certificate creation in, 502–504, 503, 504,
508–510, 509single signon (SSO) property in, 476, 476, 484, 485synchronization of nodes issues in, 495–496, 496Tivoli Access Manager and, 24trust file creation in, 504–505, 510trust store files in, 498user IDs/names and, 469, 479, 480user registry in, 472–482, 473, 474, 490–491, 490WebSphere server certificate and trust file in, 505,
505, 506, 510–512, 512
self-signed certificateIBM Tivoli Directory Server (ITDS) and, 548–550,
637–654adding server or cluster as member of, 644–645, 645adding, 644, 644application server and, 8, 72–73, 73Endpoint Listener (HTTP) application for, 647–648,
cluster specified for, 340, 341data store for, 339, 339SIBus creation in, 340–341, 340, 341verifying messaging engine configuration and
failover in, 341–342, 342workload sharing (optional) configuration for,
342–344, 343, 344Network Deployment package application server
profile and, 216outbound Web services and, 637persistent service configuration in, 348–351, 348, 349
enabling, 350, 350transaction log directories for, 349transaction service configuration for, 349, 350verifying, 351, 351
resource adapter installation for, 646Service Data Objects (SDO) repository for, 645, 646singleton services and, 344testing, 651–652, 652updating client to use of, 651, 651Web Service Definition Language (WSDL) definitions
in, 645Web services enabled through, 637Web Services Explorer and, invoking through, 652, 653Web services without use of, 639–642WebSphere Bank and, 718, 723, 723WSDL2JAVA command and, 652
792
Index
Service Integration Bus Web Services Enablement(SIBWS), 216
client-only mode in, 311client–server mode in, 311cluster members and, 309configuring, 311–314, 311, 312hitcount to verify session failover in, 315–320,
316–320HTTP session failover in, 314–320log files for, 314mode for, 311, 313, 313replication domain in, 309, 311–312, 312selecting, 313server-only mode in, 311starting the cluster after, 313–314, 314tracing for, 320tracing for, 314, 314, 320
session failover in, 314–320
showlog tool, 680–681, 681–682silent installation. See also application servers
application server and, 104–110, 107verifying installation of, 133
simple mail transfer protocol (SMTP), 701Simple Object Access Protocol (SOAP)
templates vs. profiles, 8–9, 9, 14–15, 15thread dumping in, 682–683TIBCO, 8
Note: Boldface numbers indicate illustrations; t indicates a table. 793
Index
time, synchronizing date and time (clock), 31timeout setting, dynamic caching and, 441, 442Tivoli Access Manager (TAM), 5, 24Tivoli Directory Server. See IBM Tivoli Directory ServerTivoli Performance Viewer (TPV), 21, 21, 687–688, 688tool provider, packaging in J2EE and, 703trace strings, 657–659, 659ttracing, 655–668
advanced format of, 666application server trace service and, management of,
664–665basic format of, 666configuring, 659–660, 660diagnostic settings for, 666–668Dump Files and, 668Enable Log in, 667enabling at server startup, 659–662, 660, 661enabling on running server, 662–663, 662fields in output of, 665–666HTTP Server (IBM) and, 129–130, 130IBM Tivoli Directory Server (ITDS) and, 558interpreting output from, 665–666Log Analyzer format of, 666logging and, 656–657memory-to-memory replication and, 314, 320Saving changes to configuration and, 668strings for, trace and logging, 657–659, 659tTrace Output format in, 668Trace Output properties in, 667
transaction logs, High Availability Manager (HAManager) and, 23
transport chain configuration, dynamic caching and, 440, 441trust store files, digital certificates and, 498TSM.java source code, J2EE Management API and, 744,
744–748
UUniform Resource Identifier (URI), local plug-in for
HTTP Server and, 139uninst directory
application server and, 65HTTP Server (IBM) and, 123
unit of work (UOW) entries in, 677–678Unix, 2
administrative privileges for setup of, 32application server and, xclock or xeyes command for,
56, 56unsupported architectures in, no spraying, 12, 12update installer tool, 606update program run for product update installation,
613–614, 613, 614updates. See product update installationupgrades, application server and, 94–96, 95, 96
user IDs, 469local, unmanaged node of distributed plug-in and, 267remote, unmanaged node of distributed plug-in and, 277
user name, 479, 480user privileges, in highly available/workload-managed
Vvalidity period setting in, for certificates, 509verbose class loader, 693, 693verbose garbage collection (GC) in, 690–692, 691, 692verifying installations, 133
admin console for, 68–69, 68, 69application server and, 63, 66browser for, using default application for, 69–72, 120federating nodes
application server and, 7packaging in J2EE and, 701
Web serversmultiple, with multiple application server profiles,
170–175, 171–175unconfiguring definition from application server in,
177–178, 178Web services, 1, 639–642
implementation details of, Stock Quote sample, 642, 642inbound services and, 637, 649–650, 650installation of, 639–640, 640, 641outbound, 637Samples Gallery of, 639–640, 640SIBus and, 637–654. See also Service Integration Bus
(SIBus)updating client to SIBus use, 651, 651verifying operation of, 641–642, 642Web Services Explorer and, invoking through, 652, 653
Web services engine, application server and, 7WebSphere Application Server v 6
admin console for, 20, 20AdminTask global object in, 23application properties displayed in, navigating, 20, 20application server in, standalone, 6–9, 6application-update capabilities in, 23Base package in, 2–5, 4, 11–12, 11, 12. See also Base
packageconfiguration archiving in, 23Data Replication Service (DRS) and, 24enterprise archive (EAR) file support in, 23Enterprise JavaBeans (EJBs) and, 24Express package in, 2, 3–5, 4, 11–12, 11, 12. See also
Express packageExtended Deployment (XD) page in, 3High Availability Manager (HA Manager) and, 23HTTP Server (IBM) in, 9–10, 10, 22, 22instances, multiple, and product binary files, 21Java Authorization Contract for Containers (JACC)
and, 24
Java Message Service and, 23messaging engine in, 23Network Deployment package in, 3, 3, 5–6, 5, 13–14,
13. See also Network Deployment packagenew features in, 20–24packaging and architecture of, 1–24platform support for, 2plug-ins and, installation of, 22, 22product update installation and, 606–608Secure Sockets Layer (SSL) and, ITDS and, 598–603scopes, in configuration of resources and variables, 23Service Data Objects (SDOs) in, 24standards support for, 1–2, 2system application locations in, 21Tivoli Performance Viewer (TPV) in, 21, 21unsupported architectures in, 12, 12WebSphere Rapid Deployment (WRD) and, 23, 50
WebSphere Bank, 710–711, 717–730alias name for, 717, 718–719, 719Application Server Toolkit (AST) and, 717connection factory for, 718, 722, 722data source for, 718, 720, 721Enterprise Application Archive (EAR) and, 710–711, 717Java Message Service (JMS) connection factory for,
718, 724, 725JDBC provider for, 717, 719, 720manual installation of, 717–730resources required for, 717–718service integration bus (SIBus) for, 718, 723, 723SIB JMS activation specification for, 718, 729, 729SIB JMS queue for, 718, 726, 726SIB queue for, 718, 727, 728SIBus member for, 718, 723–724, 724verifying existence of J2C resource adapter for, 718verifying SIB service is enabled for, 730WebSphere Rapid Deployment (WRD) and,
Windows, 2loopback adapter configuration on, 364–366, 365
Windows services, 627–636application server and, 62–63, 63, 106application server process as, 630–632, 631, 632, 636argument values and, securing in registry by encoding,
633–634, 634benefits of using, 627Caching Proxy server and, 464Deployment Manager as, 628–630, 630, 636, 636federating nodes and, 235, 235, 239–240HTTP Server (IBM) and, 117–118, 118, 131–132, 132,