Security for Automatic Restarts

If you are using the cluster or enterprise profile, the administration passworda and master password are required when automatically restarting Application Server. If you are using the Developer Profile, no

Handle the password and master password requirements for cluster and enterprise profiles in one of the following ways:

• On Microsoft Windows, configure the service to ask the user for the password.

  1. In the Services Control Panel, double-click the service you created.

  2. In the Properties window, click the Log On tab.

  3. Check “Allow service to interact with desktop” to prompt for the required passwords when starting the component.

     You have to log in to see the prompts, and entries are not echoed back as you type them. This method is the most secure way to use the services option, but user interaction is required before the service becomes available.

     If the “interact with desktop” option is not set, the service stays in a “start-pending” state and appears to hang. Kill the service process to recover from this state.

• On Windows or UNIX, create a domain using the --savemasterpassword=true option and create a password file to store the admin password. When starting the component, use the --passwordfile option to point to the file that contains the password.

  For example:

  1. Create domain with a saved master password. In this syntax, you are prompted for the administration password and master password:

     asadmin create-domain --adminport 4848 --adminuser admin --savemasterpassword=true --instanceport 8080 domain1

  2. On Windows, create a service using a password file to populate the admin password:

     C:\windows\system32\sc.exe create domain1 binPath= 
     "C:\Sun\AppServer\lib\appservService.exe \"C:\Sun\AppServer\bin\asadmin.bat 
     start-domain --user admin 
     --passwordfile C:\Sun\AppServer\password.txt domain1\" 
     \"C:\Sun\AppServer\bin\asadmin.bat stop-domain domain1\"" start= auto 
     DisplayName= "SunJavaSystemAppServer DOMAIN1"

     The path to the password file password.txt is C:\Sun\AppServer\password.txt. It contains the password in the following format

     AS_ADMIN_password=password

     For example, for a password adminadmin:

     AS_ADMIN_password=adminadmin

  3. On UNIX, use the --passwordfile option in the line you add to the inittab file:

     das:3:respawn:/opt/SUNWappserver/bin/asadmin start-domain --user admin --passwordfile /opt/SUNWappserver/password.txt domain1

     The path to the password file password.txt is /opt/SUNWappserver/password.txt. It contains the password in the following format

     AS_ADMIN_password=password

     For example, for a password adminadmin:

     AS_ADMIN_password=adminadmin