启用安全性后，从Eclipse启动Websphere会挂起 [英] Starting Websphere from Eclipse hangs when security is enabled

问题描述

我有一个Websphere Application Server 8.0.0.6，它作为RAD的一部分安装。

I have a Websphere Application Server 8.0.0.6, which was installed as part of RAD.

我需要从Eclipse Java EE Kepler或Luna运行服务器。禁用管理安全性时没有问题。但是，一旦启用安全性，服务器就无法完全启动，或者Ecplise无法检测到它。

I need to run the server from an Eclipse Java EE Kepler or Luna. There is no problem when administrative security is disabled. However, once security is enabled, the server either doesn't start completely, or Ecplise is unable to to detect it.

进度条停止在23％。记录的最后一条消息是服务器server1为电子商务开放。然而，状态仍然是开始。过了一会儿，我得到一个错误，抱怨服务器没有在300秒内启动。然后它尝试停止服务器，并且无限期地停止。

The progress bar stops at 23%. The last message logged is "Server server1 open for e-business". The status however is still "starting". After a while I get an error complaining that the server didn't start within 300 seconds. It then tries to stop the server, and remains in "stopping" indefinitely.

服务器启动，Eclipse似乎无法看到它。我无法从Eclipse中访问管理控制台（虽然我可以使用浏览器），我无法发布或调试应用程序，也无法从Eclipse停止服务器。

The server is started, Eclipse just seems unable to see it. I can't access the admin console from within Eclipse (though I can with a browser), I can't publish or debug applications, and I can't stop the server from Eclipse.

Kepler和Luna都会发生这种情况。

This happens with both Kepler and Luna.

服务器在RAD中启动正常，或者在启动脚本启动时启动。

The server starts fine in RAD, or when started with the start script.

我已经检查了从RAD挂起的websphere服务器挂起;服务器server1对电子商务开放。还有一个类似的问题： RAD中的Websphere在启动时挂起，但有没有解决方案。

I have checked start websphere server from RAD hangs at "Server server1 open for e-business" . There is a similar question: Websphere in RAD hangs on startup, but there was no solution.

更新：问题是在Websphere启动之后Ecipse和Websphere之间的通信（正如wFateem也指出的那样）。

Update: The problem is the communication between Ecipse and Websphere, after Websphere has started (as wFateem also has pointed out).

Eclipse对Websphere进行SOAP调用以检查状态。如果在WAS中禁用了管理安全性，它将接受纯HTTP中的SOAP调用。启用安全性后，只允许使用HTTPS。

Eclipse makes SOAP calls to Websphere to check the status. If administrative security is disabled in WAS, it accepts SOAP calls in plain HTTP. Once security is enabled, only HTTPS is allowed.

我使用Eclipse内置的TCP-Monitor检查了Eclipse和WAS之间的通信。使用禁用的安全性，我可以看到成功的SOAP调用。启用安全性后，我希望只看到二进制SSL数据。但是，Eclipse仍在尝试使用HTTP，当然没有任何成功。

I checked communications between Eclipse and WAS using the TCP-Monitor built into Eclipse. With disabled security I can see the successful SOAP calls. After enabling security I expected to see just the binary SSL data. However, Eclipse was still trying to use HTTP, without any success of course.

Eclipse有一个WAS服务器设置，表明服务器是安全的，以及哪个用户和用于呼叫的密码。它甚至有一个与SSL通信有关的标志（在SSL握手期间自动信任服务器证书）。但是，它仍然没有出于某种原因使用SSL。

Eclipse has a setting for the WAS server to indicate that the server is secured, and which user and password to use for the calls. It even has a flag pertaining to the SSL communication ("automatically trust server certificate during SSL handshake"). But still, it is not using SSL for some reason.

我的旧开发机器上的这个场景没有问题，几天后我的当前机器取而代之之前。

I had no problem in this scenario on my old development machine, which got replaced by my current machine a few days ago.

因此，当前状态是：Eclipse在与WAS通信时不使用SSL，即使它知道服务器是安全的。

So, the current status is: Eclipse does not use SSL when talking to the WAS, even though it knows the server is secured.

现在的问题是：Eclipse没有使用SSL与安全服务器通信我做错了什么？

The question now is: What did I do wrong that Eclipse does not use SSL to talk to a secured server?

推荐答案

如果您怀疑SSL存在问题，可以尝试以下解决方法。

启动服务器后（例如通过命令行），转到Web管理控制台，然后转到：全球安全> CSIv2入站通信并在传输部分中将传输设置为 TCP-IP 。保存并重新启动服务器。这将禁用RMI / IIOP连接的SSL。

If you suspect problems with SSL, you could try the following workaround.
Once server is started (e.g. via command line), go to web admin console and then to: Global security > CSIv2 inbound communications and in transport section set transport to TCP-IP. Save and restart the server. This will disable SSL for RMI/IIOP connections.

然后在RAD服务器设置中更改服务器连接类型... 到手动提供连接设置并仅选择 RMI 。

Then in RAD in Server settings change Server connection types... to Manually provide connection settings and select only RMI.

检查它是否会更好。

作为最后的手段，您也可以尝试启动服务器，然后退出RAD并再次重新启动RAD，它应该检测服务器已经运行。但它不是很有用......

As last resort you could also try to start the server, then exit the RAD and restart the RAD again, it should detect server as already running. But it's not very useful...

这篇关于启用安全性后，从Eclipse启动Websphere会挂起的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！