DEAR GURUS,
We did a fresh installation of OBIEE 12c on Windows Server 2012 R2, OBIEE 12.2.1.3.0.
The issue is like:
We are trying to implement SSL in Weblogic/OBIEE.
I have created the certificates and got it signed by CA. I have applied the certificates and SSL is working fine.
Issue is, when I am using the START.cmd/ STOP.cmd, the Nodemanager is not coming online with below error:
D:\OBIEE12cDEVInt\wlserver\server\bin>startNodeManager.cmd
CLASSPATH=.;C:\PROGRA~1\Java\JDK18~1.0_1\lib\tools.jar;D:\OBIEE12cDEVInt\wlserve
r\server\lib\weblogic.jar;D:\OBIEE12cDEVInt\oracle_common\modules\thirdparty\ant
-contrib-1.0b3.jar;D:\OBIEE12cDEVInt\wlserver\modules\features\oracle.wls.common
.nodemanager.jar;;D:\OBIEE12cDEVInt\wlserver\modules\features\oracle.wls.common.
grizzly.jar
D:\OBIEE12cDEVInt\oracle_common\common\nodemanager>"C:\PROGRA~1\Java\JDK18~1.0_1
\bin\java.exe" -server -Xms32m -Xmx200m -Djdk.tls.ephemeralDHKeySize=2048 -Dweb
logic.RootDirectory=D:\OBIEE12cDEVInt\oracle_common\common\nodemanager -Dcoheren
ce.home=D:\OBIEE12cDEVInt\coherence -Dbea.home=D:\OBIEE12cDEVInt -Djava.system.c
lass.loader=com.oracle.classloader.weblogic.LaunchClassLoader "-Djava.security.p
olicy=D:\OBIEE12cDEVInt\wlserver\server\lib\weblogic.policy" "-Dweblogic.nodeman
ager.JavaHome=C:\PROGRA~1\Java\JDK18~1.0_1" weblogic.NodeManager -v
<Nov 3, 2017 6:41:42 AM EDT> <INFO> <Loading domains file: D:\OBIEE12cDEVInt\ora
cle_common\common\nodemanager\nodemanager.domains>
<Nov 3, 2017 6:41:43 AM EDT> <INFO> <Loading identity key store: FileName=D:\OBI
EE12cDEVInt\oracle_common\common\nodemanager\security\DemoIdentity.jks, Type=jks
, PassPhraseUsed=true>
<Nov 3, 2017 6:41:43 AM EDT> <SEVERE> <Fatal error in NodeManager server>
weblogic.nodemanager.common.ConfigException: Identity key store file not found:
D:\OBIEE12cDEVInt\oracle_common\common\nodemanager\security\DemoIdentity.jks
at weblogic.nodemanager.server.SSLConfig.loadKeyStoreConfig(SSLConfig.ja
va:225)
at weblogic.nodemanager.server.SSLConfig.access$000(SSLConfig.java:33)
at weblogic.nodemanager.server.SSLConfig$1.run(SSLConfig.java:118)
at java.security.AccessController.doPrivileged(Native Method)
at weblogic.nodemanager.server.SSLConfig.<init>(SSLConfig.java:115)
at weblogic.nodemanager.server.NMServer.<init>(NMServer.java:169)
at weblogic.nodemanager.server.NMServer.getInstance(NMServer.java:134)
at weblogic.nodemanager.server.NMServer.main(NMServer.java:589)
at weblogic.NodeManager.main(NodeManager.java:31)
( was unexpected at this time.
My NodeManager.properties file:
#Fri Nov 03 03:11:48 EDT 2017
#Thu Nov 02 04:55:42 EDT 2017
#Wed Nov 01 07:33:09 EDT 2017
#Node manager properties
#Wed Nov 01 07:15:31 EDT 2017
DomainsFile=D\:\\OBIEE12cDEVInt\\user_projects\\domains\\bi\\nodemanager\\nodemanager.domains
LogLimit=0
PropertiesVersion=12.2.1.3.0
AuthenticationEnabled=true
NodeManagerHome=D\:\\OBIEE12cDEVInt\\user_projects\\domains\\bi\\nodemanager
JavaHome=C\:\\PROGRA~1\\Java\\JDK18~1.0_1
LogLevel=INFO
DomainsFileEnabled=true
ListenAddress=COV2OBIEEDEV.am.tsacorp.com
NativeVersionEnabled=true
ListenPort=9506
LogToStderr=true
weblogic.StartScriptName=startWebLogic.cmd
SecureListener=true
LogCount=1
QuitEnabled=false
LogAppend=true
weblogic.StopScriptEnabled=false
StateCheckInterval=500
CrashRecoveryEnabled=false
weblogic.StartScriptEnabled=true
LogFile=D\:\\OBIEE12cDEVInt\\user_projects\\domains\\bi\\nodemanager\\nodemanager.log
LogFormatter=weblogic.nodemanager.server.LogFormatter
ListenBacklog=50
KeyStores=CustomIdentityAndCustomTrust
CustomIdentityKeystoreType=jks
CustomIdentityKeyStoreFileName=D:\\OBIEE12cDEVInt\\ssl\\myIdentity_DEV.jks
CustomIdentityKeyStorePassPhrase={AES}1B/TPs2f8Xo18UjcXaDpMuaLlR5kq7DalGH7T4uTpDw=
CustomIdentityPrivateKeyPassPhrase={AES}FcUsStSIh+fNF18zwg+AhNAEey5mdGzE4MpSeXQ9yRQ=
CustomIdentityAlias=COV2OBIEEDEV
CustomTrustKeystoreType=jks
CustomTrustKeyStoreFileName=D:\\OBIEE12cDEVInt\\ssl\\myTrust_DEV.jks
Question: I am unable to understand why the nodemanager is trying to search the certificate in demoidentity when I am using CustomIdentity and Custum Trust?
Am I missing any file updates/path changes here, please?
Note: Nodemanager is working fine when I am starting it using STARTNODEMANAGER.CMD
I am following the below Oracle link for this:
https://docs.oracle.com/middleware/1221/biee/BIESC/ssl.htm#BIESC6423
Any pointer/documents are appreciated.
Thanks in Advance.