Linux环境下IBM WebSphere Portal v8.5独立服务器启用安全性操作记录_失败案例

死siua11 · 发表于 2015-10-4 07:46:04

　　本文用于记录在Linux环境下IBM WebSphere Portal v8.5独立服务器启用安全性的操作步骤；
　　警告信息：
　　其实本篇文章并没有完成启用安全性，虽然试验了很多次但是最终结果都是失败（BUILD FAILED），而且没有找到原因，甚是郁闷！特此记录操作方式和错误信息以备参考。
　　环境说明：
　　硬件环境：Lenovo E440, i7, 12GB, 500GB；
　　虚拟设备：VMWare WorkStation 11 + RHEL5.6 X64；
　　产品说明：IBM WebSphere Portal v8.5、DB2 v9.7、Tivoli Directory Server v6.3；

一、添加TDS目录后缀

1、命令行方式添加后缀

cd /opt/ibm/ldap/V6.3/sbin
./idscfgsuf -I idsldap -s "dc=portal,dc=xushuai,dc=org"
2、图形界面方式添加后缀
　　TDS提供了配置工具来配置TDS实例，其中包括了对后缀的管理；

启动配置工具
　　方式1：可以使用idsxinst实例管理工具中的管理（Manage）进入配置工具界面；

./idsxinst

　　在左侧列表中选择实例，点击右侧的“Manage”按钮进入“配置工具”界面；
　　方式2：也可以直接使用idsxcfg命令直接进入配置工具界面；

./idsxcfg –I idsldap

使用配置工具添加目录后缀
　　在配置工具界面中点击左侧菜单中的“Manage suffixes”进入后缀管理界面；

　　在Suffix DN文本框中输入需要添加的后缀信息：

dc=portal,dc=xushuai,dc=org
　　然后点击右侧的“Add”按钮完成后缀添加；添加完后缀的界面如下图所示：

二、导入初始LDIF数据
　　安装完成的WPS提供了一份初始化用户和组的LDIF文件；
　　文件位置：

/opt/IBM/WebSphere/PortalServer/installer/wp.iim/ldif/PortalUsers.ldif
　　原始文件内容如下：

version: 1
# NOTE: you must edit this file before importing it and replace all
# occurrences of the default suffix "dc=yourco,dc=com" with the suffix
# that your LDAP server is configured for.
dn: dc=com
objectclass: domain
objectclass: top
# Add lines according to this scheme that correspond to your suffix
dc: com
dn: dc=yourco,dc=com
objectclass: domain
objectclass: top
# Add lines according to this scheme that correspond to your suffix
dc: yourco
dn: cn=users,dc=yourco,dc=com
objectclass: container
objectclass: top
cn: users
dn: cn=groups,dc=yourco,dc=com
objectclass: top
objectclass: container
cn: groups
dn: uid=wpsadmin,cn=users,dc=yourco,dc=com
objectclass: organizationalPerson
objectclass: person
objectclass: top
objectclass: inetOrgPerson
uid: wpsadmin
userpassword: wpsadmin
sn: admin
givenName: wps
cn: wps admin

dn: uid=wpsbind,cn=users,dc=yourco,dc=com
objectclass: top
objectclass: person
objectclass: organizationalPerson
objectclass: inetOrgPerson
uid: wpsbind
userpassword: wpsbind
sn: bind
givenName: wps
cn: wps bind
dn: cn=wpsadmins,cn=groups,dc=yourco,dc=com
objectclass: groupOfUniqueNames
objectclass: top
uniquemember: uid=wpsadmin,cn=users,dc=yourco,dc=com
cn: wpsadmins
　　替换LDIF文件中的默认后缀“dc=yourco,dc=com”为上一步骤添加的“dc=portal,dc=xushuai,dc=org”后缀；

version: 1
# NOTE: you must edit this file before importing it and replace all
# occurrences of the default suffix "dc=xushuai,dc=org" with the suffix
# that your LDAP server is configured for.
dn: dc=org
objectclass: domain
objectclass: top
# Add lines according to this scheme that correspond to your suffix
dc: org
dn: dc=xushuai,dc=org
objectclass: domain
objectclass: top
# Add lines according to this scheme that correspond to your suffix
dc: xushuai
dn: dc=portal,dc=xushuai,dc=org
objectclass: domain
objectclass: top
# Add lines according to this scheme that correspond to your suffix
dc: portal
dn: cn=users,dc=portal,dc=xushuai,dc=org
objectclass: container
objectclass: top
cn: users
dn: cn=groups,dc=portal,dc=xushuai,dc=org
objectclass: top
objectclass: container
cn: groups
dn: uid=wpsadmin,cn=users,dc=portal,dc=xushuai,dc=org
objectclass: organizationalPerson
objectclass: person
objectclass: top
objectclass: inetOrgPerson
uid: wpsadmin
userpassword: passw0rd
sn: admin
givenName: wps
cn: wps admin

dn: uid=wpsbind,cn=users,dc=portal,dc=xushuai,dc=org
objectclass: top
objectclass: person
objectclass: organizationalPerson
objectclass: inetOrgPerson
uid: wpsbind
userpassword: passw0rd
sn: bind
givenName: wps
cn: wps bind
dn: cn=wpsadmins,cn=groups,dc=portal,dc=xushuai,dc=org
objectclass: groupOfUniqueNames
objectclass: top
uniquemember: uid=wpsadmin,cn=users,dc=portal,dc=xushuai,dc=org
cn: wpsadmins
　　完成后，将修改完成的LDIF数据上传至服务器中，此次上传至“/opt”目录。

方式1：使用idsldif2db命令导入LDIF数据
　　TDS提供了idsldif2db命令可以完成LDIF文件的数据导入，命令如下：

./idsldif2db -I idsldap -i /opt/PortalUsers.ldif

方式2：使用配置工具导入LDIF数据
　　使用如下命令启动TDS实例配置工具：

./idsxcfg –I idsldap
　　在左侧菜单中展开“LDIF tasks”节点，点击“Import LDIF data”菜单项，进入LDIF文件导入界面；

　　在“Path and LDIF file name”区域，点击“Browse”按钮，切换路径选择刚才上传的PortalUsers.ldif文件；

　　点击“OK”按钮，返回导入界面，下拉滚动条，点击界面右下部的Import按钮；

　　此时，系统将自动进行数据导入，并在“Task messages”界面中显示日志信息；
　　完成后系统弹出成功信息；

方式3：使用LDAPBrower等工具导入LDIF数据
　　可以使用LDAP客户端工具完成LDIF数据的导入，比较常用的LDAP客户端工具有：LDAPBrower、Apache LDAP Studio等；
　　本章节使用LDAPBrowser演示如何使用工具导入LDIF数据；
　　使用LDAPBrowser配置LDAP服务器的连接参数，连接成功后点击工具栏中的LDIF，然后选择Import，找到导入的PortalUsers.ldif文件，然后点击Import按钮完成数据导入；

　　导入完成后的数据如下：

三、使用配置向导生成启用安全性脚本

3.1、启动配置向导服务器实例
　　配置向导服务器实例的路径和启动命令如下：

/opt/IBM/WebSphere/AppServer/profiles/cw_profile/bin
./startServer.sh server1

3.2、使用配置向导生成启用安全性脚本
　　1、登录配置向导
　　在浏览器中输入配置向导地址：

http://192.168.121.135:10200/ibm/wizard
　　输入管理员账号和密码后点击登录按钮进入配置向导主界面；

　　2、进入独立服务器的启用安全性配置界面
　　在配置向导主界面中依次点击“设置独立服务器-》启用联合安全性”；

　　3、设置启动联合安全性的系统信息
　　在系统信息界面中配置门户相关的系统信息，包括操作系统类型、概要文件名称和概要文件目录信息；
　　系统会自动检测这些信息并自动填充表单；

目标操作系统	Linux
目标Portal概要文件名称	wp_profile
目标Portal概要文件主目录	/opt/IBM/WebSphere/wp_profile

　　确认无误后点击右侧的箭头按钮进入下一步设置界面；
　　4、设置启用联合安全性的安全设置

用户注册表软件	IBM Directory Server
是否需要在门户网站服务器与用户注册表之间使用SSL	否，不启用SSL
门户网站是否可以更新LDAP注册表中的条目	否，门户网站无法修改条目
使用LDAP用户注册表中存储的管理员标识	是，请使用LDAP用户注册表中的标识

　　确认无误后点击右侧的箭头按钮进入下一步设置界面；
　　5、设置启用联合安全性的基于文件的管理员

WebSphere Applicatoin Server管理员标识	wpsadmin
WebSphere Applicatoin Server管理员密码	********
重新输入密码	********
WebSphere Portal管理员标识	wpsadmin
WebSphere Portal管理员密码	********
重新输入密码	********

　　确认无误后点击右侧的箭头按钮进入下一步设置界面；
　　6、设置启用联合安全性的用户注册表信息

LDAP存储库标识	idsldap
LDAP主机名	wpstds.xushuai.org
LDAP端口	389
基本专有名称	dc=portal,dc=xushuai,dc=org
绑定DN	cn=root
绑定密码	********
重新输入密码	********
LDAP中的管理员组DN	cn=wpsadmins,cn=groups,dc=portal,dc=xushuai,dc=org
LDAP中的管理员DN	uid=wpsadmin,cn=users,dc=portal,dc=xushuai,dc=org
LDAP中的管理员密码	********
重新输入密码	********

　　确认无误后点击右侧的箭头按钮进入下一步设置界面；
　　7、进入启用联合安全性的配置界面

　　在该界面中，已经完成了启用联合安全性的参数配置，系统自动生成了配置脚本；
　　点击“下载配置脚本”链接下载配置脚本至本地，得到名称为“WorkflowInstanceScriptsAll.zip”的配置脚本。

四、执行脚本启用安全性

4.1、执行脚本启用安全性步骤

步骤	操作内容
1	验证 LDAP 服务器设置。　　脚本：ValidateFederatedLDAP
2	将 LDAP 用户注册表添加到缺省联合存储库。脚本：EnableFederatedLDAPSecurity
3	更新在其中存储新用户和组的用户注册表。脚本：SetEntityTypes
4	注册 WebSphere Application Server 调度程序任务。脚本：ReregisterSchedulerTasks
5	将基于文件的 WebSphere Portal 和 WebSphere Application Server 用户和组替换为 LDAP 服务器中的用户和组。脚本：ChangeWASAdminUser
6	完成安全更改后，重新启动服务器。脚本：RecycleAfterSecurityChangeFirst
7	更新搜索管理用户。脚本：UpdateSearchAdminUser
8	更改安全模型之后，必须重新启动服务器。重新启动门户网站服务器。脚本：RecycleAfterSecurityChange
9	验证所有已定义的属性是否在配置的 LDAP 用户注册表中可用。脚本：ValidateFederatedLDAPAttributes
10	手动步骤：映射属性以确保 WebSphere Portal 和 LDAP 服务器之间能够正常通信。

4.2、上传脚本并赋权
　　使用FTP工具将下载得到的启用安全性脚本压缩包上传至服务器；
　　使用unzip命令解压压缩包并给所有文件赋予执行权限；

4.3、执行启用安全性

1、验证LDAP服务器设置
　　执行scripts目录下名为“ValidateFederatedLDAP.sh”的脚本可以验证LDAP服务器设置正确性。

cd /opt/WorkflowInstanceScriptsAll/scripts
./ValidateFederatedLDAP.sh
2、将LDAP用户注册表添加到缺省联合存储库
　　执行scripts目录下名为“EnableFederatedLDAPSecurity.sh”的脚本可以将LDAP用户注册表添加到缺省联合存储库中；

cd /opt/WorkflowInstanceScriptsAll/scripts
./EnableFederatedLDAPSecurity.sh
3、更新在其中存储新用户和组的用户注册表
　　执行scripts目录下名为“SetEntityTypes.sh”脚本可以更新在其中存储新用户和组的用户注册表；

cd /opt/WorkflowInstanceScriptsAll/scripts
./SetEntityTypes.sh
　　结果：在执行此脚本的过程中发生错误，构建失败，后续内容无法执行。试验多次均同样效果，甚是郁闷。。。

五、启用安全性错误信息
　　在启用安全性的时候完整错误信息如下所示：

/opt/IBM/WebSphere/ConfigEngine/config/includes/wp_security_pub.xml:1000: Update entity type failed.
at com.ibm.wplc.deploy.tasks.impl.SupportedEntityTypeUpdateImpl.execute(SupportedEntityTypeUpdateImpl.java:39)
at com.ibm.wplc.deploy.tasks.AbstractBaseAdminTask.executeBean(AbstractBaseAdminTask.java:541)
at com.ibm.wplc.deploy.tasks.AbstractBaseAdminTask.executeTask(AbstractBaseAdminTask.java:525)
at com.ibm.wplc.deploy.tasks.AbstractBaseWsAdminWrapperTask.executeTask(AbstractBaseWsAdminWrapperTask.java:395)
at com.ibm.wplc.deploy.tasks.AbstractBaseAdminTask.execute(AbstractBaseAdminTask.java:175)
at org.apache.tools.ant.UnknownElement.execute(UnknownElement.java:275)
at org.apache.tools.ant.Task.perform(Task.java:364)
at org.apache.tools.ant.Target.execute(Target.java:341)
at org.apache.tools.ant.Target.performTasks(Target.java:369)
at org.apache.tools.ant.Project.executeSortedTargets(Project.java:1216)
at org.apache.tools.ant.Project.executeTarget(Project.java:1185)
at com.ibm.wps.config.tasks.AntCallTask.execute(AntCallTask.java:133)
at org.apache.tools.ant.UnknownElement.execute(UnknownElement.java:275)
at org.apache.tools.ant.Task.perform(Task.java:364)
at org.apache.tools.ant.Target.execute(Target.java:341)
at org.apache.tools.ant.Target.performTasks(Target.java:369)
at org.apache.tools.ant.Project.executeSortedTargets(Project.java:1216)
at org.apache.tools.ant.Project.executeTarget(Project.java:1185)
at com.ibm.wps.config.tasks.AntCallTask.execute(AntCallTask.java:133)
at org.apache.tools.ant.UnknownElement.execute(UnknownElement.java:275)
at org.apache.tools.ant.Task.perform(Task.java:364)
at org.apache.tools.ant.Target.execute(Target.java:341)
at org.apache.tools.ant.Target.performTasks(Target.java:369)
at org.apache.tools.ant.Project.executeSortedTargets(Project.java:1216)
at org.apache.tools.ant.Project.executeTarget(Project.java:1185)
at org.apache.tools.ant.helper.DefaultExecutor.executeTargets(DefaultExecutor.java:40)
at org.apache.tools.ant.Project.executeTargets(Project.java:1068)
at org.apache.tools.ant.Main.runBuild(Main.java:668)
at org.apache.tools.ant.Main.startAnt(Main.java:187)
at org.apache.tools.ant.Main.start(Main.java:150)
at com.ibm.wps.config.ConfigEngine.process(ConfigEngine.java:981)
at com.ibm.wps.config.ConfigEngine.main(ConfigEngine.java:219)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:88)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:55)
at java.lang.reflect.Method.invoke(Method.java:618)
at org.python.core.PyReflectedFunction.__call__(PyReflectedFunction.java)
at org.python.core.PyMethod.__call__(PyMethod.java)
at org.python.core.PyObject.__call__(PyObject.java)
at org.python.core.PyInstance.invoke(PyInstance.java)
at org.python.pycode._pyx50.f$0(<string>:78)
at org.python.pycode._pyx50.call_function(<string>)
at org.python.core.PyTableCode.call(PyTableCode.java)
at org.python.core.PyCode.call(PyCode.java)
at org.python.core.Py.runCode(Py.java)
at org.python.core.Py.exec(Py.java)
at org.python.util.PythonInterpreter.exec(PythonInterpreter.java)
at com.ibm.bsf.engines.jython.JythonEngine$BSFPythonInterpreter.exec(Unknown Source)
at com.ibm.bsf.engines.jython.JythonEngine.exec(Unknown Source)
at com.ibm.bsf.BSFManager$6.run(Unknown Source)
at java.security.AccessController.doPrivileged(AccessController.java:330)
at com.ibm.bsf.BSFManager.exec(Unknown Source)
at com.ibm.ws.scripting.AbstractShell.executeScript(AbstractShell.java:1214)
at com.ibm.ws.scripting.AbstractShell.run(AbstractShell.java:2271)
at com.ibm.ws.scripting.WasxShell.main(WasxShell.java:1108)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:88)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:55)
at java.lang.reflect.Method.invoke(Method.java:618)
at com.ibm.wsspi.bootstrap.WSLauncher.launchMain(WSLauncher.java:234)
at com.ibm.wsspi.bootstrap.WSLauncher.main(WSLauncher.java:96)
at com.ibm.wsspi.bootstrap.WSLauncher.run(WSLauncher.java:77)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:88)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:55)
at java.lang.reflect.Method.invoke(Method.java:618)
at org.eclipse.equinox.internal.app.EclipseAppContainer.callMethodWithException(EclipseAppContainer.java:587)
at org.eclipse.equinox.internal.app.EclipseAppHandle.run(EclipseAppHandle.java:198)
at org.eclipse.core.runtime.internal.adaptor.EclipseAppLauncher.runApplication(EclipseAppLauncher.java:110)
at org.eclipse.core.runtime.internal.adaptor.EclipseAppLauncher.start(EclipseAppLauncher.java:79)
at org.eclipse.core.runtime.adaptor.EclipseStarter.run(EclipseStarter.java:369)
at org.eclipse.core.runtime.adaptor.EclipseStarter.run(EclipseStarter.java:179)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:88)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:55)
at java.lang.reflect.Method.invoke(Method.java:618)
at org.eclipse.core.launcher.Main.invokeFramework(Main.java:340)
at org.eclipse.core.launcher.Main.basicRun(Main.java:282)
at org.eclipse.core.launcher.Main.run(Main.java:981)
at com.ibm.wsspi.bootstrap.WSPreLauncher.launchEclipse(WSPreLauncher.java:380)
at com.ibm.wsspi.bootstrap.WSPreLauncher.main(WSPreLauncher.java:151)
Caused by: com.ibm.websphere.management.cmdframework.CommandException: javax.management.JMRuntimeException: CWWMN0022E: Access is denied for the getCommandMetaInfo operation on RemoteCommandMgr MBean because of insufficient or empty credentials.
at com.ibm.ws.management.cmdframework.impl.ClientCommandMgr.initCommandMetadata(ClientCommandMgr.java:361)
at com.ibm.ws.management.cmdframework.impl.ClientCommandMgr.createCommand(ClientCommandMgr.java:295)
at com.ibm.wplc.deploy.tasks.impl.SupportedEntityTypeUpdateImpl.runUpdateCommand(SupportedEntityTypeUpdateImpl.java:56)
at com.ibm.wplc.deploy.tasks.impl.SupportedEntityTypeUpdateImpl.execute(SupportedEntityTypeUpdateImpl.java:31)
... 80 more
Caused by: javax.management.JMRuntimeException: CWWMN0022E: Access is denied for the getCommandMetaInfo operation on RemoteCommandMgr MBean because of insufficient or empty credentials.
at com.ibm.ws.management.connector.soap.SOAPConnectorClient.handleAdminFault(SOAPConnectorClient.java:959)
at com.ibm.ws.management.connector.soap.SOAPConnectorClient.invokeTemplateOnce(SOAPConnectorClient.java:924)
at com.ibm.ws.management.connector.soap.SOAPConnectorClient.invokeTemplate(SOAPConnectorClient.java:689)
at com.ibm.ws.management.connector.soap.SOAPConnectorClient.invokeTemplate(SOAPConnectorClient.java:679)
at com.ibm.ws.management.connector.soap.SOAPConnectorClient.invoke(SOAPConnectorClient.java:665)
at com.ibm.ws.management.connector.soap.SOAPConnectorClient.invoke(SOAPConnectorClient.java:487)
at com.sun.proxy.$Proxy2.invoke(Unknown Source)
at com.ibm.ws.management.AdminClientImpl.invoke(AdminClientImpl.java:224)
at com.ibm.ws.management.cmdframework.impl.ClientCommandMgr.initCommandMetadata(ClientCommandMgr.java:317)
... 83 more
--- Nested Exception ---
com.ibm.websphere.management.cmdframework.CommandException: javax.management.JMRuntimeException: CWWMN0022E: Access is denied for the getCommandMetaInfo operation on RemoteCommandMgr MBean because of insufficient or empty credentials.
at com.ibm.ws.management.cmdframework.impl.ClientCommandMgr.initCommandMetadata(ClientCommandMgr.java:361)
at com.ibm.ws.management.cmdframework.impl.ClientCommandMgr.createCommand(ClientCommandMgr.java:295)
at com.ibm.wplc.deploy.tasks.impl.SupportedEntityTypeUpdateImpl.runUpdateCommand(SupportedEntityTypeUpdateImpl.java:56)
at com.ibm.wplc.deploy.tasks.impl.SupportedEntityTypeUpdateImpl.execute(SupportedEntityTypeUpdateImpl.java:31)
at com.ibm.wplc.deploy.tasks.AbstractBaseAdminTask.executeBean(AbstractBaseAdminTask.java:541)
at com.ibm.wplc.deploy.tasks.AbstractBaseAdminTask.executeTask(AbstractBaseAdminTask.java:525)
at com.ibm.wplc.deploy.tasks.AbstractBaseWsAdminWrapperTask.executeTask(AbstractBaseWsAdminWrapperTask.java:395)
at com.ibm.wplc.deploy.tasks.AbstractBaseAdminTask.execute(AbstractBaseAdminTask.java:175)
at org.apache.tools.ant.UnknownElement.execute(UnknownElement.java:275)
at org.apache.tools.ant.Task.perform(Task.java:364)
at org.apache.tools.ant.Target.execute(Target.java:341)
at org.apache.tools.ant.Target.performTasks(Target.java:369)
at org.apache.tools.ant.Project.executeSortedTargets(Project.java:1216)
at org.apache.tools.ant.Project.executeTarget(Project.java:1185)
at com.ibm.wps.config.tasks.AntCallTask.execute(AntCallTask.java:133)
at org.apache.tools.ant.UnknownElement.execute(UnknownElement.java:275)
at org.apache.tools.ant.Task.perform(Task.java:364)
at org.apache.tools.ant.Target.execute(Target.java:341)
at org.apache.tools.ant.Target.performTasks(Target.java:369)
at org.apache.tools.ant.Project.executeSortedTargets(Project.java:1216)
at org.apache.tools.ant.Project.executeTarget(Project.java:1185)
at com.ibm.wps.config.tasks.AntCallTask.execute(AntCallTask.java:133)
at org.apache.tools.ant.UnknownElement.execute(UnknownElement.java:275)
at org.apache.tools.ant.Task.perform(Task.java:364)
at org.apache.tools.ant.Target.execute(Target.java:341)
at org.apache.tools.ant.Target.performTasks(Target.java:369)
at org.apache.tools.ant.Project.executeSortedTargets(Project.java:1216)
at org.apache.tools.ant.Project.executeTarget(Project.java:1185)
at org.apache.tools.ant.helper.DefaultExecutor.executeTargets(DefaultExecutor.java:40)
at org.apache.tools.ant.Project.executeTargets(Project.java:1068)
at org.apache.tools.ant.Main.runBuild(Main.java:668)
at org.apache.tools.ant.Main.startAnt(Main.java:187)
at org.apache.tools.ant.Main.start(Main.java:150)
at com.ibm.wps.config.ConfigEngine.process(ConfigEngine.java:981)
at com.ibm.wps.config.ConfigEngine.main(ConfigEngine.java:219)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:88)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:55)
at java.lang.reflect.Method.invoke(Method.java:618)
at org.python.core.PyReflectedFunction.__call__(PyReflectedFunction.java)
at org.python.core.PyMethod.__call__(PyMethod.java)
at org.python.core.PyObject.__call__(PyObject.java)
at org.python.core.PyInstance.invoke(PyInstance.java)
at org.python.pycode._pyx50.f$0(<string>:78)
at org.python.pycode._pyx50.call_function(<string>)
at org.python.core.PyTableCode.call(PyTableCode.java)
at org.python.core.PyCode.call(PyCode.java)
at org.python.core.Py.runCode(Py.java)
at org.python.core.Py.exec(Py.java)
at org.python.util.PythonInterpreter.exec(PythonInterpreter.java)
at com.ibm.bsf.engines.jython.JythonEngine$BSFPythonInterpreter.exec(Unknown Source)
at com.ibm.bsf.engines.jython.JythonEngine.exec(Unknown Source)
at com.ibm.bsf.BSFManager$6.run(Unknown Source)
at java.security.AccessController.doPrivileged(AccessController.java:330)
at com.ibm.bsf.BSFManager.exec(Unknown Source)
at com.ibm.ws.scripting.AbstractShell.executeScript(AbstractShell.java:1214)
at com.ibm.ws.scripting.AbstractShell.run(AbstractShell.java:2271)
at com.ibm.ws.scripting.WasxShell.main(WasxShell.java:1108)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:88)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:55)
at java.lang.reflect.Method.invoke(Method.java:618)
at com.ibm.wsspi.bootstrap.WSLauncher.launchMain(WSLauncher.java:234)
at com.ibm.wsspi.bootstrap.WSLauncher.main(WSLauncher.java:96)
at com.ibm.wsspi.bootstrap.WSLauncher.run(WSLauncher.java:77)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:88)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:55)
at java.lang.reflect.Method.invoke(Method.java:618)
at org.eclipse.equinox.internal.app.EclipseAppContainer.callMethodWithException(EclipseAppContainer.java:587)
at org.eclipse.equinox.internal.app.EclipseAppHandle.run(EclipseAppHandle.java:198)
at org.eclipse.core.runtime.internal.adaptor.EclipseAppLauncher.runApplication(EclipseAppLauncher.java:110)
at org.eclipse.core.runtime.internal.adaptor.EclipseAppLauncher.start(EclipseAppLauncher.java:79)
at org.eclipse.core.runtime.adaptor.EclipseStarter.run(EclipseStarter.java:369)
at org.eclipse.core.runtime.adaptor.EclipseStarter.run(EclipseStarter.java:179)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:88)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:55)
at java.lang.reflect.Method.invoke(Method.java:618)
at org.eclipse.core.launcher.Main.invokeFramework(Main.java:340)
at org.eclipse.core.launcher.Main.basicRun(Main.java:282)
at org.eclipse.core.launcher.Main.run(Main.java:981)
at com.ibm.wsspi.bootstrap.WSPreLauncher.launchEclipse(WSPreLauncher.java:380)
at com.ibm.wsspi.bootstrap.WSPreLauncher.main(WSPreLauncher.java:151)
Caused by: javax.management.JMRuntimeException: CWWMN0022E: Access is denied for the getCommandMetaInfo operation on RemoteCommandMgr MBean because of insufficient or empty credentials.
at com.ibm.ws.management.connector.soap.SOAPConnectorClient.handleAdminFault(SOAPConnectorClient.java:959)
at com.ibm.ws.management.connector.soap.SOAPConnectorClient.invokeTemplateOnce(SOAPConnectorClient.java:924)
at com.ibm.ws.management.connector.soap.SOAPConnectorClient.invokeTemplate(SOAPConnectorClient.java:689)
at com.ibm.ws.management.connector.soap.SOAPConnectorClient.invokeTemplate(SOAPConnectorClient.java:679)
at com.ibm.ws.management.connector.soap.SOAPConnectorClient.invoke(SOAPConnectorClient.java:665)
at com.ibm.ws.management.connector.soap.SOAPConnectorClient.invoke(SOAPConnectorClient.java:487)
at com.sun.proxy.$Proxy2.invoke(Unknown Source)
at com.ibm.ws.management.AdminClientImpl.invoke(AdminClientImpl.java:224)
at com.ibm.ws.management.cmdframework.impl.ClientCommandMgr.initCommandMetadata(ClientCommandMgr.java:317)
... 83 more

Failed ANT script: /opt/IBM/WebSphere/ConfigEngine/config/includes/wp_security_pub.xml:1000:
Failed target: commit-admin-changes
Failed task: Task name could not be determined.  Please check the line number below for target details.
Probable failed component: ConfigEngine
------ Target Stack Trace  ------
commit-admin-changes
wp-update-entitytype
wp-update-entitytypes
wp-set-entitytypes
------Target Excerpt ------
950:                      wasuser="${WasUserid}"
951:                      waspassword="${WasPassword}"
952:                      name="${realmName}"
953:                      deleteBaseEntry="${temp.delete.baseDN}">
954:                   </wplc-delete-realm-baseentry>
955:             </then>
956:             <else>
957:                   <echo message="Base entries for realm '${realmName}' propRealmBaseEntryList: '${propRealmBaseEntryList}' does not contain '${temp.delete.baseDN}'. Nothing to do"/>
958:             </else>
959:          </if>
960:
961:       </target>
962:
963:       
964:       <target name="wp-query-realm">
965:       <wplc-query-realm
966:          cell="${CellName}"
967:          wasuser="${WasUserid}"
968:          waspassword="${WasPassword}">
969:       </wplc-query-realm>
970:       </target>
971:
972:       
973:       <target name="wp-query-realm-baseentry">
974:       <wplc-query-realm-baseentry
975:          cell="${CellName}"
976:          wasuser="${WasUserid}"
977:          waspassword="${WasPassword}"
978:          name="${realmName}">
979:       </wplc-query-realm-baseentry>
980:       </target>
981:
982:
983:       
984:       <target name="wp-default-realm" depends="validate-default-realm">
985:
986:             <wplc-default-realm
987:             cell="${CellName}"
988:             wasuser="${WasUserid}"
989:             waspassword="${WasPassword}"
990:             name="${defaultRealmName}">
991:             </wplc-default-realm>
992:       </target>
993:
994:       
995:       <target name="wp-update-entitytype">
996:       <wplc-update-supported-entitytype
997:          cell="${CellName}"
998:          wasuser="${WasUserid}"
999:          waspassword="${WasPassword}"
1000:**>       name="${entityTypeName}">
1001:          <attribute name="defaultParent" value="${defaultParent}"/>
1002:          <attribute name="rdnProperties" value="${rdnProperties}"/>
1003:       </wplc-update-supported-entitytype>
1004:       </target>
1005:
1006:       
1007:       <target name="wp-update-entitytypes">
1008:             <antcall target="wp-update-entitytype" >
1009:                <param name="entityTypeName" value="PersonAccount"/>
1010:                <param name="defaultParent" value="${personAccountParent}"/>
1011:                <param name="rdnProperties" value="${personAccountRdnProperties}"/>
1012:             </antcall>
1013:             <antcall target="wp-update-entitytype" >
1014:                <param name="entityTypeName" value="Group"/>
1015:                <param name="defaultParent" value="${groupParent}"/>
1016:                <param name="rdnProperties" value="${groupRdnProperties}"/>
1017:             </antcall>
1018:       </target>
1019:
1020:       
1021:       <target name="wp-set-entitytype">
1022:             <antcall target="wp-update-entitytype" >
1023:                <param name="entityTypeName" value="${entityTypeName}"/>
1024:                <param name="defaultParent" value="${defaultParent}"/>
1025:                <param name="rdnProperties" value=""/>
1026:             </antcall>
1027:             <antcall target="wp-update-entitytype" >
1028:                <param name="entityTypeName" value="${entityTypeName}"/>
1029:                <param name="defaultParent" value="${defaultParent}"/>
1030:                <param name="rdnProperties" value="${rdnProperties}"/>
1031:             </antcall>
1032:       </target>
1033:
1034:
1035:       
1036:       <target name="wp-set-entitytypes">
1037:             
1038:             <property name="localPersonAccountRdnProperties" value="${personAccountRdnProperties}" overwrite="true"/>
1039:             <property name="localGroupRdnProperties" value="${groupRdnProperties}" overwrite="true"/>
1040:             <antcall target="wp-update-entitytypes" >
1041:                   <param name="personAccountRdnProperties" value=""/>
1042:                   <param name="groupRdnProperties" value=""/>
1043:             </antcall>
1044:
1045:             
1046:             <antcall target="wp-update-entitytypes" >
1047:                   <param name="personAccountRdnProperties" value="${localPersonAccountRdnProperties}"/>
1048:                   <param name="groupRdnProperties" value="${localGroupRdnProperties}"/>
1049:             </antcall>
1050:
------- Properties and values used in the failed target -------
os.arch=amd64
WasUserid=wpsadmin
entityTypeName=PersonAccount
WasPassword=PASSWORD_REMOVED
ConfigEngineSoapTimeout=${ConfigEngineSoapTimeout}
EngineRootDir=/opt/IBM/WebSphere/ConfigEngine
rdnProperties=
enableAawsiTrace=${enableAawsiTrace}
EngineInstallLocation=/opt/IBM/WebSphere/wp_profile/ConfigEngine
WasRemoteHostName=wps85srv
WasSoapPort=10033
CellName=wps85srvCell
defaultParent=o=defaultWIMFileBasedRealm
　　错误信息提炼：
　　CWWMN0022E: Access is denied for the getCommandMetaInfo operation on RemoteCommandMgr MBean because of insufficient or empty credentials.

账号		自动登录	找回密码
密码			立即注册

告诉你如何赚取运维网社区金币

VMware vcenter+vSphere 6.5 U2共享

zabbix3.4中文手册，官网完整COPY（2019042

zabbix3.4.1安装部署+微信推送信息+大屏显

1.centOS下载

Red Hat RHCE 8 (EX294) Cert Guide

亿图图示专家(EDraw Max) V7.9 中文破解版

[经验分享] Linux环境下IBM WebSphere Portal v8.5独立服务器启用安全性操作记录_失败案例

扫码加入运维网微信交流群