leeagle 2012-04-23
[日期:2010-06-13]来源:Linux社区作者:Linux
§2.1安装准备
?下载WebLogic10.3forx86linux安装文件;
?安装SUSELinuxenterpriseServer11.0;
?检查SUSE环境,确保/root空闲空间在2G以上。如果/root空间不足,则应扩展root空间,或创建一个新的文件系统,并确保该文件系统空间在2G以上。本手册假定该文件系统的mount点是/soft;如root的空间足够,则在root创建目录/soft作为安装源目录;
?创建WebLogic使用的文件系统,该文件系统的mount点建议为/bea,空间应在2G以上,后续将安装WebLogic软件到该文件系统中。
§2.2安装过程
§2.2.1创建bea组和weblogic用户
使用root登录操作系统,执行下列命令创建bea组和weblogic用户。bea组号为600,weblogic用户号为600,属于bea组,home目录为/bea。
#groupadd-g600bea
#useradd-d/bea-u600-g600weblogic
#passwdweblogic--激活weblogic用户
执行下列命令将/bea分配给weblogic用户。
#cd/
#chownweblogic:bea/bea
#chmod755/bea
§2.2.2上传安装文件并执行
使用weblogic登录,使用bin模式,上传WebLogic安装文件server103_linux.bin到soft目录,执行下列命令执行安装文件。
$cd/soft
$chmoda+xserver103_linux.bin
$./server103_linux.bin-mode=console
系统自动解压缩安装文件,并启动文本的安装界面。
§2.2.3欢迎界面
<---------------OracleInstaller-WebLogicPlatform10.3.0.0--------------->
Welcome:
--------
ThisinstallerwillguideyouthroughtheinstallationofWebLogicPlatform
10.3.0.0.Type"Next"orentertoproceedtothenextprompt.Ifyouwantto
changedataenteredpreviously,type"Previous".Youmayquittheinstalleratanytimebytyping"Exit".
Enter[Exit][Next]>next
§2.2.4指定WebLogic主目录为/bea
<---------------OracleInstaller-WebLogicPlatform10.3.0.0--------------->
ChooseBEAHomeDirectory:
--------------------------
"BEAHome"=[Enternewvalueorusedefault"/root/bea"]
EnternewBEAHomeOR[Exit][Previous][Next]>/bea
<---------------OracleInstaller-WebLogicPlatform10.3.0.0--------------->
ChooseBEAHomeDirectory:
--------------------------
"BEAHome"=[/bea]
Useabovevalueorselectanotheroption:
1-EnternewBEAHome
2-Changetodefault[/root/bea]
EnteroptionnumbertoselectOR[Exit][Previous][Next]>next
§2.2.5选择安装类型为Custom
<---------------OracleInstaller-WebLogicPlatform10.3.0.0--------------->
ChooseInstallType:
--------------------
Selectthetypeofinstallationyouwishtoperform.
->1|Complete
|Installthefollowingsoftwareproductsandexamples:
|-WebLogicServer
|-Workshop
2|Custom
|Choosesoftwareproductsandcomponentstoinstallandperformoptional
|configuration.
EnterindexnumbertoselectOR[Exit][Previous][Next]>2
§2.2.6选择要安装的产品组件
需取消安装Workshop和ServerExamples
<---------------OracleInstaller-WebLogicPlatform10.3.0.0--------------->
ChooseProductsandComponents:
-------------------------------
Release10.3.0.0
|_____WebLogicServer[1]x
||_____CoreApplicationServer[1.1]x
||_____AdministrationConsole[1.2]x
||_____ConfigurationWizardandUpgradeFramework[1.3]x
||_____Web2.0HTTPPub-SubServer[1.4]x
||_____WebLogicJDBCDrivers[1.5]x
||_____ThirdPartyJDBCDrivers[1.6]x
||_____WebLogicServerClients[1.7]x
||_____WebLogicWebServerPlugins[1.8]x
||_____UDDIandXquerySupport[1.9]x
||_____ServerExamples[1.10]x
|_____Workshop[2]x
|_____WorkshopforWebLogic[2.1]x
|_____WorkshopRuntimeFramework[2.2]x
*Estimatedsizeofinstallation:788.3MB
EnternumberexactlyasitappearsinbracketstotoggleselectionOR[Exit][Previous][Next]>2
<---------------OracleInstaller-WebLogicPlatform10.3.0.0--------------->
ChooseProductsandComponents:
-------------------------------
Release10.3.0.0
|_____WebLogicServer[1]x
||_____CoreApplicationServer[1.1]x
||_____AdministrationConsole[1.2]x
||_____ConfigurationWizardandUpgradeFramework[1.3]x
||_____Web2.0HTTPPub-SubServer[1.4]x
||_____WebLogicJDBCDrivers[1.5]x
||_____ThirdPartyJDBCDrivers[1.6]x
||_____WebLogicServerClients[1.7]x
||_____WebLogicWebServerPlugins[1.8]x
||_____UDDIandXquerySupport[1.9]x
||_____ServerExamples[1.10]x
|_____Workshop[2]
|_____WorkshopforWebLogic[2.1]
|_____WorkshopRuntimeFramework[2.2]
*Estimatedsizeofinstallation:406.3MB
EnternumberexactlyasitappearsinbracketstotoggleselectionOR[Exit][Previous][Next]>1.10
<---------------OracleInstaller-WebLogicPlatform10.3.0.0--------------->
ChooseProductsandComponents:
-------------------------------
Release10.3.0.0
|_____WebLogicServer[1]x
||_____CoreApplicationServer[1.1]x
||_____AdministrationConsole[1.2]x
||_____ConfigurationWizardandUpgradeFramework[1.3]x
||_____Web2.0HTTPPub-SubServer[1.4]x
||_____WebLogicJDBCDrivers[1.5]x
||_____ThirdPartyJDBCDrivers[1.6]x
||_____WebLogicServerClients[1.7]x
||_____WebLogicWebServerPlugins[1.8]x
||_____UDDIandXquerySupport[1.9]x
||_____ServerExamples[1.10]
|_____Workshop[2]
|_____WorkshopforWebLogic[2.1]
|_____WorkshopRuntimeFramework[2.2]
*Estimatedsizeofinstallation:360.4MB
EnternumberexactlyasitappearsinbracketstotoggleselectionOR[Exit][Previous][Next]>next
§2.2.7选择要安装的JDK
<---------------OracleInstaller-WebLogicPlatform10.3.0.0--------------->
JDKSelection(Any*indicatesBEASuppliedVM):
------------------------------------------------
JDK(s)chosenforusewiththisproductinstallationwillbeinstalled.Supporteddefaultsifnotdeselectedwillbeusedinscriptstring-substitution.
1|AddLocalJdk
2|/bea/jdk160_05[x]*
3|/bea/jrockit_160_05[x]*
*Estimatedsizeofinstallation:713.2MB
Enter1toaddor>=2totoggleselectionOR[Exit][Previous][Next]>next
§2.2.8安装确认
<---------------OracleInstaller-WebLogicPlatform10.3.0.0--------------->
ChooseProductInstallationDirectories:
----------------------------------------
BEAHomeDirectory:[/bea]
ProductInstallationDirectories:
"WebLogicServer"=[Enternewvalueorusedefault"/bea/wlserver_10.3"]
EnternewWebLogicServerOR[Exit][Previous][Next]>next
<---------------OracleInstaller-WebLogicPlatform10.3.0.0--------------->
ThefollowingProductsandJDKswillbeinstalled:
--------------------------------------------------
WebLogicPlatform10.3.0.0
|_____WebLogicServer
||_____CoreApplicationServer
||_____AdministrationConsole
||_____ConfigurationWizardandUpgradeFramework
||_____Web2.0HTTPPub-SubServer
||_____WebLogicJDBCDrivers
||_____ThirdPartyJDBCDrivers
||_____WebLogicServerClients
||_____WebLogicWebServerPlugins
||_____UDDIandXquerySupport
|_____JDKs
|_____SunSDK1.6.0_05
|_____BEAJRockit1.6.0_05SDK
*Estimatedsizeofinstallation:713.3MB
Enter[Exit][Previous][Next]>next
§2.2.9文件复制
<---------------OracleInstaller-WebLogicPlatform10.3.0.0--------------->
Installingfiles..
0%25%50%75%100%
[------------|------------|------------|------------]
[*****************************
PerformingStringSubstitutions...
CreatingDomains...
§2.2.10安装结束
<---------------OracleInstaller-WebLogicPlatform10.3.0.0--------------->
InstallationComplete
Congratulations!Installationiscomplete.
Press[Enter]tocontinueortype[Exit]>按回车键
§2.3创建管理服务器的域
AdminServerName:AdminServer
ListenAddress:192.168.100.1
ListenPort:8080
SSLListenPort:8081
SSLenabled:true
DomainName:weblogic
§2.3.1运行ConfigurationWizard
$cd/bea/wlserver_10.3/common/bin
./config.sh-mode=console
§2.3.2选择创建新域
<--------------------OracleWebLogicConfigurationWizard------------------->
Welcome:
--------
Choosebetweencreatingandextendingadomain.Basedonyourselection,
theConfigurationWizardguidesyouthroughthestepstogenerateanewor
extendanexistingdomain.
->1|CreateanewWebLogicdomain
|CreateaWebLogicdomaininyourprojectsdirectory.
2|ExtendanexistingWebLogicdomain
|ExtendanexistingWebLogicdomain.Usethisoptiontoadd
|applicationsandservices,ortooverrideexistingdatabaseaccess(JDBC)
|andmessaging(JMS)settings.Youcanalsoincorporateadditional
|functionalityinyourdomain,forexample,byincludingAquaLogicService
|Bus.
EnterindexnumbertoselectOR[Exit][Next]>1
§2.3.3选择域源
<--------------------OracleWebLogicConfigurationWizard------------------->
SelectDomainSource:
---------------------
Selectthesourcefromwhichthedomainwillbecreated.Youcancreatethe
domainbyselectingfromtherequiredcomponentsorbyselectingfroma
listofexistingdomaintemplates.
->1|ChooseWeblogicPlatformcomponents
|YoucanchoosetheWeblogiccomponent(s)thatyouwantsupportedin
|yourdomain.
2|Choosecustomtemplate
|Choosethisoptionifyouwanttouseanexistingtemplate.This
|couldbeacustomcreatedtemplateusingtheTemplateBuilder.
EnterindexnumbertoselectOR[Exit][Previous][Next]>1
<--------------------OracleWebLogicConfigurationWizard------------------->
ApplicationTemplateSelection:
-------------------------------
AvailableTemplates
|_____WebLogicServer(Required)x
EnternumberexactlyasitappearsinbracketstotoggleselectionOR[Exit][Previous][Next]>next
§2.3.4配置管理员及密码
<--------------------OracleWebLogicConfigurationWizard------------------->
ConfigureAdministratorUsernameandPassword:
----------------------------------------------
CreateausertobeassignedtotheAdministratorrole.Thisuseristhe
defaultadministratorusedtostartdevelopmentmodeservers.
|Name|Value|
_|_________________________|_________________________________________|
1|*Username:|weblogic|
2|*Userpassword:||
3|*Confirmuserpassword:||
4|Description:|Thisuseristhedefaultadministrator.|
Useabovevalueorselectanotheroption:
1-Modify"Username"
2-Modify"Userpassword"
3-Modify"Confirmuserpassword"
4-Modify"Description"
EnteroptionnumbertoselectOR[Exit][Previous][Next]>2
<--------------------OracleWebLogicConfigurationWizard------------------->
ConfigureAdministratorUsernameandPassword:
----------------------------------------------
CreateausertobeassignedtotheAdministratorrole.Thisuseristhe
defaultadministratorusedtostartdevelopmentmodeservers.
"*Userpassword:"=[]
Enternew*Userpassword:OR[Exit][Reset][Accept]>
<--------------------OracleWebLogicConfigurationWizard------------------->
ConfigureAdministratorUsernameandPassword:
----------------------------------------------
CreateausertobeassignedtotheAdministratorrole.Thisuseristhe
defaultadministratorusedtostartdevelopmentmodeservers.
|Name|Value|
_|_________________________|_________________________________________|
1|*Username:|weblogic|
2|*Userpassword:|***********|
3|*Confirmuserpassword:||
4|Description:|Thisuseristhedefaultadministrator.|
Useabovevalueorselectanotheroption:
1-Modify"Username"
2-Modify"Userpassword"
3-Modify"Confirmuserpassword"
4-Modify"Description"
5-DiscardChanges
EnteroptionnumbertoselectOR[Exit][Previous][Next]>3
<--------------------OracleWebLogicConfigurationWizard------------------->
ConfigureAdministratorUsernameandPassword:
----------------------------------------------
CreateausertobeassignedtotheAdministratorrole.Thisuseristhe
defaultadministratorusedtostartdevelopmentmodeservers.
"*Confirmuserpassword:"=[]
Enternew*Confirmuserpassword:OR[Exit][Reset][Accept]>
<--------------------OracleWebLogicConfigurationWizard------------------->
ConfigureAdministratorUsernameandPassword:
----------------------------------------------
CreateausertobeassignedtotheAdministratorrole.Thisuseristhe
defaultadministratorusedtostartdevelopmentmodeservers.
|Name|Value|
_|_________________________|_________________________________________|
1|*Username:|weblogic|
2|*Userpassword:|***********|
3|*Confirmuserpassword:|***********|
4|Description:|Thisuseristhedefaultadministrator.|
Useabovevalueorselectanotheroption:
1-Modify"Username"
2-Modify"Userpassword"
3-Modify"Confirmuserpassword"
4-Modify"Description"
5-DiscardChanges
EnteroptionnumbertoselectOR[Exit][Previous][Next]>Next
§2.3.5选产品模式+JRockitJDK
<--------------------OracleWebLogicConfigurationWizard------------------->
DomainModeConfiguration:
--------------------------
EnableDevelopmentorProductionModeforthisdomain.
->1|DevelopmentMode
2|ProductionMode
EnterindexnumbertoselectOR[Exit][Previous][Next]>2
<--------------------OracleWebLogicConfigurationWizard------------------->
JavaSDKSelection:
-------------------
->1|JRockitSDK1.6.0_05@/bea/jrockit_160_05
2|SunSDK1.6.0_05@/bea/jdk160_05
3|OtherJavaSDK
EnterindexnumbertoselectOR[Exit][Previous][Next]>1
§2.3.6选择要定制环境与服务设置
<--------------------OracleWebLogicConfigurationWizard------------------->
ChooseConfigurationOption:
----------------------------
*Doyouwanttomodifyanyofthepreconfiguredsettingsordefaultsin
*yourtemplate?
*
*Tokeepthedefaultortemplatesettings,andproceeddirectlytonameand*createyourdomain,leaveNoselected.
1|Yes
->2|No
EnterindexnumbertoselectOR[Exit][Previous][Next]>1
§2.3.7暂不配置安全存储
<--------------------OracleWebLogicConfigurationWizard------------------->
ConfigureRDBMSSecurityStoreOptions:
---------------------------------------
CreatetheRDBMStablesinyourdatastorepriortobootingyourdomain.The
scriptsforusebyyourDBAareinWebLogicServer'sserver/libdirectory.
ClickNexttokeepthetemplatesettingsorbypassRDBMSoptions.
->1|Idon'twanttochangeanythinghere.
2|Iwanttocreate,change,orremoveRDBMSsupport.
EnterindexnumbertoselectOR[Exit][Previous][Next]>1
§2.3.8配置管理服务器的端口
<--------------------OracleWebLogicConfigurationWizard------------------->
ConfiguretheAdministrationServer:
------------------------------------
Enteradminstrationserverconfigurations.EachWebLogicServerdomainmust
haveoneAdministrationServer.TheAdministrationServerhoststhe
AdministrationConsolewhichisusedtoperformadministrativetasks.
|Name|Value|
_|__________________|_____________________|
1|*Name:|AdminServer|
2|Listenaddress:|AllLocalAddresses|
3|Listenport:|7001|
4|SSLlistenport:|N/A|
5|SSLenabled:|false|
Useabovevalueorselectanotheroption:
1-Modify"Name"
2-Modify"Listenaddress"
3-Modify"Listenport"
4-Modify"SSLenabled"
EnteroptionnumbertoselectOR[Exit][Previous][Next]>2
<--------------------OracleWebLogicConfigurationWizard------------------->
ConfiguretheAdministrationServer:
------------------------------------
Enteradminstrationserverconfigurations.EachWebLogicServerdomainmust
haveoneAdministrationServer.TheAdministrationServerhoststhe
AdministrationConsolewhichisusedtoperformadministrativetasks.
|Name|Value|
_|__________________|_____________________|
1|*Name:|AdminServer|
2|Listenaddress:|AllLocalAddresses|
3|Listenport:|7001|
4|SSLlistenport:|N/A|
5|SSLenabled:|false|
Entervaluefor"Listenaddress"OR[Exit][Previous][Next]>192.168.100.30
<--------------------OracleWebLogicConfigurationWizard------------------->
ConfiguretheAdministrationServer:
------------------------------------
Enteradminstrationserverconfigurations.EachWebLogicServerdomainmust
haveoneAdministrationServer.TheAdministrationServerhoststhe
AdministrationConsolewhichisusedtoperformadministrativetasks.
|Name|Value|
_|__________________|________________|
1|*Name:|AdminServer|
2|Listenaddress:|192.168.100.30|
3|Listenport:|7001|
4|SSLlistenport:|N/A|
5|SSLenabled:|false|
Useabovevalueorselectanotheroption:
1-Modify"Name"
2-Modify"Listenaddress"
3-Modify"Listenport"
4-Modify"SSLenabled"
5-DiscardChanges
EnteroptionnumbertoselectOR[Exit][Previous][Next]>3
<--------------------OracleWebLogicConfigurationWizard------------------->
ConfiguretheAdministrationServer:
------------------------------------
Enteradminstrationserverconfigurations.EachWebLogicServerdomainmust
haveoneAdministrationServer.TheAdministrationServerhoststhe
AdministrationConsolewhichisusedtoperformadministrativetasks.
|Name|Value|
_|__________________|_____________________|
1|*Name:|AdminServer|
2|Listenaddress:|AllLocalAddresses|
3|Listenport:|7001|
4|SSLlistenport:|N/A|
5|SSLenabled:|false|
Entervaluefor"Listenport"OR[Exit][Previous][Next]>8080
<--------------------OracleWebLogicConfigurationWizard------------------->
ConfiguretheAdministrationServer:
------------------------------------
Enteradminstrationserverconfigurations.EachWebLogicServerdomainmust
haveoneAdministrationServer.TheAdministrationServerhoststhe
AdministrationConsolewhichisusedtoperformadministrativetasks.
|Name|Value|
_|__________________|_____________________|
1|*Name:|AdminServer|
2|Listenaddress:|AllLocalAddresses|
3|Listenport:|8080|
4|SSLlistenport:|N/A|
5|SSLenabled:|false|
Useabovevalueorselectanotheroption:
1-Modify"Name"
2-Modify"Listenaddress"
3-Modify"Listenport"
4-Modify"SSLenabled"
EnteroptionnumbertoselectOR[Exit][Previous][Next]>4
<--------------------OracleWebLogicConfigurationWizard------------------->
ConfiguretheAdministrationServer:
------------------------------------
Enteradminstrationserverconfigurations.EachWebLogicServerdomainmust
haveoneAdministrationServer.TheAdministrationServerhoststhe
AdministrationConsolewhichisusedtoperformadministrativetasks.
*Enterindexnumbertomodify"Value"
1|true
->2|false
3|Unspecified
EnterindexnumbertoselectOR[Exit][Reset][Accept]>1
<--------------------OracleWebLogicConfigurationWizard------------------->
ConfiguretheAdministrationServer:
------------------------------------
Enteradminstrationserverconfigurations.EachWebLogicServerdomainmust
haveoneAdministrationServer.TheAdministrationServerhoststhe
AdministrationConsolewhichisusedtoperformadministrativetasks.
|Name|Value|
_|__________________|_____________________|
1|*Name:|AdminServer|
2|Listenaddress:|AllLocalAddresses|
3|Listenport:|8080|
4|SSLlistenport:|7002|
5|SSLenabled:|true|
Useabovevalueorselectanotheroption:
1-Modify"Name"
2-Modify"Listenaddress"
3-Modify"Listenport"
4-Modify"SSLlistenport"
5-Modify"SSLenabled"
6-DiscardChanges
EnteroptionnumbertoselectOR[Exit][Previous][Next]>4
<--------------------OracleWebLogicConfigurationWizard------------------->
ConfiguretheAdministrationServer:
------------------------------------
Enteradminstrationserverconfigurations.EachWebLogicServerdomainmust
haveoneAdministrationServer.TheAdministrationServerhoststhe
AdministrationConsolewhichisusedtoperformadministrativetasks.
|Name|Value|
_|__________________|_____________________|
1|*Name:|AdminServer|
2|Listenaddress:|AllLocalAddresses|
3|Listenport:|8080|
4|SSLlistenport:|7002|
5|SSLenabled:|true|
Entervaluefor"SSLlistenport"OR[Exit][Previous][Next]>8081
<--------------------OracleWebLogicConfigurationWizard------------------->
ConfiguretheAdministrationServer:
------------------------------------
Enteradminstrationserverconfigurations.EachWebLogicServerdomainmust
haveoneAdministrationServer.TheAdministrationServerhoststhe
AdministrationConsolewhichisusedtoperformadministrativetasks.
|Name|Value|
_|__________________|_____________________|
1|*Name:|AdminServer|
2|Listenaddress:|AllLocalAddresses|
3|Listenport:|8080|
4|SSLlistenport:|8081|
5|SSLenabled:|true|
Useabovevalueorselectanotheroption:
1-Modify"Name"
2-Modify"Listenaddress"
3-Modify"Listenport"
4-Modify"SSLlistenport"
5-Modify"SSLenabled"
6-DiscardChanges
EnteroptionnumbertoselectOR[Exit][Previous][Next]>next
§2.3.9暂不添加受管的服务器
<--------------------OracleWebLogicConfigurationWizard------------------->
ConfigureManagedServers:
--------------------------
AddordeleteconfigurationinformationforManagedServers.Atypical
productionenvironmenthasoneormoreManagedServers.EachManagedServer
isaninstanceofWebLogicServerusedtohostenterpriseapplications.
|Name*|Listenaddress|Listenport|SSLlistenport|SSLenabled|
_|_______|________________|_____________|_________________|_____________|
EnternameforanewOR[Exit][Previous][Next]>next
<--------------------OracleWebLogicConfigurationWizard------------------->
ConfigureClusters:
-------------------
Addordeleteconfigurationinformationforclusters.Aclustercontains
multipleWebLogicServerinstancesthatrunsimultaneouslyandwork
togethertoprovideincreasedscalabilityandreliability.Acluster
appearstobeasingleWebLogicServerinstancetoclients.
|Name*|Multicastaddress|Multicastport|Clusteraddress|
_|_______|___________________|________________|_________________|
12下一页GO
EnternameforanewClusterOR[Exit][Previous][Next]>next
§2.3.10暂不添加受管的主机
<--------------------OracleWebLogicConfigurationWizard------------------->
ConfigureMachines:
-------------------
Addordeletemachines.AmachinehostsoneormoreWebLogicServer
instances.TheAdminServerandNodeManagerusethismachinedefinitionto
startremoteservers.
|Name*|Nodemanagerlistenaddress|Nodemanagerlistenport|
_|_______|_____________________________|__________________________|
EnternameforanewMachineOR[Exit][Previous][Next]>next
<--------------------OracleWebLogicConfigurationWizard------------------->
ConfigureUnixMachines:
------------------------
Addordeletemachines.AmachinehostsoneormoreWebLogicServer
instances.TheAdminServerandNodeManagerusethismachinedefinitionto
startremoteservers.
|Name|
_|______|
EnternameforanewUnixMachineOR[Exit][Previous][Next]>next
§2.3.11指定域名
<--------------------OracleWebLogicConfigurationWizard------------------->
Selectthetargetdomaindirectoryforthisdomain:
---------------------------------------------------
"TargetLocation"=[Enternewvalueorusedefault
"/bea/user_projects/domains"]
EnternewTargetLocationOR[Exit][Previous][Next]>next
<--------------------OracleWebLogicConfigurationWizard------------------->
EditDomainInformation:
------------------------
|Name|Value|
_|________|_____________|
1|*Name:|base_domain|
Entervaluefor"Name"OR[Exit][Previous][Next]>weblogic
<--------------------OracleWebLogicConfigurationWizard------------------->
EditDomainInformation:
------------------------
|Name|Value|
_|________|__________|
1|*Name:|weblogic|
Useabovevalueorselectanotheroption:
1-Modify"Name"
2-DiscardChanges
EnteroptionnumbertoselectOR[Exit][Previous][Next]>next
§2.3.12创建域
<--------------------OracleWebLogicConfigurationWizard------------------->
CreatingDomain...
0%25%50%75%100%
[------------|------------|------------|------------]
[***************************************************]
****DomainCreatedSuccessfully!****
§2.4创建受管服务器的域
参考《WebLogic10.3forWin32》-《创建受管服务器的Domain和Server》。
§2.5配置和启动节点管理器
§2.5.1直接运行
$cd/bea/wlserver_10.3/server/bin
$./startNodeManager.sh
§2.5.2配置节点管理器作为Daemon
在/etc/rc.d/rc3.d添加一个启动节点管理器的文件。该文件核心内容是启动节点管理器,即:
su-weblogic-c"nohup/bea/wlserver_10.3/server/bin/startNodeManager&"
这样,Linux启动后时自动启动节点管理器。
Runlevel
ThetermrunlevelreferstoamodeofoperationinoneofthecomputeroperatingsystemsthatimplementUnixSystemV-styleinitialization.Conventionally,sevenrunlevelsexist,numberedfromzerotosix;thoughuptoten,fromzerotonine,maybeused.Sissometimesusedasasynonymforoneofthelevels.
Instandardpractice,whenacomputerentersrunlevelzero,ithalts,andwhenitentersrunlevelsix,itreboots.Theintermediaterunlevels(1-5)differintermsofwhichdrivesaremounted,andwhichnetworkservicesarestarted.Lowerrunlevelsareusefulformaintenanceoremergencyrepairs,sincetheyusuallydon'tofferanynetworkservicesatall.Theparticulardetailsofrunlevelconfigurationdifferwidelyamongoperatingsystems,andslightlyamongsystemadministrators.
Therunlevelsystemreplacedthetraditional/etc/rcscriptusedinVersion7Unix.
?Standardrunlevels
Standardrunlevels
IDNameDescription
0HaltShutsdownthesystem.
SSingle-UserModeDoesnotconfigurenetworkinterfacesorstartdaemons.[1]
6RebootRebootsthesystem.
1=Almostallsystemsuserunlevel1forthispurpose.Thismodeisintendedtoprovideasafeenvironmenttoperformsystemmaintenance.Originallythisrunlevelprovidedasingleterminal(console)interfacerunningarootloginshell.Theincreasingtrendtowardsphysicalaccesstothecomputerduringthebootprocesshasledtochangesinthisarea.
?Linux
TheLinuxoperatingsystemcanmakeuseofrunlevelsthroughtheprogramsofthesysvinitproject.AftertheLinuxkernelhasbooted,theinitprogramreadsthe/etc/inittabfiletodeterminethebehaviorforeachrunlevel.Unlesstheuserspecifiesanothervalueasakernelbootparameter,thesystemwillattempttoenter(start)thedefaultrunlevel.
TypicalLinuxrunlevels
MostLinuxdistributions,inadditiontothestandardrunlevels,definethefollowingadditionalrunlevels:
TypicalLinuxrunlevels
IDNameDescription
1Single-UserModeDoesnot:configurenetworkinterfaces,startdaemons,orallownon-rootlogins.[2]
2Multi-UserModeDoesnot:configurenetworkinterfacesorstartdaemons.[3]
3Multi-UserModewithNetworkingStartsthesystemnormally.[4]
4Unused/Userdefinedforspecialpurposes
5X11Asrunlevel3+displaymanager.
^=Theadditionalbehaviorofthisrunlevelvariesgreatly.Alldistributionsprovideatleastonevirtualterminal.Somedistributionsstartaloginshellasthesuperuser;somerequirecorrectlyenteringthesuperuser'spasswordfirst;othersprovidealoginprompt,allowinganyuseraccess.
^=Insomecases,runlevels2and3functionidentically;offeringaMulti-UserModewithNetworking.
?DebianLinux
Debian,aswellasmostofthedistributionsbasedonit,likeearlyUbuntu,doesnotmakeanydistinctionbetweenrunlevels2to5.
DebianLinuxrunlevels
IDDescription
0Halt
1Singleusermode
2-5Fullmulti-userwithconsoleloginsanddisplaymanagerifinstalled
6Reboot
?sidux
sidux,aDebianSidbaseddistribution(current20081110).Thisisthelistforsiduxoperatingsystemrunlevels,pleasenotethatitdoesdifferfromdebianstablerunlevels.
siduxLinuxrunlevels
IDDescription
0init0powersoffthePC,halt
1init1singleusermode
2init2Multi-Usermodewithoutnetwork,and/ortostopornotenterX,
3init3Multi-UsermodewithnetworknotrunningtheXWindowSystem,and/ortostopornotenterX
4init4tostopornotenterX
5init5Multi-UsermodewithnetworkrunningtheXWindowSystem,and/ortostartX
6init6Reboot
?Ubuntu
Ubuntu6.10(EdgyEft)andlatercontainUpstartasareplacementforthetraditionalinit-process,buttheystillusethetraditionalinitscriptsandUpstart'sSysV-rccompatibilitytoolstostartmostservicesandemulaterunlevels.
?RedHatLinuxandFedora
RedHataswellasmostofitsderivatives(suchasCentOS)usesrunlevelslikethis:
RedHatLinux/Fedorarunlevels
IDDescription
0Halt
1Singleuser
2Fullmulti-userwithnetworkenabledbutmostnetworkservicesdisabled
3Fullmulti-user,consoleloginsonly
4Notused/Userdefinable
5Fullmulti-user,withdisplaymanageraswellasconsolelogins
6Reboot
Whichservicesarestartedinwhichrunlevelscanbemanagedwiththechkconfigtool,whichkeepsitsconfigurationsettingsunder/etc/rc.d/./sbin/chkconfig--listlistsalltheservicescontrolledbychkconfigandwhethertheyareon/offforeachrunlevel.SettingaserviceAcontrolledbychkconfig,forlevelsX,YandZisassimpleas/sbin/chkconfig--levelXYZA
?SUSELinux
SUSEusesasimilarsetuptoRedHat:
SUSELinuxrunlevels
IDDescription
0Halt
1Single-user
2Fullmulti-userwithnonetworking
3Fullmulti-userwithoutdisplaymanager
4Notused/Userdefinable
5Fullmulti-userwithdisplaymanager
6Reboot
TheservicesthatrununderaspecificrunlevelcanbemodifiedwithYaST|SystemServices(runlevel)orwithchkconfigcommandliketheRedHatbaseddistributions.
?SlackwareLinux
SlackwareLinuxusesrunlevel1formaintenance,asonotherLinuxdistributions;runlevels2,3and5identicallyconfiguredforaconsole(withallservicesactive);andrunlevel4addstheXWindowSystem.
SlackwareLinuxrunlevels
IDDescription
0Halt
1Single-user
2Fullmulti-userNOdisplaymanager
3Fullmulti-userNOdisplaymanager
4Fullmulti-userwithdisplaymanager
5Notused/Userdefinable
6Reboot
?GentooLinux
GentooLinuxrunlevels
IDDescription
0Halt
1Single-user
2Multi-user,nonetwork
3Fullmulti-userwithdisplaymanager
4Aliasedforrunlevel3(Fullmulti-userwithdisplaymanager)
6Reboot
?SystemVReleases3and4
SystemVrunlevels
IDDescription
0Shutdownsystem,power-offifhardwaresupportsit(onlyavailablefromtheconsole)
1Single-usermode,allfilesystemsunmountedbutroot,allprocessesexceptconsoleprocesseskilled
2Multi-usermode
3Multi-usermodewithRFS(andNFSinrelease4)filesystemsexported
4Multi-user,user-defined
5Halttheoperatingsystem,gotofirmware
6Haltthesystem,reboottodefaultrunlevel
s,SIdenticalto1(Single-usermode,allfilesystemsunmountedbutroot,allprocessesexceptconsoleprocesseskilled)exceptcurrentterminalactsasthesystemconsole
?Solaris
Solarisrunlevels
IDDescription
0Operatingsystemhalted;(SPARConly)droptoOpenBootprompt
SSingle-userwithonlyrootfilesystemmounted(asread-only)
1Single-usermodewithalllocalfilesystemsmounted(read-write)
2Multi-userwithmostdaemonsstarted.
3multi-user,identicalto2(runlevel3runsboth/sbin/rc2and/sbin/rc3),withfilesystemsexported,plussomeothernetworkservicesstarted.
4Alternativemulti-user,user-defined
5Shutdown,power-offifhardwaresupportsit
6Reboot
?HP-UX
HP-UXrunlevels
IDDescription
0Systemhalted
SSingle-user,bootedtosystemconsoleonly,withonlyrootfilesystemmounted(asread-only)
sSingleuser,identicaltoSexceptthecurrentterminalactsasthesystemconsole
1Single-userwithlocalfilesystemsmounted(read-write)
2Multi-userwithmostdaemonsstartedandCommonDesktopEnvironmentlaunched
3Multi-user,nearlyidenticaltorunlevel2withNFSexported
4Multi-userwithVUEstartedinsteadofCDE
5,6user-defined
?AIX
AIXdoesnotfollowtheSystemVR4(SVR4)runlevelspecification,withrunlevelsfrom0to9available,aswellasfromatoc.0and1arereserved,2isthedefaultnormalmulti-usermodeandrunlevelsfrom3to9arefreetobedefinedbytheadministrator.Runlevelsfromatocallowtheexecutionofprocessesinthatrunlevelwithoutkillingprocessesstartedinanother.
AIXrunlevels
IDNameDescription
0reserved
1reserved
2Normalmultiusermodedefaultmode
第三章配置和管理
§3.1配置单向SSL认证
WebLogic启用SSL连接需部署服务器证书、CA证书链、信任证书链。WebLogic安装完成后,在\wlserver_10.3\server\lib目录下会自动创建DemoIdentity.jks(密码DemoIdentityKeyStorePassPhrase)、DemoTrust.jks(密码DemoTrustKeyStorePassPhrase)、cacerts三个文件,分别存放服务器证书、信任证书和CA证书链。前两个文件是非安全的,只能用于测试,不能用于生产;后一个文件是Java的默认cacerts文件。对生产系统,必须部署独有的服务器证书、信任证书和CA证书链。本节描述部署生产系统Server证书的操作过程。
§3.1.1创建Server存储库
§3.1.1.1创建Server私钥
使用JDK自带的keytool工具创建Server私钥。命令如下:
keytool-genkey-aliasAdminServer-keyalgRSA-keysize1024-keystoreAdminServer.jks
该命令会询问存储库的密码和证书信息以及私钥保护密码。大致内容如下:
输入keystore密码:
再次输入新密码:
您的名字与姓氏是什么?
[Unknown]:AdminServer
您的组织单位名称是什么?
[Unknown]:Enterprise
您的组织名称是什么?
[Unknown]:WJZhiFu
您所在的城市或区域名称是什么?
[Unknown]:BeiJing
您所在的州或省份名称是什么?
[Unknown]:BJ
该单位的两字母国家代码是什么
[Unknown]:CN
CN=AdminServer,OU=Enterprice,O=WJZhiFu,L=BeiJing,ST=BJ,C=CN正确吗?
[否]:y
输入的主密码
(如果和keystore密码相同,按回车):
再次输入新密码:
填写时应注意:
?CN域应和Server域名一致,不应使用Server的ip地址;
?OU域应按颁发的证书类型划分为多个单元;如:Server、Enterprise、Person,可以使用编码;
?O域应为公司的英文名称;
?L域应为城市的英文名称;
?ST域应为省的英文名称;
?C域应为国家代码CN;
?存储库的密码和私钥密码应不同。
§3.1.1.2生成Server的证书申请文件
keytool-certreq-aliasAdminServer-sigalg"MD5withRSA"-fileAdminServer.csr-keystoreAdminServer.jks
§3.1.1.3认证证书申请
提交上步生成的AdminServer.csr证书申请文件提交给证书颁发机构进行认证。本例中使用openssl认证该证书申请,命令如下:
opensslca-inAdminServer.csr-outAdminServer.crt-configopenssl.cfg
§3.1.1.4导入证书文件
从CA获取到认证的证书文件后,使用keytool将该证书文件导入到存储库。Keytool导入证书时,会自动检查证书的合法性,确认该证书是信任的CA签署的。默认情况下,我们的CA证书没有包含在Java信任的CA清单中,因此先需要将我们的CA添加到Java的信任CA清单中。命令如下:
keytool-import-fileca.crt-keystoreD:\bea\jdk160_05\jre\lib\security\cacerts
注意:请确认您使用的keytool的JDK位置,Java信任CA清单存储库即为该JDK的jre/lib/security/cacerts文件。
添加CA证书完成后,将该文件复制到WebLogic的server/lib目录,覆盖当前的cacerts文件,然后执行如下命令导入Server的证书文件。
keytool-import-trustcacerts-aliasAdminServer-fileAdminServer.crt-keystoreAdminServer.jks
导入完成后,复制AdminServer.jks存储库到WebLogic的server/lib。至此,Server证书存储库准备就绪。
§3.1.2创建CA证书存储库
从CA处下载CA证书文件。CA证书文件一般有两种形式,一是单独的CA证书文件,二是.p7b证书链文件。
§3.1.2.1导入独立的CA证书文件
keytool可以导入DER格式(二进制)和PEM格式(BASE64编码格式,-----BEGINCERTIFICATE-----打头,-----ENDCERTIFICATE-----结束)。命令如下:
keytool-importcert-fileca.crt-trustcacerts-alias"WJZHIFUCA"-
keystoreWJZhiFuCA.jks
导入完成后,复制CA证书存储库到WebLogic的server/lib。
§3.1.2.2导入p7b的CA证书文件
P7b文件不能直接导入到存储库,应使用openssl工具将p7b文件转换为每证书一个der文件,然后参考上节导入各个文件。
转换p7b文件的命令如下:
opensslpkcs7-inca.p7b-outca.txt-outformPEM-informDEA-print_certs
编辑ca.txt文件,将每个-----BEGINCERTIFICATE-----打头,-----ENDCERTIFICATE-----结束的证书内容分别复制到一个文件中,然后顺序导入各个文件。导入完成后,导入完成后,复制CA证书存储库到WebLogic的server/lib。
§3.1.3部署证书文件
(1)启动WebLogic服务器,使用管理员登录到控制台;
(2)编辑Environment?Server的配置。本例编辑AdminServer;
(3)编辑Server的Keystore属性;
?Keystore选择为:CustomIdentityandCustomTrust;
?CustomIdentityKeystore:添加Server证书存储库全路径名;
?CustomIdentityKeystoreType:JKS
?填写该Server存储库的密码;
?CustomTrustKeystore:填写CA证书存储库的全路径名;
?CustomTrustKeystoreType:JKS
?填写该CA存储库的密码;
?Save
(4)编辑Server的SSL配置;
?IdentityandTrustLocations:KeyStores
?PrivateKeyAlias:填写为Server存储库私钥的别名,即AdminServer;
?填写Server存储库私钥的密码;
?Save。
至此,单向认证(客户端认证服务器)的SSL配置完成。
§3.2配置双向SSL认证
比照WebLogic服务器单向SSL认证的配置,完成服务器端的SSL配置,然后编辑Server?SSL?Advance配置。
?TwoWayClientCert:ClientCertsRequestedandEnforced;
?InboundCertificateValidation:BuiltinSSLValidationAndCertPathValidators;
?OutboundCertificateValidation:BuiltinSSLValidationAndCertPathValidators;
?Save
启用Server双向认证后,如果客户端没有相应的证书,则无法连接服务器。
§3.3WebLogic集群配置
本集群由三台计算机组成,AdminServer、Server1、Server2。AdminServer负责集群管理与部署,Server1和Server2组成集群提供对外服务。
§3.3.1准备证书文件
为AdminServer、Server1、Server2、Server1NodeManager、Server2NodeManager各准备一张Server证书,并参考“WebLogicServer双向SSL认证的配置”节,将这些证书和CA证书制作成如下文件:
文件名证书组成说明
ServerAdmin.jksAdminServer私钥
AdminServer证书CN=AdminServer
Server1.jksServer1私钥
Server1证书CN=server1.wjzhifu.com
Machine1.jksMachine1节点管理器私钥
Machine1节点管理器证书CN=machine1
Server2.jksServer2私钥
Server2证书
Server2节点私钥
Server2节点证书CN=server2.wjzhifu.com
Machine2.jksMachine2节点管理器私钥
Machine2节点管理器证书CN=machine2
ServerCA.jksCA证书CN=CA
注意:各证书的私钥密码应各不相同以提高安全性。
创建上述文件完成后,将ServerAdmin+ServerCA复制到管理服务器的wlserver_10.3\server\lib目录,Server1+Machine1+ServerCA复制到Server1的wlserver_10.3\server\lib目录,Server2+Machine2+ServerCA复制到Server2的wlserver_10.3\server\lib目录。
§3.3.2创建管理服务器和受管服务器的域
参考“创建管理服务器的域”和“创建受管服务器的域”章节,分别为管理服务器和每个Server创建域,并为AdminServer配置双向的SSL。创建域时应注意各机器域名、管理账号、密码均应相同。
创建各服务器的域完成后,启动管理服务器,并按下列步骤添加机器、Server、配置集群。
§3.3.2.1启动管理服务器
§3.3.2.2启动管理员终端,并登录
§3.3.2.3添加受管计算机
(1)创建计算机;
(2)编辑新建计算机的NodeManager属性;