Websphere : Node Synchronise problem

Posted By Sagar Patil

I had a strange problem this morning. The clustered JVMs were up but Nodeagent was failing to synchronise with DMGR leaving applications in partial start state.

My attempts to Sync NodeAgent from DMGR were unsuccessful
Dmgr > System administration -> Nodes Select NodeAgent and click on Synchronise else Full Synchronise.

How to Debug this error message?I decided to sync the nodeAgent manually

1. Stop all node-agents that seem broken (that would probably be all of them!).

2. Go to the node agents bin directory on the node (usually something like $WAS_HOME/profiles//bin/).
# Manually sync the node with syncNode.sh, point to the SOAP connector (default is 8879) on the DMGR server.
See example
./syncNode.sh dmgrhost 8879 -username websphere -password webfear
3. Start the node agent and verify that the logs are happy. Kick off a cell sync from dmgr.

Now this came back with some strange error.

I was looking at DMGR logs & Individual JVM logs for an error message but there were 1 line of message dumped at nodelogs (/opt/IBM/WebSphere/AppServer/profiles/Profile01/Node/logs/nodeagent//SystemOut.log ) as below  :

“Global security in the local process is Disabled. Global security in the sending process is Enabled”

What it meant was security at DMGR was enabled but somehow same settings were not there at nodeagent file “security.xml“

./dmgr/config/cells/server1_Cell/security.xml :
useLocalSecurityServer=”true” useDomainQualifiedUserNames=”false” enabled=”true” cacheTimeout=”600″ issuePermissionWarning=”false” activeProtocol=”BOTH” enforceJava2Security=”false” enforceFineGrainedJCASecurity=”false” appEnabled=”false” dynamicallyUpdateSSLConfig=”true” activeAuthMechanism=”LTPA_1″ activeUserRegistry=”WIMUserRegistry_1″ defaultSSLSettings=”SSLConfig_1″>

./Node/config/cells/server1_Cell/security.xml
useLocalSecurityServer=”true” useDomainQualifiedUserNames=”false” enabled=”false” cacheTimeout=”600″ issuePermissionWarning=”true” activeProtocol=”BOTH” enforceJava2Security=”false” enforceFineGrainedJCASecurity=”false” appEnabled=”false” dynamicallyUpdateSSLConfig=”true” activeAuthMechanism=”LTPA_1″ activeUserRegistry=”WIMUserRegistry_1″ defaultSSLSettings=”SSLConfig_1″>

I changed above settings at Node to true and bounced nodeagent and dmgr. The Nodes are now getting sync.

/opt/IBM/WebSphere/AppServer/profiles/Profile01/Node/logs/nodeagent/systemout.log now does say

0000003f NodeSyncTask  A   ADMS0003I: The configuration synchronization completed successfully.

Leave a Reply

You must be logged in to post a comment.

Top of Page

Top menu