2 Replies Latest reply on Feb 14, 2012 8:31 AM by sandeep_singh

    admin server doesnt start...

    823088
    823088 May 26, 2011 6:15 AM
      I am getting the following exception, please help. I have tried putting the user name and password in boot.properties file but it didnt help me.

      ####<May 26, 2011 7:56:14 AM CEST> <Critical> <WebLogicServer> <tna-06-7437> <AdminServer> <main> <<WLS Kernel>> <> <> <1306389374937> <BEA-000386> <Server subsystem failed. Reason: weblogic.security.SecurityInitializationException: User weblogic is not permitted to boot the server; The server policy may have changed in such a way that the user is no longer able to boot the server.Reboot the server with the administrative user account or contact the system administrator to update the server policy definitions.
      weblogic.security.SecurityInitializationException: User weblogic is not permitted to boot the server; The server policy may have changed in such a way that the user is no longer able to boot the server.Reboot the server with the administrative user account or contact the system administrator to update the server policy definitions.
           at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.doBootAuthorization(CommonSecurityServiceManagerDelegateImpl.java:1009)
           at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.initialize(CommonSecurityServiceManagerDelegateImpl.java:1050)
           at weblogic.security.service.SecurityServiceManager.initialize(SecurityServiceManager.java:875)
           at weblogic.security.SecurityService.start(SecurityService.java:141)
           at weblogic.t3.srvr.SubsystemRequest.run(SubsystemRequest.java:64)
           at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
           at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)
      >
      ####<May 26, 2011 7:56:14 AM CEST> <Notice> <WebLogicServer> <tna-06-7437> <AdminServer> <main> <<WLS Kernel>> <> <> <1306389374953> <BEA-000365> <Server state changed to FAILED>
      ####<May 26, 2011 7:56:14 AM CEST> <Error> <WebLogicServer> <tna-06-7437> <AdminServer> <main> <<WLS Kernel>> <> <> <1306389374953> <BEA-000383> <A critical service failed. The server will shut itself down>
      ####<May 26, 2011 7:56:14 AM CEST> <Notice> <WebLogicServer> <tna-06-7437> <AdminServer> <main> <<WLS Kernel>> <> <> <1306389374953> <BEA-000365> <Server state changed to FORCE_SHUTTING_DOWN>
      ####<May 26, 2011 7:56:14 AM CEST> <Info> <WebLogicServer> <tna-06-7437> <AdminServer> <main> <<WLS Kernel>> <> <> <1306389374953> <BEA-000236> <Stopping execute threads.>
      • 3068 Views
      • Tags:
        • 1. Re: admin server doesnt start...
          René van Wijk
          René van Wijk May 26, 2011 7:15 AM (in response to 823088)
          You probably changed the roles of the admin user, maybe you used something like:
          sr = cmo.getSecurityConfiguration().getDefaultRealm();
rm = sr.lookupRoleMapper('XACMLRoleMapper');
expr = rm.getRoleExpression(None,'Admin');
print expr;
rm.setRoleExpression(None,'Admin',expr+'|Usr(employee)');
          and forgot to add the old groups and users to the admin role.

          You can try editing your boot.properties and enter a valid user which has the admin role.
          The boot.properties file is locate in the <domain-home>/servers/AdminServer/security directory.

          If this does not help, you can use the embedded LDAP backup files, locate in the <domain-home>/servers/AdminServer/data/ldap/backup.
          Replace the existing files (in the /data/ldap/ldapfiles directory) with the backed-up ones.

          Or delete the whole ldap directory and let the files be re-created on server start-up
          • 2. Re: admin server doesnt start...
            sandeep_singh
            sandeep_singh Feb 14, 2012 8:31 AM (in response to 823088)
            The issue is with the Admin user only. Either the roles of the user has been changed or incorrect credentials are being used to boot the server.
            Try creating new Administrator account for the Admin Server .
            steps are available here : http://www.weblogic-tips.com/wls-security/

            thanks,
            sandeep