was2 contents 1 - mc press onlineeditorial.mcpressonline.com/web/mcpdf.nsf/wdocs/... · first steps...

26
Index A acclerators for SSL, 561 ace.bat file, 759760 active coordinator, high availability manager and, 345–346, 345, 346 active protocol list options, security and, 477, 478 adapter beans, dynamic caching and, 456 admin console, 20, 20 application server and, 53, 91–92, 92 database session persistence and, testing connection using, 329–330, 330 HTTP Server management in, 22, 22 logging problems and, access to, 80–81, 81, 82 Network Deployment package deployment manager and, connecting to, 202 Network Deployment package product binaries and, 159–160, 160 port configuration and, 59–60, 197–198 upgrades and, 94–96, 95, 96 verifying installation through, 68–69, 68, 69 admin roles in security, 513–514, 514 admin server application server, 6–7 Network Deployment package product binaries and, 154, 157, 160, 160 administrative privileges for setup, 32 administrator identification for security, 480, 481, 487–488, 488, 496–497, 497 AdminTask global object, 23 advisors function of Dispatcher, 354 AIX administrative privileges for setup of, 32 loopback adapter configuration on, 364–366, 365 Apache Monitor tool, HTTP Server (IBM) and, 124–125, 125 Apache Web Server, HTTP Server and, 9 applet containers, packaging in J2EE and, 701 application assembler, packaging in J2EE and, 703 application client containers, packaging in J2EE and, 701 application client JAR files, packaging in J2EE and, 702 application component provider, packaging in J2EE and, 703 application scope, 23 application servers, 6–9, 6, 25, 51–87, 89–110 adding new feature to existing installation of, 96–99, 97, 108–110 admin console and, 53, 84, 91–92, 92 admin server in, 6–7 application-update capabilities in, 23 architecture and components of, 52–53, 53 backup and recovery in, 101–102, 101, 102, 103 Base package and, 52, 53 bin directory in, 64, 93–94 creating, on custom profile node after federation, 245–248, 246, 247, 248 custom installation option for, 58, 59 default applications (snoop, hello, hitcount) in, 69–72, 83 default creation of, 8 DefaultApplication application for, 53 directory setup for, 52, 52t, 54, 55, 58, 58, 63, 64–65, 64 disk space requirements for, 56 domain name server (DNS) and, host names, 62 Note: Boldface numbers indicate illustrations; t indicates a table. 771

Upload: others

Post on 06-Aug-2020

4 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: was2 contents 1 - MC Press Onlineeditorial.mcpressonline.com/web/mcpdf.nsf/wdocs/... · First Steps tool to verify installation of, 63, 67–68, 67 fixes for, applying, 63–64 flow

Index

Aacclerators for SSL, 561ace.bat file, 759–760active coordinator, high availability manager and,

345–346, 345, 346active protocol list options, security and, 477, 478adapter beans, dynamic caching and, 456admin console, 20, 20

application server and, 53, 91–92, 92database session persistence and, testing connection

using, 329–330, 330HTTP Server management in, 22, 22logging problems and, access to, 80–81, 81, 82Network Deployment package deployment manager

and, connecting to, 202Network Deployment package product binaries and,

159–160, 160port configuration and, 59–60, 197–198upgrades and, 94–96, 95, 96verifying installation through, 68–69, 68, 69

admin roles in security, 513–514, 514admin server

application server, 6–7Network Deployment package product binaries and,

154, 157, 160, 160administrative privileges for setup, 32administrator identification for security, 480, 481,

487–488, 488, 496–497, 497AdminTask global object, 23advisors function of Dispatcher, 354

AIXadministrative privileges for setup of, 32loopback adapter configuration on, 364–366, 365

Apache Monitor tool, HTTP Server (IBM) and, 124–125, 125Apache Web Server, HTTP Server and, 9applet containers, packaging in J2EE and, 701application assembler, packaging in J2EE and, 703application client containers, packaging in J2EE and, 701application client JAR files, packaging in J2EE and, 702application component provider, packaging in J2EE and, 703application scope, 23application servers, 6–9, 6, 25, 51–87, 89–110

adding new feature to existing installation of, 96–99,97, 108–110

admin console and, 53, 84, 91–92, 92admin server in, 6–7application-update capabilities in, 23architecture and components of, 52–53, 53backup and recovery in, 101–102, 101, 102, 103Base package and, 52, 53bin directory in, 64, 93–94creating, on custom profile node after federation,

245–248, 246, 247, 248custom installation option for, 58, 59default applications (snoop, hello, hitcount) in, 69–72, 83default creation of, 8DefaultApplication application for, 53directory setup for, 52, 52t, 54, 55, 58, 58, 63, 64–65, 64disk space requirements for, 56domain name server (DNS) and, host names, 62

Note: Boldface numbers indicate illustrations; t indicates a table. 771

Page 2: was2 contents 1 - MC Press Onlineeditorial.mcpressonline.com/web/mcpdf.nsf/wdocs/... · First Steps tool to verify installation of, 63, 67–68, 67 fixes for, applying, 63–64 flow

application servers, continueddynamic caching and, 443–447, 444–447

configuration for, 438–447external caching, 449–451, 450

EJB container in, 7Embedded HTTP Server (EHS) in, 7essential steps in, 52–53Express package and, 52, 53–64federating nodes and, 35–37, 35, 36, 37, 242–245, 243,

245cell management of, 249–251, 250

file transfer applications in, 53First Steps tool to verify installation of, 63, 67–68, 67fixes for, applying, 63–64flow chart for installation of, 53–54, 54horizontal cluster creation for, 41–42, 41horizontal clustering with highly

available/workload-management (HA/WLM)) for,18–19, 19

host names for, 61–62, 61installation directory for, 52installation failure and, 82–83installation. See silent installation of, belowIP addresses and, host names, 62J2C service in, 7–8Java Virtual Machine (JVM) in, 6JNDI naming server and, 8Launchpad program for, 56, 57–58license agreement for, 57logging in, 56, 57–58, 63, 78–87

admin console access to, 80–81, 81, 82admin console problems and, 84default application failure and, 83installation failure and, 82–83InvocationTargetExeception errors and, 84–86, 85log files for, categories of, 78, 79–80tlogging architecture for, 78, 78port configuration errors and, 86, 87, 87problem scenarios covered by, 82–87

logs directory in, 64managing, 89–94messaging engine configuration for, 8, 72–73, 73multiple Web servers with multiple application server

profiles and, 170–175, 171–175multiple, Deployment Manager admin console to

manage, 16–17, 17Network Deployment package and, 51

profile creation for, 183, 207–216, 208network interface cards (NICs) and, host names, 62node names for, 61–62, 61, 84–86, 85PlantsByWebSphere application for, 53, 100, 100port configuration for, 59–61, 60, 86, 87, 87, 105product binaries and configuration repository in, 53

profiles for, 8–9, 9, 33–34, 33command prompt for, 74creation of, 52, 53, 65, 65, 73–77, 74default vs. subsequent, 75–76deletion of, 93directory for, 65, 76, 77, 77naming the profile in, 75, 75node and host names for, 76port configuration for, 76, 76Profile Creation Wizard for, 74–76starting a particular profile in, 90–91, 91verifying creation of, 77Windows services for, choosing, 77

profileTemplates directory in, 65registering and downloading software for, 54Sample applications for, 65

choosing to install, 59, 59deploying, 98–99, 98, 99

Secure Sockets Layer (SSL) and, configuration forHTTP server and, 584–592

security server in, 8Service Integration Bus (SIBus) and, 8, 72–73, 73silent installation of, 104–110, 107

Cell option for, 106directory setup for, 104installation directory for, 105, 108Javadoc installation in, 105port configuration in, 105response files for, 104–105sample application installation in, 105upgrading or adding features through, 108–110verifying installation in, 108, 108Windows service option for, 106

starting enterprise applications on, 92, 92starting, 89–90, 90stopping enterprise applications on, 92stopping, 89–90system prerequisites for, 57–58template for, 8–9, 9temporary (TMP) directory setup for, 55, 55unconfiguring Web server definition from, 177–178, 178uninst directory in, 65uninstalling enterprise applications on, 92–93uninstalling, 102–103update installer tool for, 606, 607–608upgrading, 94–96, 95, 96, 108–110verifying installation of, 63, 66, 108, 108

admin console for, 68–69, 68, 69browser for, using default application for, 69–72, 120First Steps tool for, 63, 67–68, 67hello servlet for, 70, 70hitcount servlet for, 70–72, 71log files for, 66, 66, 67

772

Index

Page 3: was2 contents 1 - MC Press Onlineeditorial.mcpressonline.com/web/mcpdf.nsf/wdocs/... · First Steps tool to verify installation of, 63, 67–68, 67 fixes for, applying, 63–64 flow

snoop servlet for, 69–70, 70Windows services for, 72

verifying status of, 91Web container in, 7Web services engine in, 7WebSphere Rapid Deployment (WRD) and, 23, 50

welcome panel for, 57, 57Windows service and, 63–63, 63, 106, 630–632, 631,

632xclock or xeyes command for, in Unix systems, 56, 56

Application Server Toolkit (AST), 4, 50, 717WebSphere Rapid Deployment (WRD) and, 731

application server trace service, management of, 664–665application-update capabilities, 23architecture, 1–24assembler, application, packaging in J2EE and, 703authentication, 469

lightweight directory access protocol (LDAP) and, 493authorization, 469AutoAppInstall mode, WebSphere Rapid Deployment

(WRD) and, 732–733

Bbackup and recovery

application server and, 101–102, 101, 102, 103

BackupConfig archive and, 684–685, 685–686cells of federated application server nodes and, 251HTTP Server (IBM) and, 125–126Network Deployment package application server

profile and, 216Network Deployment package deployment manager

and, 204–205plug-in for HTTP Server and, 175

product update installation and, 612, 612RestoreConfig archive and, 686, 686–687

BackupConfig archive, 684–685, 685–686backupConfig utility, 101–102, 102Bank. See WebSphere Bank

Base package for WAS v. 6, 2–5, 4, 11–12, 11, 12application server and, 52, 53–65. See also application

serversHTTP Server (IBM), 9–10profile creation in, 8

unsupported architectures in, no spraying, 12, 12bin directory

application server and, 64, 93–94HTTP Server (IBM) and, 122

binary files, multiple instance sharing of, 21bootstrap port configuration number, 61, 198

Ccache replication, 462–463, 463cache timeout values, security and, 477, 478, 484, 486, 494Caching Proxy, 435. See also dynamic cachingCascading Style Sheets (CSS), 9cells, 13–14, 13

backup and recovery in, 251Deployment Manager and, 13–14Deployment Manager profile for, 32–33, 32federating nodes and, 35–37, 35, 36, 37

managing cells of application servers after,249–251, 250

Network Deployment package deployment managerand, naming, 196–197, 197

nodes in, 13–14, 13security and, 483–487

synchronization issues of nodes in, 495–496, 496certificate authority certificates, 575–583

Secure Sockets Layer (SSL) and, 559class loader, 693, 693class loading schemes, Java 2 Enterprise Edition (J2EE)

and, 705–707client applications, tracing and, 663–664client gateway address, content-based load balancing and,

400–401, 401Cloudscape database, 5, 717cluster IP addresses, Load Balancer and, 354–355clustering (horizontal and vertical), 14, 25, 285–308

configuration of resources and variables in, 23content-based load balancing and, 401–402, 402custom profile for, 34–35, 34database session persistence and, 321, 322–323, 323Deployment Manager profile for, 32–33, 32distributed local plug-in, 17, 17distributed remote plug-in, 38–41, 39, 40dynamic caching and, cluster-aware dynacache object

caching (cache replication) in, 462–463, 463federating nodes for, 35–37, 35, 36, 37highly available/workload-managed (HA/WLM)

clustering and, 26horizontal, 18–19, 19. 300–308, 300, 301

horizontal clustering, 18–19, 19architecture of, 301, 301creation of, 41–42, 41custom profile for, 302Deployment Manager for creating, 303–304, 303, 304directory structure of, 307distributed plug-in installation for, 303federating node for, 302, 303HTTP Server (IBM) installation for, 303logging in, 308, 308naming, 304, 304prerequisite tasks before creation of, 302–303

Note: Boldface numbers indicate illustrations; t indicates a table. 773

Index

Page 4: was2 contents 1 - MC Press Onlineeditorial.mcpressonline.com/web/mcpdf.nsf/wdocs/... · First Steps tool to verify installation of, 63, 67–68, 67 fixes for, applying, 63–64 flow

clustering, horizontal, continuedprofile configuration for, 302reviewing information about, 305, 305second and additional, 305, 305verifying configuration of, 305–307, 306, 307weight value (numbers) for, 304, 304with highly available/workload-management

(HA/WLM)), 18–19, 19workload management configuration for, 305–307,

306Load Balancer and, 377–378, 377

IP addresses for, 354–355high availability and, 416–417, 416, 417, 418, 418,

431–432, 432memory-to-memory replication and, 309request processing in, 285–287, 286Service Integration Bus (SIBus) and, adding server or

cluster as member of, 644–645, 645vertical, 17–18, 17, 18

applications selected for, 291, 291create and configure, 287–300Deployment Manager setup for, 290–294, 291directory structure for, 299, 299federating node for, 289, 290host alias configuration for, 296–298, 297, 298HTTP Server (IBM) installation for, 290logging in, 299, 300naming, 292–293, 293new cluster creation in, 291, 292plug-in installation for, 290port assignment for, 289, 298, 298prerequisite tasks for, 288–290, 288profile creation for, 288–289, 288, 289reviewing information about, 294, 294second and additional cluster creation in, 293, 293verifying, 294–296, 294, 295, 296virtual host configuration for, 296–298, 296weight values (numbers) for, 292, 293with distributed remote plug-in, 17–18, 18workload management in, 294–296, 294, 295, 296

Collector Tool, 668–676analyzing output of, 670–671full mode output, 674IBM Support use of, 668–669installation directory run of, 673JAR files used by, 668–669, 674–675running, 669–670sample output from 673–676summary mode for, 672–673, 675–676text file created from, 676tips and suggestions for better use of, 671–672Unix systems and, 672Windows systems and, 672

color coding in logs, 679common secure interoperability (CSI) option, 477, 478conf directory, HTTP Server (IBM) and, 122configuration, 25–50

application scope in, 23archiving of, 23BackupConfig archive and, 684–685, 685–686cluster scope, 23highly available/workload-managed (HA/WLM)

clustered environment. See highlyavailable/workload management

RestoreConfig archive and, 686, 686–687scopes in, 23

configuration repertoires, Secure Sockets Layer (SSL)and, 592, 593, 594, 595

Configuration Tool, IBM Tivoli Directory Server (ITDS)and, 523, 523, 524, 556–557

connection factory, WebSphere Bank and, 718, 722, 722console, 273–274, 273container branches, IBM Tivoli Directory Server (ITDS)

and, 532–535, 533, 534, 535content-based load balancing and CBR, 354, 397–412, 399

adding HTTP servers for, 404–406, 405, 406client gateway address for, 400–401, 401cluster address for, 401–402, 402configuring, 409–412, 410, 411Dispatcher configuration for, 400–412, 407, 407forwarding method selection in, 403–404, 403high availability and, 413interface address for, 402, 402IP address assignment for, 400Load Balancer high availability and, 413Network Address Translation/Network Address Port

Translation (NAT/NAPT) processing in, 397–412port assignment for, 403–404, 403return address, in, 399, 404, 404

content-based load balancing and, 399starting manager and advisor functions in, 406–407,

406, 407verifying forwarding from command prompt in, 408, 408verifying request spraying in, 409

Content-Based Routing (CBR) request processing. Seecontent-based load balancing

core groups, high availability manager and, 345–346, 345,346

Cryptographic Message Syntax (CMS), 561custom Java administrative client creation, 749–761custom profiles, 15, 34–35, 34, 216–222, 217

creating application server on, after federation,245–248, 246, 247, 248

directory structure after creation of, 220, 220, 221federating node within, 244–245, 245federating to Deployment Manager of, 217–218, 218

774

Index

Page 5: was2 contents 1 - MC Press Onlineeditorial.mcpressonline.com/web/mcpdf.nsf/wdocs/... · First Steps tool to verify installation of, 63, 67–68, 67 fixes for, applying, 63–64 flow

horizontal clustering and, 302logging problems and, 221, 221, 222tnaming, 218Network Deployment package and, 183, 216–222, 217port configuration for, 219product binaries installation for, 217Profile Creation wizard for, 217verifying installation of, 219, 220

data, Service Data Objects (SDOs), 24Data Replication Service (DRS), 24data source creation, for WebSphere Bank, 718, 720, 721data store, messaging engine and, 339, 339database drivers, database session persistence and,

324–326, 324, 325database session persistence, 320–334, 321. See also

session persistencecluster preparation for, 321, 323, 323configuring, 321, 322database creation for, 322DB2 installation and database creation in, 334–336,

335, 336hitcount to verify, 321Java 2 Connector (J2C) authentication in, 321,

325–326, 326Java Database Connectivity (JDBC) provider in, 321,

326–329, 327, 328, 329Java Naming and Directory Interface (JNDI) name for,

321, 330–332, 331nodes and clusters accessible to, 322–323session failover verification in, using hitcount,

332–334, 333, 334testing database connection from admin console,

329–330, 330user name and passwords for, 322WebSphere variable pointing to Type 4 drivers for,

324–326, 324, 325database support

Network Deployment package and, 16session persistence for, 45, 45, 46

dates, synchronizing date and time (clock), 31DB2 Universal Database (DB2 UDB), 4, 5

horizontal clustering with highlyavailable/workload-management (HA/WLM)) for,18–19, 19

installation and database creation in, 334–336, 335, 336Network Deployment package and, 16

default profiles, 75–76DefaultApplication application, 53dependency packages, packaging in J2EE and, 708–710deployer, packaging in J2EE and, 703–704Deployment Manager, 3, 5

admin console for, 33, 33, 204application server management using, 16–17, 17backup and recovery for, 204–205

connecting to, through admin console, 202creating profile for, 194–207, 194custom profile federated to, 217–218, 218cell management in, 13–14directory structure for, 195–196, 196distributed remote plug-in installation for, 38–41, 39, 40federating nodes for, 14, 35–37, 35, 36, 37

add nodes in, 234, 234from admin console of, 232–242directory structure after federation and, 240–241,

240, 241host name and SOAP address port assignment to

nodes in, 234–235, 235logging process of, 236, 236, 237removing admin capability in, automatic, 240, 240Service Integration Bus (SIBus) and messaging

engines inclusion in, 235verifying, using admin console, 237–239, 237, 238,

239verifying, using log files, 236–237, 236, 237Windows service selection for, 235, 235, 239–240

horizontal clustering with highlyavailable/workload-management (HA/WLM)) for,18–19, 19

HTTP server remote management using, 41, 41local, managed node of distributed plug-in, 261–262log file for, 199, 199logging with, 205–207, 206, 206–207tmanaging, 203–205naming, 195, 195Network Deployment package, 183, 194–207network interface cards (NICs) and, 196node agents and, 14node, host, and cell names for, 196–197, 197port configuration for, 197–198, 197product update installation and, 606–607profile for, 15, 32–33, 32

directory structure after, 199–200, 200starting, 203, 204status checking of, 204stopping, 203verifying creation of, using First Steps console for,

201, 201, 202verifying installation of, 199vertical clustering and, 290–294, 291WebSphere configuration using, local managed nodes, 263Windows service and, 198, 198, 199, 202–203, 203,

628–630, 630, 636, 636deployment modules, packaging in J2EE and, 700diagnostic settings, tracing and, 666–668digital certificates, 469

certificate authority certificates for, 575–583iKeyman utility. See iKeyman utility, 575

Note: Boldface numbers indicate illustrations; t indicates a table. 775

Index

Page 6: was2 contents 1 - MC Press Onlineeditorial.mcpressonline.com/web/mcpdf.nsf/wdocs/... · First Steps tool to verify installation of, 63, 67–68, 67 fixes for, applying, 63–64 flow

digital certificates, continuedsandbox.com test certificate for, 570, 570security alert concerning expired/mismatched

certificates and, 568–569, 569Dispatcher. See Load Balancerdistinguished name (DN), security and, 490–491distributed plug-in for HTTP Server, 25, 255–283

categories of, 256, 257configurations possible for, 255–256, 257directory locations for symbolic references, 259, 259tdistributed plug-in for HTTP Server and Snoop servlet

to verify, 274, 274horizontal clustering and, 303local, 256, 257local, managed node, 259–265, 260

architecture of, 260browser configuration of, 265, 265Deployment Manager and, 261–262generate file and propagate to Web server from

admin console in, 264–265install and configure, 261–263, 262location of, 262propagating plug-in file from Deployment Manager

in, 261Snoop servlet to verify, 265, 265verifying installation of, 263, 265WebSphere configuration for, 263

local, unmanaged node, 265–269, 266administrative user ID and password creation for,

267install and configure, 266–267, 267verify installation of, log and configuration files

for, 267verify installation of, using browser, 269WebSphere configuration for, 268, 268, 269

managed nodes in, 255–256, 257remote, 256, 257remote, managed node, 269–274, 270

federating node for, 271generating file for, propagating to remote Web

server using admin, 273install and configure, 271–272, 271location of, 272naming Web server for, 271, 271node agent process in, 271verifying installation of, using browser, 274, 274verifying installation of, using log and

configuration files for, 272WebSphere configuration for, 272–273, 272

remote, unmanaged node, 274–279, 275administrative user ID and password creation for, 277install and configure, 275–277, 276location of, 277

naming Web server for, 276–277, 276verifying installation of, using browser, 279verifying installation of, using log and

configuration files, 277WebSphere configuration for, 277–279, 278, 279

request processing in, 258–259, 258understanding and performing tasks for, 257–259unmanaged nodes in, 255–256, 257vertical clustering and, 290Web server definition for, manual configuration from

admin console, 279–283adding node to, 279–280, 280adding Web server definition to WebSphere for,

281–283, 281, 282,distributed remote plug-in, 38–41, 39, 40domain name server (DNS), 31–32

application server and, host names and, 62Load Balancer and, 374, 374

domain names, security and, 484–485dsserver function of Dispatcher, 354dummy key and trust files shipped with WebSphere, 470,

498, 499–507dump files, 668dump name space utility in, 694, 694–697, 743, 743–744dumping

heap dump analysis and, 683–684, 683t, 684thread dumping, 682–683

dynacache object caching (cache replication), 462–463, 463DynacacheEsi.ear application deployment, dynamic

caching and, 449dynamic caching, 49, 435–468, 436

adapter beans in, 456admin console for Caching Proxy in, 460, 460application server configuration for, 438, 443–447,

444–447external caching, 449–451, 450

CacheMonitor application deployment for, 440CacheQueries directive for, 460, 460CacheTimeMargine directive for, 460, 460Caching Proxy in, 435, 463–468

administrator user for, 465, 465connecting to, 466, 466installation of, 464logging, 467, 467mapping rules for, 465, 465snoop servlet and, 466–467, 467starting and stopping, 464starting from console, 467, 468welcome page for, 466, 466Windows service setup for, 464

cluster-aware dynacache object caching (cachereplication) in, 462–463, 463

content-based load balancing, high availability and, 413

776

Index

Page 7: was2 contents 1 - MC Press Onlineeditorial.mcpressonline.com/web/mcpdf.nsf/wdocs/... · First Steps tool to verify installation of, 63, 67–68, 67 fixes for, applying, 63–64 flow

DynacacheEsi.ear application deployment in, 449dynamic content caching in, 458–461, 459, 460Edge Side Include (ESI) processor in, 435, 436,

447–454, 448enabling, 438, 439, 460–461enterprise application configuration for, 438, 441–443,

442, 443external caching, 451, 451

external cache group and member configuration for,449–451, 450, 455–457, 455

external caching and, 436–437, 447–454, 448ExternalCacheManager directive for, 459, 459high availability

architecture of, 414, 415cluster IP address for, 414–418, 416, 417, 418,

431–432, 432configuration overview, 414content-based load balancing and, 413Dispatcher in, 414–415Dispatcher login for, 420, 420failover mode operation in, 428, 428failure in, simulating for testing, 430, 430heartbeat option for, 420–421, 420, 421, 430HTTP Server welcome screen for, 419, 419IP address assignment in, 416–418, 416, 417, 418primary Load Balancer server setup for, 415–417,

416, 419–422, 419reach target server configuration for, 432–433, 433recovery options for, 421–424, 421, 422, 423,

430–432, 431scripts for, 424–428, 425, 426, 427secondary Load Balancer server setup in, 417–418,

418, 419, 422–424, 423Site Selector and, 413verifying configuration for, 428–432, 429version verification and fix pack level for, 418, 418

host address assignment for, 456IP addresses in, 416–418, 416, 417, 418Java 2 Enterprise Edition (J2EE), 435Java Server Pages (JSP) and, 435, 436Load Balancer and, 458–461, 459logging, 457, 458monitoring, 440plug-in file configuration for, 448–448, 448, 449policies for, 444, 445pushing cached content to ESI processor in, 447–454, 448pushing dynamic content to Caching Proxy in,

454–468, 454request processing in, 436servlets and, 435, 436, 439, 439Site Selector and, 413snoop servlet behavior without, 437–438, 437, 438

snoop servlet behavior with, 445–446, 446, 452–453,453, 461, 461

statistics on, 444, 445, 446, 446, 452–453, 453, 462, 462timeout setting in, 441, 442

static content on ESI processor, 454transport chain configuration in, 440, 441verifying external cache configuration for, 451–453,

452, 453, 461–462, 461verifying presence of, on application server, 443–447,

444–447dynamic shared objects (DSOs), HTTP Server (IBM) and,

122–123

EEclipse, WebSphere Rapid Deployment (WRD) and, 731Edge Components, 5Edge Server/Load Balancer, 25

high availability configuration for, 48–49, 48, 49highly available/workload-managed (HA/WLM)

clustering and, 26, 47–49, 47, 48, 49horizontal clustering with highly

available/workload-management (HA/WLM)) for,18–19, 19

install, configure, verify, 47–48, 47Monitoring tool for, 48, 48Network Deployment package and, 16

Edge Side Include (ESI) processor, dynamic caching and,435, 436, 447–454, 448

efixes, 606. See also product update installationEJB application JAR files, packaging in J2EE and, 702EJB containers in, 700–701Embedded HTTP Server (EHS), 9, 19

application server and, 7local plug-in for HTTP Server and, 139

encryption,IBM Tivoli Directory Server (ITDS) and, 518Secure Sockets Layer (SSL) and, 559

Endpoint Listener (HTTP) application, Service IntegrationBus (SIBus) and, 647–648, 648, 649

enhanced EAR filesclass loading schemes and, 705–707packaging in J2EE and, 705, 711–715, 712t, 713, 714,

715WebSphere Rapid Deployment (WRD) and, 731

Enterprise Application Archive (EAR), 50Application Server Toolkit (AST) and, 717AutoAppInstall mode for, 732–733automatic removal of, 734, 734packaging in J2EE and, 699, 702, 710–711support for, 23WebSphere Bank and, 710–711, 717. See also

WebSphere Bank

Note: Boldface numbers indicate illustrations; t indicates a table. 777

Index

Page 8: was2 contents 1 - MC Press Onlineeditorial.mcpressonline.com/web/mcpdf.nsf/wdocs/... · First Steps tool to verify installation of, 63, 67–68, 67 fixes for, applying, 63–64 flow

Enterprise Application Archive (EAR), continuedWebSphere Rapid Deployment (WRD) and, 731,

732–734, 732–733XML files added to EAR directory in, 712, 712t

Enterprise Java Beans (EJB), 1, 687application server and, container, 7EJB containers in, 700–701packaging in J2EE and, 699replication and failover support for, 24

event handling, J2EE Management API and, 752–761, 753executor function of Dispatcher, 354Express package for WAS V6, 2, 3–5, 4, 11–12, 11, 12

application server and, 52, 53–64. See also applicationservers

HTTP Server (IBM), 9–10profile creation in, 8unsupported architectures in, no spraying, 12, 12

Extended Deployment (XD) page for WAS v. 6, 3external caching, 447–454, 448ExternalCacheManager directive, 459, 459

Ffailover, process vs. system, 14Fast Response Cache Accelerator, 131federating application server nodes, 2–3, 14, 25, 35–37,

35, 36, 37, 229–254, 229, 230, 233application invocation in, 248, 249application server command prompt for, 242–245,

243, 245cell management following, 249–251, 250

backup and recovery of cell in, 251starting application server, 251starting node agent process in, 250, 250

creating application server on custom profile nodeafter federation, 245–248, 246, 247, 248

custom profile for, 34–35, 34, 244–245, 245Deployment Manager admin console for, 232–242

add nodes in, 234, 234directory structure after federation and, 240–241,

240, 241federating additional nodes, 241–242, 241, 242host name and SOAP address port assignment to

nodes in, 234–235, 235logging process of, 236, 236, 237removing admin capability in, automatic, 240, 240Service Integration Bus (SIBus) and messaging

engines inclusion in, 235verifying, using admin console, 237–239, 237, 238, 239verifying, using log files, 236–237, 236, 237Windows service selection for, 235, 235, 239–240

directory structure after, 240–241, 240, 241errors in, 252–254, 252, 253t, 253, 254

horizontal clustering and, 302, 303logging process of, 236, 236, 237, 252–254, 252, 253t,

253, 254Network Deployment package product binaries and, 156pre-federation tasks for, 230–232

navigate application servers before federation in,231–232, 231

navigate Deployment Manager before federation in,232, 232, 242–423

remote, managed node of distributed plug-in and, 271starting node agent process in, 250, 250vertical clustering and, 289, 290

file transfer applications, 53file transfer protocol (FTP), 701Firefox browser, importing public certificate from,

570–573, 572First Failure Data Capture tool, 676–677First Steps console

Network Deployment packageapplication server profile and, 212–213, 213deployment manager and, verifying installation

using, 201, 201, 202application server and, 63, 67–68, 67

fix packs, 606. See also product update installationNetwork Deployment package application server

profile and, 215application server and, 63–64

fixes (interim fixes, efixes) and, 606freeform applications, WebSphere Rapid Deployment

(WRD)automatic deployment of, 735–741command-line notification for update to, 740, 741configuration of, 735HelloWorld.java source file in, 736–738modifying HelloWorld output string in, 739–740notification of successful deployment in, 738–739

Ggarbage collection (GC), 690–692, 691, 692groups registry, in security, 474, 475, 481–482, 481

Hhardware,

minimum requirements, for highlyavailable/workload-managed (HA/WLM)clustering and, 29

heap dump analysis, 683–684, 683t, 684heartbeat option, Load Balancer high availability and,

420–421, 420, 421, 430hello servlet, verifying installation and, 70, 70HelloWorld.java source file, 736–738

778

Index

Page 9: was2 contents 1 - MC Press Onlineeditorial.mcpressonline.com/web/mcpdf.nsf/wdocs/... · First Steps tool to verify installation of, 63, 67–68, 67 fixes for, applying, 63–64 flow

High Availability Manager (HA Manager), 23, 337. Seealso Service Integration Bus (SIBus)core groups and active coordinator for, 345–346, 345, 346policies set for, 346–348, 346, 347

high availability Load Balancer. See Load Balancer, highavailability

highly available persistent service, enable/configuration,43, 43

highly available/workload-managed (HA/WLM) clusteredenvironment, 18–19, 19, 25–50administrative privileges for setup of, 32application server in, 51–87. See also application

serverapplication server profile for, 33–34, 33architecture of, 26–27, 26clustering and, 26custom profile for, 34–35, 34Deployment Manager profile for, 32–33, 32distributed remote plug-in and,

Web server as managed node, 38, 39Web server as unmanaged node, 39, 40

Edge Server/Load Balancer for, 26, 47–49, 47, 48, 49high availability configuration for, 48–49, 48, 49install, configure, verify, 47–48, 47Monitoring tool for, 48, 48

federating nodes for, 35–37, 35, 36, 37highly available persistent service enable/configuration

for, 43, 43horizontal cluster creation in, 41–42, 41HTTP Server (IBM) and, 26, 37–38, 37, 38messaging engine for, 46, 46minimum OS/hardware requirements for, 29node name/identification (DNS) and ping for, 31–32plug-ins and, 26pre-installation tasks for, 29–32, 29readiness for, preparatory flow chart and steps, 28–29, 28Service Integration Bus (SIBus) for, 46, 46session persistence and, 26, 43–46, 44, 45, 46synchronizing date and time (clock) for, 31TCP/IP network and port configuration for, 30–31, 30tuser privileges set up for, 29–30verification of set up in, 26–27, 27

hitcount servlet, 70–72, 71database session persistence and, 321session persistence and, session failover verification,

332–334, 333, 334verifying installation and, 70–72, 71verifying session failover using, memory-to-memory

replication and, 315–320, 316–320horizontal clustering. See clustering (horizontal and vertical)host names

application server and, 61–62, 61, 84–86, 85dynamic caching and, 456

federating nodes and, 234–235, 235InvocationTargetExeception errors and, 84–86, 85Load Balancer and, 376local plug-in for HTTP Server and action of, 139Network Deployment package and, 185–186, 186

application server profile and, 209custom profile and, 219, 219deployment manager and, 196–197, 197product binaries and, 156

profile creation and, 76security and, 490vertical clustering and, 296–298, 296, 297, 298

hosts file, 31–32htdocs directory, HTTP Server (IBM) and, 122HTTP Server (IBM), 4, 6, 9–10, 10, 25, 111–136

admin console to manage, 22, 22Apache Monitor tool for, 124–125, 125Apache Web Server and, 9architecture of, 111, 112backup and recovery in, 125–126bin directory for, 122conf directory for, 122Cryptographic Message Syntax (CMS) and, 561Custom installation for, 116, 116directory setup for, 113, 113, 115–116, 115, 116t, 118,

120–123, 121, 131, 132disk space requirements for, 114distributed plug-in for, 25, 255–283. See also

distributed plug-in for HTTP Serverdownloading trial version of, 113dynamic shared objects (DSOs) in, 122–123Embedded HTTP Server (EHS) in, 7, 9, 19Fast Response Cache Accelerator in, 131highly available/workload-managed (HA/WLM)

clustering and, 26horizontal clustering with highly

available/workload-management (HA/WLM)) for,18–19, 19

htdocs directory for, 122HTTPServer base component for, 116, 117iKeyman utility in, 561installation of, 37–38, 37, 111, 112–118, 112Launchpad program for, 114license agreement for, 115, 131Load Balancer for. See Load Balancerlocal plug-in configuration for, 11, 11logging in, 114, 122, 126–130, 127, 127–129t

command prompt to start fails, 129connection to welcome page fails, 129logon fails in, 129problem scenarios in, 127–130tracing and, configuring for, 129–130, 130

logs directory for, 122managing, 123–126

Note: Boldface numbers indicate illustrations; t indicates a table. 779

Index

Page 10: was2 contents 1 - MC Press Onlineeditorial.mcpressonline.com/web/mcpdf.nsf/wdocs/... · First Steps tool to verify installation of, 63, 67–68, 67 fixes for, applying, 63–64 flow

HTTP Server (IBM), continuedmodules directory for, 122–123multiple

installing and configuring on same machine,133–136, 133

register HTTP Server processes as Windowsservices and verify in, 135–136, 136

second instances, making adjustments to, 134verifying installation of, 134–135Windows services and, 134

multiple Web servers with multiple application serverprofiles and, 170–175, 171–175

multiprofile local or remote plug-in for, 11–12, 12netstat command for, 31, 31Network Deployment package and, 16plug-in for. See plug-in for HTTP Serverplug-in propagation in, 22, 22port configuration for, 117, 117, 132

highly available/workload-managed (HA/WLM)clustering and, 30–31, 30t

product update installation and, 615–617, 616, 617public key infrastructure (PKI) for, 561, 563–567,

563–566register HTTP Server processes as Windows services

and verify in, 135–136, 136remote plug-in configuration for, 11, 11request processing in

clustered environment, 285–287, 286distributed environment, 258–259, 258

sandbox.com test certificate for, 570, 570Secure Sockets Layer (SSL) and configuration of,

561–570security alert concerning expired/mismatched

certificates and, 568–569, 569security components for, 116, 117security values for, 131session persistence and, 25, 43–46, 44, 45, 46,

309–336. See also session persistencesilent installation of, 130–133

Admin rights required for, 130directory setup for, 131, 132Fast Response Cache Accelerator in, 131license agreement in, 131port configuration for, 132response files for, 131, 132security values for, 131verifying installation of, 133Windows service for, 131–132, 132

starting, 123starting HTTP Admin Server in, 123–124static content on, 9, 122stopping, 123stopping HTTP Admin Server in, 123–124temporary (TMP) directory setup for, 113–114

testing connection for, 568–570, 569tracing and, configuring for, 129–130, 130uninst directory for, 123uninstalling, 126upgrading, 115–116, 116verifying installation of, 118–120, 134–135

log files for, 119Windows services panel for, 119–120, 119

virtual host creation for, 562, 567–568Welcome page for, 38, 38, 114, 115, 121, 419, 419Windows service for, 117–118, 118, 131–132, 132, 134

HTTP serversdistributed remote plug-in installation for, 38–41, 39, 40dynamic cache and, 49Endpoint Listener (HTTP) application for, 647–648,

648, 649horizontal clustering with highly

available/workload-management (HA/WLM)) for,18–19, 19

managed node status of, 38, 39port configuration and, 61profiles for, 16remote management of, 16remote management of, using Deployment Manager,

41, 41Secure Sockets Layer (SSL) and, 50session failover in, 314–320session persistence and, 43–46, 44, 45, 46snoop servlet for, 34, 34, 40, 40unmanaged node status of, 39, 40

Hypertext Markup Language (HTML), 9

Ii5/OS, 2IBM Rational Application Developer (iRAD), 4IBM Rational Web Developer (iRWD), 4, 744

WebSphere Rapid Deployment (WRD) and, 731IBM Tivoli Directory Server (ITDS), 5, 49–50, 515–558

admin DN and directory database configuration for,520, 520, 521

admin identification and setup in, 525–528, 526, 527, 528configuration mode of, 557–558, 557, 558Configuration Tool in, 523, 523, 524, 523, 556–557container branches in, 532–535, 533, 534, 535database setup for, 521–522, 521, 522DB2 instance for, 519, 519, 555–557directory configuration for, 523–525, 525directory server instance creation for, 518–523, 519,

557–558, 557directory tree creation for, 515, 528–543, 529

container branches in, 532–535, 533, 534, 535deleting the directory tree, 544–545, 544

780

Index

Page 11: was2 contents 1 - MC Press Onlineeditorial.mcpressonline.com/web/mcpdf.nsf/wdocs/... · First Steps tool to verify installation of, 63, 67–68, 67 fixes for, applying, 63–64 flow

domain attributes for, 531, 531, 532logging onto server instance of, 529–530, 529, 530managing entries in, 530–531, 530, 531root node entry in, 530, 530stopping directory server for, 545, 545structural object classes list for, 531, 531user (principal) entries in, 536–539, 536, 537, 538, 539user group creation in, 540–543, 540, 541, 542, 543verifying server is running for, 529

directory tree deletion in, 544–545, 544downloading, 515–516encryption options for, 518error log for, 558features/components selection for, 517, 517installation directory for, 517, 517Instance Administration Tool in, 518, 518key file (ldapkey.kdb) in, 546, 547, 547LDAP Interchange Format (LDIF) for, 515, 543–545ldapsearch search filter for, 558lightweight directory access protocol (LDAP) and,

489, 515logging onto server instance of, 529–530, 529, 530, 552login panel for, 552, 552network interface selection for, 519password stash file in, 546, 547–548, 548port configuration for, 516, 520, 520principals in, 536public key certificate added to WebSphere trust file,

599–602, 600, 601registries provided by, 515Secure Sockets Layer (SSL) and, 515, 546–551

connection configuration for, 551–555directory creation for, 546iKeyman utility for, JVM and, 546key database file configuration for, 553, 554key file (ldapkey.kdb) creation for, 546, 547, 547password stash file in, 546, 547–548, 548port configuration for, 554–555, 554self-signed certificate creation, 548–550, 549, 550server configuration for, 552–553, 553WebSphere and, configuring between, 598–603

self-signed certificate creation in, 548–550, 549, 550Simple Object Access Protocol (SOAP), 516stopping the directory server in, 545, 545suffix for directory tree in, 523–525, 524trace facility for, 558troubleshooting, 555–558user (principal) entries in, 536–539, 536, 537, 538, 539user creation for, 516user group creation in, 540–543, 540, 541, 542, 543verifying server is running for, 529Web Administrator Tool in, 525–528, 526Windows services in, 525, 525

icons used in logs, 679iKeyman utility

digital certificates and, 499–507Secure Sockets Layer (SSL) and, 561

inbound services, 637Service Integration Bus (SIBus) and, 649–650, 650

Informix databases, Network Deployment package and, 16installation and configuration, 25–50. See also

configurationInstance Administration Tool, IBM Tivoli Directory

Server (ITDS) and, 518, 518instances, multiple, binary file sharing in, 21interface address, content-based load balancing and, 402, 402interim fixes, efixes, 606. See also product update

installationInternet Explorer, importing public certificate from, 571,

571, 573–575, 573, 574, 575Internet Information Server (IIS), port configuration and,

30–31, 30tInvocationTargetExeception errors, 84–86, 85IP addresses, 31–33

application server and, 62content-based load balancing and, 400dynamic caching and, 416–417, 416, 417, 418, 418Load Balancer and, 354–360, 357, 358, 359, 362–366,

363, 366, 374, 374, 378, 400Load Balancer high availability and, 416–418, 416,

417, 418rule-based load balancing and, 393–395, 394, 395

IP sprayers, 353. See also Load Balancer

JJ2EE Management API, 743–766

custom Java administrative client creation and,749–761ace.bat file for, 759–760AdminClient instance for, 750, 750handling events in, 752–761, 753MBean location for, 750–751, 751t, 751MBean used in, 751, 752registering for events in, 752running administrative client program in, 760–761sample program for, 753–759

dump name space utility in, 743, 743–744Java Management Extensions (JMX) interface, 743Management Enterprise JavaBean (MEJB) and, 743MBeans and

Admin Service interface for, 763direct access of instance of, 763extending use with, 761–766factory class for, 762JMX type, 761–762

Note: Boldface numbers indicate illustrations; t indicates a table. 781

Index

Page 12: was2 contents 1 - MC Press Onlineeditorial.mcpressonline.com/web/mcpdf.nsf/wdocs/... · First Steps tool to verify installation of, 63, 67–68, 67 fixes for, applying, 63–64 flow

J2EE Management API, Mbeans, continuedJMXManageable and CustomService interface for,

763registering, 762–766security and, 763SnoopMBean.java code, 764SnoopMBean.xml code, 764–766SnoopMBeanImpl.java code, 764

TSM.java source code in, 744, 744–748J2EE product provider, packaging in J2EE and, 703JAAS, 701

WebSphere Rapid Deployment (WRD) and, 731Java 2 Connector (J2C) authentication

application server and, 7–8database session persistence and, 321, 325–326, 326

Java 2 Enterprise Edition (J2EE), 1, 699–715class loading schemes and, 705–707dynamic cache and, 49dynamic caching and, 435freeform applications and, automatic deployment of,

735–741Management API in. See J2EE Management APImanagement of, 50packaging in, 699–705

applet containers in, 701application client containers in, 701application client JAR files in, 702application components in, 700class loading schemes and, 705–707configuring, 707creating the EAR file for, 707–708dependency packages in, 708–710deployment modules in, 700EJB application JAR files in, 702EJB containers in, 700–701, 700enhanced EAR files in, 705, 711–715, 712t, 713,

714, 715Enterprise Application Archive (EAR) files and,

699, 702, 710–711Java archive (JAR) files in, 702Java Connector Architecture (JCA) and, 702limitations of, 704–705resource adapter (RAR) files in, 702roles in, 702–704runtime containers in, 700structure of, 708Web application WAR files in, 702Web archive (WAR) files in, 702Web containers in, 701what can be packaged in, 700–702XML files added to EAR directory in, 712, 712t

security and, 49WebSphere Rapid Deployment (WRD) and, 731

Java archive (JAR)Collector Tool and, 668–669, 674–675packaging in J2EE and, 702

Java Authorization Contract for Containers (JACC), 24Java Connector Architecture (JCA) and, 702Java Database Connectivity (JDBC), 701

database session persistence and, 326–329, 327, 328, 329dump name space utility in, 694, 694–697, 743,

743–744WebSphere Bank and, 717, 719, 720WebSphere Rapid Deployment (WRD) and, 731

Java Database Connectivity (JDBC) provider, databasesession persistence and, 321

Java Key Store (JKS) key files, Secure Sockets Layer(SSL) and, 561

Java Management Extensions (JMX) interface, 743Java Message Service (JMS), 23, 701

WebSphere Bank and, 718, 724, 725Java Naming and Directory Interface (JNDI)

application server and, naming server, 8database session persistence and, 321, 330–332, 331dump name space utility in, 694, 694–697, 743, 743–744

Java Server Page (JSP), 1, 735dynamic caching and, 435, 436local plug-in for HTTP Server and, 139packaging in J2EE and, 699

Java Virtual Machine (JVM), application server and, 6Java, custom Java administrative client creation, 749–761JavaScript, 9JAXP, 701JMX type MBeans, 761–762

Kkey store files, digital certificates and, 498

LLDAP Interchange Format (LDIF), 515, 543–545LDAP. See lightweight directory access protocol (LDAP)ldapsearch search filter, IBM Tivoli Directory Server

(ITDS) and, 558lightweight directory access protocol (LDAP), 5, 18

IBM Tivoli Directory Server (ITDS) and, 49–50, 515Secure Sockets Layer (SSL) and, 598–603security and, 49synchronizing date and time (clock) for, 31

lightweight directory access protocol (LDAP) registry,469, 488–497. See also security, lightweight directoryaccess protocol and

lightweight third party authentication (LTPA), 472–482,484, 485, 486, 493, 494Secure Sockets Layer (SSL) and, 602–603security and, 477, 478

782

Index

Page 13: was2 contents 1 - MC Press Onlineeditorial.mcpressonline.com/web/mcpdf.nsf/wdocs/... · First Steps tool to verify installation of, 63, 67–68, 67 fixes for, applying, 63–64 flow

Linuxadministrative privileges for setup of, 32loopback adapter configuration on, 364–366, 365

Load Balancer, 353–412advisor function in, 380, 380advisor function in, 406–407, 406advisors function of Dispatcher in, 354architecture of, 355, 355cluster IP addresses in, 354–355configuration overview, 356console of, 370–372, 371content-based load balancing, 387–412, 399

adding HTTP servers for, 404–406, 405, 406client gateway address for, 400–401, 401cluster address for, 401–402, 402configuring, 409–412, 410, 411Dispatcher configuration file for, 407, 407Dispatcher configuration for, 400–412forwarding method selection in, 403–404, 403interface address for, 402, 402IP address assignment for, 400Network Address Translation/Network Address

Port Translation (NAT/NAPT), 397port assignment for, 403–404, 403return address in, 399, 404, 404starting manager and advisor functions in,

406–407, 406, 407verifying configuration of, 411–412, 411, 412verifying forwarding from command prompt in,

408, 408verifying request spraying in, 409

Content-Based Routing (CBR) request processing in, 354Dispatcher component of, 354dsserver function of Dispatcher in, 354dynamic caching and, 458–461, 459executor function of Dispatcher in, 354high availability in, 413–433host connection in, 382–383, 382, 383HTTP servers and request spraying in, 354installing, 368

configuration wizard for, 372–373configure the network for, 356–360console of, 370–372, 371directory structure for, 366, 367, 368DNS entry for cluster address in, 374, 374fix pack application for, 373–374IP address assignment for, 356–360, 357, 358, 359,

362–363, 363, 365–366, 366, 374, 374, 378Java system variable setting in, 372–373, 372, 373Launchpad for, 367license agreement for, 368location for, 368, 369log files for, 370, 370

loopback adapter configuration for, 360–366, 362,381

loopback adapter on other operating systems,364–366, 365

MAC addresses of servers in, 359, 359multiple HTTP servers, configuring to spray

requests, 375–381network adapter for, 361, 361pinging HTTP servers to test, 358–359route delete command and routing tables in, 364, 364route print command and routing table verification

for, 360, 360, 363, 363temporary (TMP) directory setup for, 367verifying, 369–373, 370

installing, 355–389IP addresses in, 354–360, 3571, 358, 362–366, 363,

366, 374, 374, 378, 393–395, 394, 395IP sprayer use of, 353logging in, 389–390, 389, 390loopback adapter for, 360–366, 362, 381manager function, 354, 406–407, 406manager statistics on, 388, 388Media Access Control (MAC) address request

processing in, 354monitor for, 387, 387, 388Network Address Translation/Network Address Port

Translation (NAT/NAPT) processing in, 354,397–412

product update installation and, 620–625, 621–625rule-based load balancing, 390–397

adding HTTP server to cluster for, 392–393, 392, 393adding IP address rule for restricted users in,

393–394, 394adding IP address rule for unrestricted users in,

394–395, 395Always True rule in, 395–396, 396review and test, 396–397, 397rule options selection for, 391–392, 391stickymask (affinity address mask) for, 390

servers supported by, 353spraying requests using, 375–381

adding servers for, 378–380, 379, 380advisor startup for, 380, 380cluster address assignment in, 377–378, 377Dispatcher configuration for, 375–381, 375Host Connection error in, 376–377, 377host specification for, 376loopback adapter configuration for, 381No Host Keys error in, 376, 376operating system selection for, 381port assignment and, 377, 378, 378testing, 385–389, 386

Note: Boldface numbers indicate illustrations; t indicates a table. 783

Index

Page 14: was2 contents 1 - MC Press Onlineeditorial.mcpressonline.com/web/mcpdf.nsf/wdocs/... · First Steps tool to verify installation of, 63, 67–68, 67 fixes for, applying, 63–64 flow

Load Balancer, continuedsticky time configuration in, 386–387subcomponents of, 353testing, using HTML page, 384–385, 385verifying configuration of, 383–384, 384

local distributed plug-in. See distributed plug-in for HTTPServer

Log Analyzer, 677–683, 678color coding in, 679icons used in, 679showlog tool for, 680–681, 681–682Symptoms database and, updating, 680thread dumping in, 682–683tracing and, 666unit of work (UOW) entries in, 677–678

log filescategories of, 78, 79–80tverifying installation through, 66, 66, 67

loggingadmin console access to, 80–81, 81, 82application server and, 56, 57–58, 63, 78–87architecture for, 78, 78Caching Proxy server and, 467, 467color coding in, 679disabling of, effect on logging level, 658–659, 659tdynamic caching and, 457, 458federating nodes and, 236–237, 236, 237, 252–254,

252, 253t, 253, 254horizontal clustering and, 308, 308HTTP Server (IBM) and, 122, 126–130, 127,

127–129tIBM Tivoli Directory Server (ITDS) and, 558icons used in, 679Load Balancer and, 370, 370, 389–390, 389, 390Log Analyzer in, 677–683, 678log files for, categories of, 78, 79–80tmemory-to-memory replication and, 314Network Deployment package

application server profile and, 213, 214, 214–215tcustom profile and, 221, 221, 222tdeployment manager and, 205–207, 206, 206–207tproduct binaries and, 163–170, 164, 164–166t, 167

Secure Sockets Layer (SSL) and, 597–598, 597, 598Service Integration Bus (SIBus) and, 349, 350showlog tool for, 680–681, 681–682strings for, trace and logging, 657–659, 659tthread dumping in, 682–683tracing and, 656–657unit of work (UOW) entries in, 677–678vertical clustering and, 299, 300

logs directoryapplication server and, 64HTTP Server (IBM) and, 122

loopback adapter, Load Balancer and, configuration for,360–366, 362, 381

MManagement Enterprise JavaBean (MEJB), 743manager function of Dispatcher, 354managing WebSphere Application Server v 6, 50,

655–697 . See also J2EE Management APIBackupConfig archive and, 684–685, 685–686Collector Tool for, 668–676

analyzing output of, 670–671full mode output, 674IBM Support use of, 668–669installation directory run of, 673JAR files used by, 668–669, 674–675running, 669–670sample output from 673–676summary mode for, 672–673, 675–676text file created from, 676tips and suggestions for better use of, 671–672Unix systems and, 672Windows systems and, 672

dump name space utility in, 694, 694–697, 743, 743–744First Failure Data Capture tool in, 676–677heap dump analysis and, 683–684, 683t, 684Log Analyzer for, 677–683, 678

color coding in, 679icons used in, 679showlog tool for, 680–681, 681–682Symptoms database and, updating, 680thread dumping in, 682–683unit of work (UOW) entries in, 677–678

Performance Monitoring Infrastructure (PMI) and, 687performance monitoring with Tivoli Performance

Viewer, 687–688, 688RestoreConfig archive and, 686, 686–687tracing for, 655–668

advanced format of, 666application server trace service and, management

of, 664–665basic format of, 666configuring, 659–660, 660diagnostic settings for, 666–668Dump Files and, 668Enable Log in, 667enabling at server startup, 659–662, 660, 661enabling on client and standalone applications,

663–664enabling on running server, 662–663, 662fields in output of, 665–666interpreting output from, 665–666Log Analyzer format of, 666logging and, 656–657

784

Index

Page 15: was2 contents 1 - MC Press Onlineeditorial.mcpressonline.com/web/mcpdf.nsf/wdocs/... · First Steps tool to verify installation of, 63, 67–68, 67 fixes for, applying, 63–64 flow

Saving changes to configuration and, 668strings for, trace and logging, 657–659, 659tTrace Output format in, 668Trace Output properties in, 667

verbose class loader in, 693, 693verbose garbage collection (GC) in, 690–692, 691, 692version information using versionInfo command in,

689, 689–690mapping rules, Caching Proxy server and, 465, 465MBeans, 761–766

Admin Service interface for, 763direct access of instance of, 763factory class for, 762JMX type, 761–762JMXManageable and CustomService interface for, 763registering, 762–766SnoopMBean.java code, 764SnoopMBean.xml code, 764–766SnoopMBeanImpl.java code, 764

Media Access Control (MAC) address request processing,Load Balancer and, 354

memory-to-memory replication, 309–320, 310. See alsosession persistenceclient-only mode in, 311client–server mode in, 311cluster members and, 309hitcount to verify session failover, 315–320, 316–320HTTP session failover in, 314–320log files for, 314mode for, 311, 313, 313replication domain in, 309, 311–312, 312server-only mode in, 311starting the cluster after, 313–314, 314tracing for, 314, 314, 320

memory-to-memory session persistence, 43–44, 44messaging engine (ME), 23, 25, 337. See also Service

Integration Bus (SIBus)application server and, 8, 72–73, 73cluster specified for, 340, 341data store for, 339, 339default installation of, 21federating nodes and, 235highly available/workload-managed (HA/WLM)

clustering and creation/configuration of, 46, 46Java Message Service in, 23Network Deployment package application server

profile and, 216Service Integration Bus (SIBus) and, 637SIBus creation in, 340–341, 340, 341verifying messaging engine configuration and failover

in, 341–342, 342workload sharing (optional) configuration for,

342–344, 343, 344modules directory, HTTP Server (IBM) and, 122–123

monitor mode, WebSphere Rapid Deployment (WRD)and, 733

Monitoring tool, Load Balancer, 48, 48multiple Web servers with multiple application server

profiles, 170–175, 171–175multiprofile local or remote plug-in for, 11–12, 12

Nnamespace, dump name space utility for, 694, 694–697,

743, 743–744netstat command, 31, 31Network Address Translation/Network Address Port

Translation (NAT/NAPT) processingcontent-based load balancing and, 397–412Load Balancer and, 354, 397–412

Network Deployment package for WAS V.6, 3, 3, 5–6, 5,13–14, 13, 183–227application invocation in, 248, 249application server profile and, 51, 183, 207–216, 208

adding new features to, 216backup and recovery for, 216directory structure after creation of, 211–212, 212directory structure for, 208–209fix packs applied to, 215log files for, 211logging during creation of, 213, 214, 214–215tmanaging the environment for, 216messaging engine enabling for, 216multiple profiles for, 216naming profile for, 208node and host name for, 209, 209port configuration for, 209–210, 209, 210product binary installation for, 208Profile Creation wizard for, 208Service Integration Bus (SIBus) configuration for, 216Service Integration Bus Web Services Enablement

(SIBWS) and, 216verifying creation of, using First Steps, 212–213, 213Windows service selection for, 210–211

architecture of, 16–19, 17, 18, 19, 184, 184Caching Proxy and, 435. See also dynamic cachingcustom profile in, 183, 216–222, 217

directory structure after creation of, 220, 220, 221directory structure for, 218federating to Deployment Manager, 217–218, 218logging problems and, 221, 221, 222tnaming, 218node and host name for, 219, 219port configuration for, 219product binaries installation for, 217Profile Creation wizard for, 217verifying installation of, 219, 220

Note: Boldface numbers indicate illustrations; t indicates a table. 785

Index

Page 16: was2 contents 1 - MC Press Onlineeditorial.mcpressonline.com/web/mcpdf.nsf/wdocs/... · First Steps tool to verify installation of, 63, 67–68, 67 fixes for, applying, 63–64 flow

Network Deployment package for WAS V.6, continueddatabase support in, 16DB2 and, 16deployment manager for, 183, 194–207

admin console connection for, 204backup and recovery for, 204–205connecting to, through admin console, 202creating profile for, 194–207, 194directory structure for, 195–196, 196, 199directory structure after, 199–200, 200log file for, 199, 199logging with, 205–207, 206, 206–207tmanaging, 203–205naming, 195, 195network interface cards (NICs) and, 196node, host, and cell names for, 196–197, 197port configuration for, 197–198, 197starting, 203, 204status checking of, 204stopping, 203verifying creation of, using First Steps console for,

201, 201, 202verifying installation of, 199Windows service selection for, 198, 198, 199,

202–203, 203directory structure for, 186, 186, 188, 188, 189

after application server profile creation, 211–212,212

after custom profile creation, 220, 220, 221after deployment manager installation, 199–200, 200after product binary installation, 190–191, 191

disk space requirements for, 187distributed local plug-in for, 17, 17distributed remote plug-in for, 38–41, 39, 40dynamic caching and. See dynamic caching, 435Edge Server/Load Balancer and, 16horizontal clustering with highly

available/workload-management (HA/WLM),18–19, 19, 25. See also highly available/workloadmanagement

host names for, 185–186, 186HTTP Server (IBM) and, 9–10, 16installation wizard for, 188–227installation, 183–227, 184Launchpad program for, 187license agreement for, 187Load Balancer and. See Load Balancerlogging, product binary installation and, 192–193, 192,

193tmultiple application servers in, Deployment Manager

admin console and, 16–17, 17nodes and cells in, 13–14, 13plug-ins and, 16

port configuration for, 185–186product binaries installation for, 183, 184–193

directory structure after, 190–191, 191logging during, 192–193, 192, 193tverifying, 189–190

profile creation in, 8, 14–16, 15sample applications for, selecting, 189, 189silent installation for, 222–227, 223–225

directory setup for, 223, 224, 224Javadoc feature for, 224license agreement for, 224product binary installation in, 223–226profile creation and, 225, 226–227response files for, 222, 223, 224, 225, 225sample applications and, 224temporary (TMP) directory for, 223–224verifying, 226

single-machine installation hints for, 184–185spraying requests using, 12symbolic references in, directory locations for, 184,

185ttemporary (TMP) variable for, 186, 187upgrading to, from Base or Express package, 188verifying product binary installation in, 189–190vertical and horizontal clustering in, 285–308. See also

clustering (horizontal and vertical)vertical clustering with distributed remote plug-in for,

17–18, 18network interface cards (NICs), application server and,

host names and, 62node agents, 14nodes, 13–14, 13

application server and, 84–86, 85naming, 61–62, 61

cells vs., 13–14, 13clusters and, 14, 17, 18copying key and trust files to, 506, 511, 512custom profile for, 34–35, 34Deployment Manager profile for, 32–33, 32distributed local plug-in for, 17, 17distributed remote plug-in for, 38–41, 39, 40failover and, process vs. system, 14federation of, 14, 25, 35–37, 35, 36, 37horizontal clustering with highly

available/workload-management (HA/WLM)),18–19, 19

InvocationTargetExeception errors and, 84–86, 85managed vs. unmanaged, 255–256, 257. See also

distributed plug-in for HTTP Servermanaged, Web server as, 38, 39name/identification (DNS) and ping for, 31–32Network Deployment package

application server profile and, 209

786

Index

Page 17: was2 contents 1 - MC Press Onlineeditorial.mcpressonline.com/web/mcpdf.nsf/wdocs/... · First Steps tool to verify installation of, 63, 67–68, 67 fixes for, applying, 63–64 flow

custom profile and, 219, 219deployment manager and, naming, 196–197, 197

node agents and, 14profile creation and, 76security and, synchronization issues in, 495–496, 496synchronization of, 495–496synchronizing date and time (clock) between, 31unmanaged, Web server as, 39, 40vertical clustering with distributed remote plug-in for,

17–18, 18Windows services and, node agent process as,

632–633, 633, 636

Oobject request brokers (ORBs), security and, 477, 478operating system registries, 469, 482–488, 483. See also

security, operating system registries inoperating system support, 2

minimum requirements for highlyavailable/workload-managed (HA/WLM)clustering and, 29

Oracle, Network Deployment package and, 16outbound Web services, 637

Ppackaging in J2EE, 699–705

applet containers in, 701application client containers in, 701application client JAR files in, 702application components in, 700class loading schemes and, 705–707configuring, 707creating the EAR file for, 707–708dependency packages in, 708–710deployment modules in, 700EJB application JAR files in, 702EJB containers in, 700–701enhanced EAR files in, 705, 711–715, 712t, 713, 714,

715Enterprise Application Archive (EAR) files and, 699,

702, 710–711Java archive (JAR) files in, 702Java Connector Architecture (JCA) and, 702limitations of, 704–705resource adapter (RAR) files in, 702roles in, 702–704runtime containers in, 700structure of, 708Web application WAR files in, 702Web archive (WAR) files in, 702Web containers in, 701what can be packaged in, 700–702

passwords, 469, 475–476, 479, 480, 490, 513local, unmanaged node of distributed plug-in and, 267remote, unmanaged node of distributed plug-in and, 277Secure Sockets Layer (SSL) and, 586, 586

Performance Monitoring Infrastructure (PMI), 687performance monitoring with Tivoli Performance Viewer,

687–688, 688persistence, session. See session persistencepersistent service

enabling, 350, 350Service Integration Bus (SIBus), 348–351, 348, 349transaction log directories for, 349transaction service configuration for, 349, 350

ping, 31–32PlantsByWebSphere application for application server,

53, 100, 100Platform Messaging, 23platform support for WAS v 6, 2plug-in for HTTP Server, 10–12, 10, 11, 12, 137–182

backup and recovery for, 175directory structure of, 147distributed local, 137

with vertical clustering, 17, 17distributed remote, 38–41, 39, 40, 137dynamic caching and, 447–454highly available/workload-management (HA/WLM)),

horizontal clustering, 18–19, 19installation of, 22, 22local, 11, 11, 137

architecture for, 138–139, 138browser used to verify installation of, 149–151,

149–151configurewebserver-definition-name.bat file in,

138, 145default location for files of, 145–146, 146directory structure of, 139–141, 140t, 141, 144,

144, 147disk space requirements for, 141–142Embedded HTTP Server (EHS) and, 139horizontal clustering and, highly

available/workload-management(HA/WLM),18–19, 19

host names and ports entered directly to, 139installation of, step-by-step, 139–147, 140Java Server Pages (JSP) and, 139Launchpad installation wizard for, 142–147, 143–146licensing agreement for, 142log and configure files for, 148–149, 148, 149multiple Web servers with multiple application

server profiles and, 173–175, 171–175naming the Web server for, 145, 145plugin-cfg.xml file in, 138port configuration for, 144–145, 145

Note: Boldface numbers indicate illustrations; t indicates a table. 787

Index

Page 18: was2 contents 1 - MC Press Onlineeditorial.mcpressonline.com/web/mcpdf.nsf/wdocs/... · First Steps tool to verify installation of, 63, 67–68, 67 fixes for, applying, 63–64 flow

plug-in for HTTP Server, local, continuedprofile configuration and, multiprofile

environments, 146request-processing behavior of HTTP Server with,

138–139, 138symbolic references in, directory locations for, 139,

140ttemporary (TMP) environment variable setting for,

141third-party Web servers and, 142Uniform Resource Identifier (URI) entries in, 139verifying installation of, 147–151, 148–151vertical clustering and, 17, 17Web server for, 143, 143, 144–145, 145, 146, 146

multiple Web servers with multiple application serverprofiles and, 170–175, 171–175

multiprofile local or remote, 11–12, 12Network Deployment package and, 16product update installation and, 617–620, 618, 619propagation of, to HTTP Server, 22, 22remote, 11, 11, 137

admin console configuration for, 159–160, 160admin server and, 154, 157, 160, 160architecture of, 151–153, 152configuration files for, 155configurewebserver-definition-name.bat file for,

151, 155copying configuration batch files for, 154default location for, 156, 156demilitarized zone (DMZ) use and, 157directory structure for, 155federated nodes and, 156fix packs for, installing, 157generating and propagating files for, 161–163, 161,

162, 163host name or DNS for, 156HTTP Server won’t start after installation of,

167–168, 168installation of, 154–163, 154logging for problem determination in, 163–170,

164, 164–166t, 167multiple Web servers with multiple application

server profiles and, 174–175, 171–175naming of, 155, 155node identification for, 156, 156plugin-cfg.xml file for, 151request-processing behavior of HTTP Server with,

152–153, 152, 153snoop servlet won’t work with, 168–169, 169, 170troubleshooting problems with, 161–170, 162, 163user ID and password required for, 154, 157, 160, 160verifying installation of, 157vertical clustering and, 17–18, 18

Web server definition for, configuring WebSpherefor, 157–158, 158, 159

Secure Sockets Layer (SSL) and, configuration forapplication server and, 584–592

silent installation of, 178–182configuration files for, 180, 180default location in, 180–181, 181directory structure for, 179license agreement for, 179mapping existing applications to Web server and,

181, 181naming the Web server for, 180port configuration for, 180response files and temporary directory for,

178–179verifying, 182Web server selection for, 179, 179

unconfiguring Web server definition from applicationserver and, 177–178, 178

uninstalling, 176–178vertical clustering and, 17–18, 17, 18

plug-ins, 4, 25highly available/workload-managed (HA/WLM)

clustering and, 26policies

dynamic caching and, 444, 445Service Integration Bus (SIBus), 346–348, 346, 347

port configurationadmin console and, 59–60, 197–198application server and, 59–61, 60, 86, 87, 87, 105bootstrap, 61, 198content-based load balancing and, 403–404, 403federating nodes and, 234–235, 235highly available/workload-managed (HA/WLM)

clustering and, 30–31, 30tHTTP Server (IBM) and, 117–117, 132HTTP transport, 61IBM Tivoli Directory Server (ITDS), 516, 520, 520Load Balancer and, 377, 378, 378local plug-in for HTTP Server and, 139, 144–145, 145netstat command for, 31, 31Network Deployment package and, 185–186, 185

application server profile and, 209–210, 209, 210custom profile and, 219deployment manager and, 197–198, 197

plug-in for HTTP Server and, 180profile creation and, 76, 76Secure Sockets Layer (SSL) and, 554–555, 554security and, 490Simple Object Access Protocol (SOAP), 61, 198snoop servlet for, 34, 34, 40, 40vertical clustering and, 289, 298, 298

principals, IBM Tivoli Directory Server (ITDS) and, 536

788

Index

Page 19: was2 contents 1 - MC Press Onlineeditorial.mcpressonline.com/web/mcpdf.nsf/wdocs/... · First Steps tool to verify installation of, 63, 67–68, 67 fixes for, applying, 63–64 flow

processes, registration of, 50product update installation, 50, 605–625

application server and, 606, 607–608backing up your configuration before, 612, 612concurrent updates and, 607Deployment Manager and, 606–607environments amenable to, 606fix packs and, 606fixes (interim fixes, efixes) and, 606HTTP Server (IBM) and, 615–617, 616, 617Java processes stopped for, 611list of updates for, 609–611, 610, 611Load Balancer, 620–625, 621–625plug-in for HTTP Server and, 617–620, 618, 619profiles and, 607readme documents for, 611refresh packs and, 606releases and, 606restarting and testing following, 614–615step by step for, 607–608symbolic file system reference for, 608, 608tterminology used when referring to, 605, 605tuninstalling interim fixes and, 613unzipping archive files for, 613update installer tool for, 606update program run for, 613–614, 613, 614version determination for, 608–609versionInfo utility for, 606, 608–609, 609WebSphere and, 606–608

Profile Creation Wizard, 74–76profiles, 8–9, 9

application server and, 8–9, 9, 33–34, 33, 52, 53, 65,65, 73–77, 74, 93, 207–216, 208

BackupConfig archive and, 684–685, 685–686Base package and creation of, 8command prompt, 74custom, 15–16, 34–35, 34default vs. subsequent, 75–76Deployment Manager and 15, 32–33, 32, 194–207, 194directory for, 76, 77, 77Express package and creation of, 8horizontal clustering and, 302HTTP servers and, 16local plug-in for HTTP Server and, multiprofile

environments and, 146multiple application servers and, Deployment Manager

admin console and, 16–17, 17multiprofile environments, 170–175, 171–175multiprofile local or remote plug-in for, 11–12, 12naming, 75, 75Network Deployment package

creation of, 8, 14–16, 15, 183silent installation and, 225, 226

node and host names for, 76

port configuration for, 76, 76product update installation and, 607Profile Creation Wizard for, 74–76remote HTTP server management and, 16RestoreConfig archive and, 686, 686–687snoop servlet for, 34, 34templates for, 8–9, 9, 14–15, 15verifying creation of, 77Windows services for, choosing, 77

profiles directory, application server and, 65profileTemplates directory, application server and, 65public key infrastructure (PKI)

Secure Sockets Layer (SSL) and HTTP Server (IBM)and, 561, 563–567, 563–566

public key infrastructure (PKI) certificates, 479

Rrapid deployment. See WebSphere Rapid Deployment

(WRD)Rational Application Developer. See IBM Rational

Application DeveloperRational Web Developer. See IBM Rational Web Developerreach target servers, Load Balancer high availability and,

432–433, 433readme documents, product update installation and, 611recovery. See also backup and recovery

Load Balancer high availability and, options for,421–424, 421, 422, 423, 430–432, 431

refresh packs, 606. See also product update installationregistering and running WebSphere processes as

Windows services. See Windows servicesregistering WebSphere processes, 50registries, 469

IBM Tivoli Directory Server (ITDS) and, 515Relational Resource Adapter. See WebSphere Relational

Resource Adapterreleases, product update installation and, 606remote management, HTTP servers and profiles for, 16remote method invocation (RMI), 701remote method invocation/Internet InterORB protocol

(RMI/IIOP), security and, 477, 478remote plug-in. See plug-in for HTTP Serverreplication, Data Replication Service (DRS) and, 24replication domain, 309, 311–312, 312request processing

clustering (horizontal and vertical) and, 285–287, 286distributed plug-in for HTTP Server and, 258–259, 258dynamic caching and, 436

resource adapter (RAR) files, packaging in J2EE and, 702return address, content-based load balancing and, 404, 404roles, in packaging J2EE, 702–704route delete command and routing tables, 364, 364

Note: Boldface numbers indicate illustrations; t indicates a table. 789

Index

Page 20: was2 contents 1 - MC Press Onlineeditorial.mcpressonline.com/web/mcpdf.nsf/wdocs/... · First Steps tool to verify installation of, 63, 67–68, 67 fixes for, applying, 63–64 flow

route print command and routing table verification, LoadBalancer and, 360, 360, 363, 363

rule-based load balancingadding HTTP server to cluster for, 392–393, 392, 393adding IP address rule for restricted users in, 393–394,

394adding IP address rule for unrestricted users in,

394–395, 395Always True rule in, 395–396, 396Load Balancer and, 390–397review and test, 396–397, 397rule options selection for, 391–392, 391stickymask (affinity address mask) for, 390

runtime containers, packaging in J2EE and, 700

Ssamples directory, application server and, 65sandbox.com test certificate, 570, 570scopes, in configuration of resources and variables, 23scripts, Load Balancer high availability and, 424–428,

425, 426, 427search filter, IBM Tivoli Directory Server (ITDS) and, 558Secure Sockets Layer (SSL), 50, 559–603

acclerators for, 561certificate authority certificates, 559, 575–583

certificate signing request (CSR) for, 576–579,577, 578

copying key file artifacts for, 583copying text of, Begin and End Certificate markers

for, 575iKeyman utility for, 575labels in, 581–582opening key file for, 575–576, 576receiving VeriSign signed certificate for, 580–581,

581testing configuration for, 583VeriSign certificate signing request (CSR) for,

576–579, 577, 578VeriSign free trial certificate for, 578, 578VeriSign Test CA Root certificate for, 579–580,

580, 582–583, 583configuration repertoires for, 592, 593, 594, 595connection establishment for, 559Cryptographic Message Syntax (CMS) and, 561encryption in, 559handshake (client/server) in, 560, 560HTTP Server (IBM), 561–570

public key infrastructure (PKI) for, 561, 563–567,563–566

sandbox.com test certificate for, 570, 570security alert concerning expired/mismatched

certificates and, 568–569, 569

symbolic file system references for, 562, 562ttesting connection for, 568–570, 569virtual host creation for, 562, 567–568

HTTP Server plug-in–application serverapplication server setup for, 588–592, 589configuration between, 584–592configuration repertoires for, 592, 593, 594, 595copying key and trust files to other nodes for, 591creating self-signed certificate for, 586–587, 587, 589deleting signer certificates for, 586, 587, 589directory creation for key and trust files in, 588extracting certificate from Web container key for, 590extracting certificate from plug-in key for, 588importing plug-in certificate for, 590–591, 590, 591inbound channel selection for, 594, 595key file creation for, 588–589, 589managing SSL artifacts in, 593, 593password setup for, 586, 586plug-in setup for, 584–588, 585selecting server Web container for, 594, 594testing connection for, 596troubleshooting connection for, 597–598, 597, 598trust file creation for, 590validity period for, 587, 589virtual host and aliases for, 595–596, 595Web container, configuring between, 592–598

IBM Tivoli Directory Server (ITDS) and, 515, 546–551iKeyman utility in, 561, 575importing public certificate from a browser for

Firefox browser and, 570–573, 572Internet Explorer and, 571, 571, 573–575, 573,

574, 575importing public certificate into a browser for,

570–583inbound channel selection for, 594, 595Java Key Store (JKS) key files and, 561lightweight directory access protocol (LDAP) and,

489, 491, 598–603logging in, 597–598, 597, 598managing SSL artifacts in, 593, 593passwords and, 586, 586performance cost limitations of, 561port configuration and, 30–31, 30tpublic key infrastructure (PKI) for, 561, 563–567,

563–566sandbox.com test certificate for, 570, 570security alert concerning expired/mismatched

certificates and, 568–569, 569SSL configuration repertoires and, 498–499, 498, 499testing connection for, 568–570, 569, 596troubleshooting connection for, 597–598, 597, 598validity period for, 587, 589

790

Index

Page 21: was2 contents 1 - MC Press Onlineeditorial.mcpressonline.com/web/mcpdf.nsf/wdocs/... · First Steps tool to verify installation of, 63, 67–68, 67 fixes for, applying, 63–64 flow

virtual host and aliases for, 595–596, 595, 562,567–568

Web container certificate added to plug-in key file for,591–592, 592

WebSphere and ITDS, 598–603ITDS public key certificate added to WebSphere

trust file, 599–602, 600, 601lightweight third party authentication (LTPA) and,

602–603WebSphere configured for, with LDAP registry

communications, 602–603security, 49, 469–514

active protocol list options in, 477, 478, 494admin roles in, 513–514, 514administrator identification for, 496–497, 497, 480,

481, 487–488, 488application server and, 8authentication in, 469, 493authorization in, 469cache timeout values in, 477, 478, 484, 486, 494case sensitivity for authentication in, 491cells and, 483–487, 495–496, 496client key file creation in, 508, 508common secure interoperability (CSI) option in, 477, 478console group creation for, 487–488, 488, 496–497, 497copying key and trust files to nodes, 506, 511creating registry files for, 470–472custom registries in, 469, 470–482

active protocol list options in, 477, 478administrator identification for, 480, 481cache timeout values in, 477, 478common secure interoperability (CSI) option in,

477, 478creating registry files for, 470–472enabling, 476–477error messages on configuration of, 477groups registry in, 474, 475, 481–482, 481Java 2 security option in, 477, 478lightweight third party authentication (LTPA) in,

472–482, 477, 478multiple machines and, 471object request brokers (ORBs) in, 477, 478passwords in, 475–476, 476, 479, 480public key infrastructure (PKI) certificates in, 479remote method invocation/Internet InterORB

protocol (RMI/IIOP) and, 477, 478single signon (SSO) property in, 476, 476user name in, 479, 480user registry configuration in, 472–482, 473, 474

digital certificate store files, 498–513adding WebSphere server certificate to trust file in,

505, 505, 506, 510–512, 512

copying key and trust files to all nodes, 506, 511,512

deleting signer certificates in, 502dummy key and trust files shipped with WebSphere

and, 470, 498, 499–507iKeyman utility in, 499–507key store files in, 498new client key file creation in, 508, 508new key file creation in, 500, 500, 501new trust file creation in, 504–505passwords in, 513replacing dummy files in, 507–513replacing, 498–513, 498self-signed certificate creation in, 502–504, 503,

504, 508–510, 509SSL configuration repertoires and, 498–499, 498, 499trust file attribute setting for, 506, 507trust file creation in, 510trust store files in, 498updating client properties files for, 512validity period setting in, 509

digital certificates in, 469distinguished name (DN) in, 490–491domain name in, 484–485dummy key and trust files shipped with WebSphere

and, 470, 498, 499–507enabling, 476–477error messages on configuration of, 477, 479, 486,

495–496, 496expired/mismatched certificates alert, 568–569, 569global security option in, 485, 486, 494, 494groups registry in, 474, 475, 481–482, 481host names in, 490HTTP Server (IBM) and, 116, 117iKeyman utility in, 499–507Java 2 Enterprise Edition (J2EE) in, 469Java 2 security option in, 477, 478, 485–486Java Authorization Contract for Containers (JACC)

and, 24key file creation in, 500, 500, 501key store files in, 498lightweight directory access protocol (LDAP) registry

and, 469, 488–497active protocol list options, 494administrator identification for, 496–497, 497advanced settings (Additional Properties) for,

491–492, 493authentication in, 493cache timeout values, 494case sensitivity for authentication in, 491console group creation for, 496–497, 497distinguished name (DN) for, 490–491error messages on configuration of, 495–496, 496global security settings for, 494, 494

Note: Boldface numbers indicate illustrations; t indicates a table. 791

Index

Page 22: was2 contents 1 - MC Press Onlineeditorial.mcpressonline.com/web/mcpdf.nsf/wdocs/... · First Steps tool to verify installation of, 63, 67–68, 67 fixes for, applying, 63–64 flow

security, LDAP, continuedgroup filter options in, 491host names in, 490IBM Tivoli Directory Server (ITDS) in, 489Java 2 security in, 494lightweight third party authentication (LTPA), 493,

494passwords in, 490port configuration for, 490reuse connection option in, 491search timeout setting in, 491Secure Sockets Layer (SSL) and, 489, 491server identity for, 489single signon (SSO) property, 493synchronization of nodes issues in, 495–496, 496user registry in, 490–491, 490

lightweight third party authentication (LTPA), 472,477, 478, 484, 485, 486, 493, 494

MBeans and, 763multiple machines and, 471object request brokers (ORBs) in, 477, 478operating system registries in, 469, 482–488, 483

cache timeout values, 484, 486console group creation for, 487–488, 488domain name for, 484–485error messages on configuration of, 486global security option in, 485, 486Java 2 security in, 485–486lightweight third party authentication (LTPA), 484,

485, 486single signon (SSO) property, 484, 485user and group configuration for, 482–483WebSphere security configuration for, 483

passwords in, 469, 475–476, 476, 479, 480, 490, 513port configuration for, 490public key infrastructure (PKI) certificates in, 479registry for, 469remote method invocation/Internet InterORB protocol

(RMI/IIOP) and, 477, 478reuse connection option in, 491search timeout setting in, 491Secure Sockets Layer (SSL) and, 50, 489, 491,

498–499, 498, 598–599self-signed certificate creation in, 502–504, 503, 504,

508–510, 509single signon (SSO) property in, 476, 476, 484, 485synchronization of nodes issues in, 495–496, 496Tivoli Access Manager and, 24trust file creation in, 504–505, 510trust store files in, 498user IDs/names and, 469, 479, 480user registry in, 472–482, 473, 474, 490–491, 490WebSphere server certificate and trust file in, 505,

505, 506, 510–512, 512

self-signed certificateIBM Tivoli Directory Server (ITDS) and, 548–550,

549, 550, 548self-signed certificate creation, 502–504, 503, 504, 502self-signed certificate creation, 508–510, 509, 508Service Data Objects (SDOs), 24Service Integration Bus (SIBus), 23, 25, 337–351,

637–654adding server or cluster as member of, 644–645, 645adding, 644, 644application server and, 8, 72–73, 73Endpoint Listener (HTTP) application for, 647–648,

648, 649federating nodes and, 235files required by, in Stock Quote sample, 643, 643high availability manager and, 23, 337–351

core groups and active coordinator for, 345–346,345, 346

policies set for, 346–348, 346, 347highly available/workload-managed (HA/WLM)

clustering and, creation/configuration of, 46, 46inbound services and, 637, 649–650, 650installation of, 643–652installation script (sibwsInstall.jacl) for, 646message flow in, 637–639, 638messaging engine and, 338–344, 338, 637

cluster specified for, 340, 341data store for, 339, 339SIBus creation in, 340–341, 340, 341verifying messaging engine configuration and

failover in, 341–342, 342workload sharing (optional) configuration for,

342–344, 343, 344Network Deployment package application server

profile and, 216outbound Web services and, 637persistent service configuration in, 348–351, 348, 349

enabling, 350, 350transaction log directories for, 349transaction service configuration for, 349, 350verifying, 351, 351

resource adapter installation for, 646Service Data Objects (SDO) repository for, 645, 646singleton services and, 344testing, 651–652, 652updating client to use of, 651, 651Web Service Definition Language (WSDL) definitions

in, 645Web services enabled through, 637Web Services Explorer and, invoking through, 652, 653Web services without use of, 639–642WebSphere Bank and, 718, 723, 723WSDL2JAVA command and, 652

792

Index

Page 23: was2 contents 1 - MC Press Onlineeditorial.mcpressonline.com/web/mcpdf.nsf/wdocs/... · First Steps tool to verify installation of, 63, 67–68, 67 fixes for, applying, 63–64 flow

Service Integration Bus Web Services Enablement(SIBWS), 216

servlets, 1, 735dynamic caching and, 435, 436, 439, 439packaging in J2EE and, 699

session failover, 314–320database session persistence and, using hitcount,

332–334, 333, 334memory-to-memory replication, using hitcount,

315–320, 316–320session persistence, 25, 43–46, 44, 45, 46, 309–336

database, 45, 45, 46, 320–334, 321cluster preparation for, 323, 323configuring, 321, 322database creation for, 322DB2 installation and database creation in, 334–336,

335, 336hitcount to verify, 321Java 2 Connector (J2C) authentication in, 321,

325–326, 326Java Database Connectivity (JDBC) provider in,

321, 326–329, 327, 328, 329Java Naming and Directory Interface (JNDI) name

for, 321, 330–332, 331nodes and clusters accessible to, 322–323, 323session failover verification in, using hitcount,

332–334, 333, 334testing database connection from admin console,

329–330, 330user name and passwords for, 322WebSphere variable pointing to Type 4 drivers for,

324–326, 324, 325highly available persistent service and,

enable/configuration for, 43, 43highly available/workload-managed (HA/WLM)

clustering and, 26memory-to-memory replication, 43–44, 44, 309–320, 310

client-only mode in, 311client–server mode in, 311cluster members and, 309configuring, 311–314, 311, 312hitcount to verify session failover in, 315–320,

316–320HTTP session failover in, 314–320log files for, 314mode for, 311, 313, 313replication domain in, 309, 311–312, 312selecting, 313server-only mode in, 311starting the cluster after, 313–314, 314tracing for, 320tracing for, 314, 314, 320

session failover in, 314–320

showlog tool, 680–681, 681–682silent installation. See also application servers

application server and, 104–110, 107verifying installation of, 133

simple mail transfer protocol (SMTP), 701Simple Object Access Protocol (SOAP)

federating nodes and, 234–235, 235IBM Tivoli Directory Server (ITDS) and, 516port configuration and, 61, 198

single signon (SSO) property, 476, 476, 484, 485, 493singleton services, 344Snoop servlet, 34, 341, 40, 40

dynamic caching and, 445–446, 446, 452–453, 453,461, 461

Network Deployment package product binaries and,168–169, 169, 170

verifying installation and, 69–70, 70local, managed node of distributed plug-in, to verify,

265, 265remote, managed node of distributed plug-in and, to

verify, 274, 274dynamic caching disabled and, 437–438, 437, 438

SnoopMBean.java code, 764SnoopMBean.xml code, 764–766SnoopMBeanImpl.java code, 764spraying requests

Base/Express package without support for, 12, 12Network Deployment package for, 12

SQL Server, Network Deployment package and, 16SSL configuration repertoires, 498–499, 498, 499standards support for WAS v. 6, 1–2, 2static content

dynamic caching and, 447HTTP Server (IBM) and, 122

sticky time, 386–387stickymask (affinity address mask), 390suffix for directory tree, IBM Tivoli Directory Server

(ITDS) and, 523–525, 524Sybase, Network Deployment package and, 16Symptoms database, Log Analyzer and, 680synchronizing date and time (clock), 31synchronizing nodes, 495–496system administrator, packaging in J2EE and, 704system application locations, 21

TTCP/IP network and port configuration, highly

available/workload-managed (HA/WLM) clusteringand, 30–31, 30t

templates vs. profiles, 8–9, 9, 14–15, 15thread dumping in, 682–683TIBCO, 8

Note: Boldface numbers indicate illustrations; t indicates a table. 793

Index

Page 24: was2 contents 1 - MC Press Onlineeditorial.mcpressonline.com/web/mcpdf.nsf/wdocs/... · First Steps tool to verify installation of, 63, 67–68, 67 fixes for, applying, 63–64 flow

time, synchronizing date and time (clock), 31timeout setting, dynamic caching and, 441, 442Tivoli Access Manager (TAM), 5, 24Tivoli Directory Server. See IBM Tivoli Directory ServerTivoli Performance Viewer (TPV), 21, 21, 687–688, 688tool provider, packaging in J2EE and, 703trace strings, 657–659, 659ttracing, 655–668

advanced format of, 666application server trace service and, management of,

664–665basic format of, 666configuring, 659–660, 660diagnostic settings for, 666–668Dump Files and, 668Enable Log in, 667enabling at server startup, 659–662, 660, 661enabling on running server, 662–663, 662fields in output of, 665–666HTTP Server (IBM) and, 129–130, 130IBM Tivoli Directory Server (ITDS) and, 558interpreting output from, 665–666Log Analyzer format of, 666logging and, 656–657memory-to-memory replication and, 314, 320Saving changes to configuration and, 668strings for, trace and logging, 657–659, 659tTrace Output format in, 668Trace Output properties in, 667

transaction logs, High Availability Manager (HAManager) and, 23

transport chain configuration, dynamic caching and, 440, 441trust store files, digital certificates and, 498TSM.java source code, J2EE Management API and, 744,

744–748

UUniform Resource Identifier (URI), local plug-in for

HTTP Server and, 139uninst directory

application server and, 65HTTP Server (IBM) and, 123

unit of work (UOW) entries in, 677–678Unix, 2

administrative privileges for setup of, 32application server and, xclock or xeyes command for,

56, 56unsupported architectures in, no spraying, 12, 12update installer tool, 606update program run for product update installation,

613–614, 613, 614updates. See product update installationupgrades, application server and, 94–96, 95, 96

user IDs, 469local, unmanaged node of distributed plug-in and, 267remote, unmanaged node of distributed plug-in and, 277

user name, 479, 480user privileges, in highly available/workload-managed

(HA/WLM) clustering, 29–30, 29user registry configuration, security and, 472–482, 473, 474

Vvalidity period setting in, for certificates, 509verbose class loader, 693, 693verbose garbage collection (GC) in, 690–692, 691, 692verifying installations, 133

admin console for, 68–69, 68, 69application server and, 63, 66browser for, using default application for, 69–72, 120federating nodes

using admin console, 237–239, 237, 238, 239using log files, 236–237, 236, 237

First Steps tool for, 63, 67–68, 67hello servlet for, 70, 70highly available/workload-managed (HA/WLM)

clustering and, 26–27, 27hitcount servlet for, 70–72, 71horizontal clustering and, 305–307, 306, 307HTTP Server (IBM) and, 118–120, 134–135local plug-in for HTTP Server and, 147–151, 148–151local, managed node of distributed plug-in, 263, 265local, unmanaged node of distributed plug-in and, 267,

269log files for, 66, 66, 67, 119Network Deployment package

application server profile and, using First Stepsconsole, 212–213, 213

custom profile and, 219, 220deployment manager and, First Steps console for,

201, 201, 202product binaries, 189–190silent installation and, 226

remote, managed node of distributed plug-inbrowser for, 274, 274log and configuration files for, 272

remote, unmanaged node of distributed plug-inusing browser, 279using log and configuration files, 277

snoop servlet, 69–70, 70vertical clustering and, 294–296, 294, 295, 296Windows services, 72, 119–120, 119

VeriSign certificate signing request (CSR), 576–579, 577,578. See also Secure Sockets Layer (SSL):, 576

versionInfo utility, 606, 608–609, 609, 689, 689–690vertical clustering. See clustering (horizontal and vertical)

794

Index

Page 25: was2 contents 1 - MC Press Onlineeditorial.mcpressonline.com/web/mcpdf.nsf/wdocs/... · First Steps tool to verify installation of, 63, 67–68, 67 fixes for, applying, 63–64 flow

virtual hostSecure Sockets Layer (SSL) and HTTP Server (IBM)

and, 562, 567–568Secure Sockets Layer (SSL) and, aliases for, 595–596,

595

WWASService command, 627–628, 628. See also Windows

servicesWeb Administrator Tool, IBM Tivoli Directory Server

(ITDS) and, 525–528, 526Web archive (WAR) files, packaging in J2EE and, 702Web container

application server and, 7packaging in J2EE and, 701

Web serversmultiple, with multiple application server profiles,

170–175, 171–175unconfiguring definition from application server in,

177–178, 178Web services, 1, 639–642

implementation details of, Stock Quote sample, 642, 642inbound services and, 637, 649–650, 650installation of, 639–640, 640, 641outbound, 637Samples Gallery of, 639–640, 640SIBus and, 637–654. See also Service Integration Bus

(SIBus)updating client to SIBus use, 651, 651verifying operation of, 641–642, 642Web Services Explorer and, invoking through, 652, 653

Web services engine, application server and, 7WebSphere Application Server v 6

admin console for, 20, 20AdminTask global object in, 23application properties displayed in, navigating, 20, 20application server in, standalone, 6–9, 6application-update capabilities in, 23Base package in, 2–5, 4, 11–12, 11, 12. See also Base

packageconfiguration archiving in, 23Data Replication Service (DRS) and, 24enterprise archive (EAR) file support in, 23Enterprise JavaBeans (EJBs) and, 24Express package in, 2, 3–5, 4, 11–12, 11, 12. See also

Express packageExtended Deployment (XD) page in, 3High Availability Manager (HA Manager) and, 23HTTP Server (IBM) in, 9–10, 10, 22, 22instances, multiple, and product binary files, 21Java Authorization Contract for Containers (JACC)

and, 24

Java Message Service and, 23messaging engine in, 23Network Deployment package in, 3, 3, 5–6, 5, 13–14,

13. See also Network Deployment packagenew features in, 20–24packaging and architecture of, 1–24platform support for, 2plug-ins and, installation of, 22, 22product update installation and, 606–608Secure Sockets Layer (SSL) and, ITDS and, 598–603scopes, in configuration of resources and variables, 23Service Data Objects (SDOs) in, 24standards support for, 1–2, 2system application locations in, 21Tivoli Performance Viewer (TPV) in, 21, 21unsupported architectures in, 12, 12WebSphere Rapid Deployment (WRD) and, 23, 50

WebSphere Bank, 710–711, 717–730alias name for, 717, 718–719, 719Application Server Toolkit (AST) and, 717connection factory for, 718, 722, 722data source for, 718, 720, 721Enterprise Application Archive (EAR) and, 710–711, 717Java Message Service (JMS) connection factory for,

718, 724, 725JDBC provider for, 717, 719, 720manual installation of, 717–730resources required for, 717–718service integration bus (SIBus) for, 718, 723, 723SIB JMS activation specification for, 718, 729, 729SIB JMS queue for, 718, 726, 726SIB queue for, 718, 727, 728SIBus member for, 718, 723–724, 724verifying existence of J2C resource adapter for, 718verifying SIB service is enabled for, 730WebSphere Rapid Deployment (WRD) and,

command-line notification from, 733, 733–734WebSphere Relational Resource Adapter and, 717, 718

WebSphere MQ, 8, 23WebSphere Rapid Deployment (WRD), 23, 50, 731–741

AutoAppInstall mode for, 732–733command-line notifications from, 733, 733–734deploying applications using, 732–741

automatic install of EAR using, 732–734, 732–733automatic removal of EAR using, 734, 734

enhanced EAR files and, 731Enterprise Application Archive (EAR) files and, 731,

732–734, 732–733freeform applications and

automatic deployment of, 735–741command-line notification for update to, 740, 741configuration of, 735HelloWorld.java source file in, 736–738

Note: Boldface numbers indicate illustrations; t indicates a table. 795

Index

Page 26: was2 contents 1 - MC Press Onlineeditorial.mcpressonline.com/web/mcpdf.nsf/wdocs/... · First Steps tool to verify installation of, 63, 67–68, 67 fixes for, applying, 63–64 flow

modifying HelloWorld output string in, 739–740notification of successful deployment in, 738–739

headless mode (without headers) for, 731invoking, 731–732J2EE and, 731monitor mode for, 733

WebSphere Relational Resource Adapter, WebSphereBank and, 717, 718

weight valueshorizontal clustering and, 304, 304vertical clustering and, 292, 293

Windows, 2loopback adapter configuration on, 364–366, 365

Windows services, 627–636application server and, 62–63, 63, 106application server process as, 630–632, 631, 632, 636argument values and, securing in registry by encoding,

633–634, 634benefits of using, 627Caching Proxy server and, 464Deployment Manager as, 628–630, 630, 636, 636federating nodes and, 235, 235, 239–240HTTP Server (IBM) and, 117–118, 118, 131–132, 132,

134IBM Tivoli Directory Server (ITDS) and, 525, 525installation wizard for, 628, 629Java processes as, benefits of, 627managing, 634–635, 634Network Deployment package deployment manager

and, 198, 198, 199, 202–203, 203node agent process as, 632–633, 633, 636profile creation and, 77

register HTTP Server processes as, and verify,135–136, 136

registration process for, 628–633removing, 635–636, 635verifying installation and, 72, 119–120, 119WASService command for configuration of, 627–628,

628WebSphere process registration and, 50

workload management (WLM). See also high availabilityworkload managementcontent-based load balancing in, 397–412, 399. See

also content-based load balancingHigh Availability Manager (HA Manager) and, 23horizontal clustering and, 305–307, 306Load Balancer and. See Load Balancer, 353rule-based load balancing in, 390–397. See also

rule-based load balancing.sticky time configuration in, 386–387vertical clustering and, 294–296, 294, 295, 296

workload sharing, messaging engine and, configurationfor, 342–344, 343, 344

wsadmin program, AdminTask global object in, 23WSDL2JAVA command, Web services and, 652

XX.509 standard, 559. See also certificate authority

certificates; digital certificates; Secure Sockets Layer(SSL)

xclock program, 56, 56xeyes command, 56, 56XML files added to EAR directory, packaging in J2EE

and, 712, 712t

796

Index