Skip navigation.

eDocs Home > BEA WebLogic Server 8.1 Documentation > Administration Console Online Help > Machines

Administration Console Online Help

  Previous Next vertical dots separating previous/next from contents/index/pdf Contents Index

Machines

[Attributes and Console Screen Reference for Machines]

A machine is a logical representation of the physical machine (computer) that hosts one or more WebLogic Server instances.

If you run Node Manager on a machine that does not host an Administration Server, as is typical in production environments, you must create a machine configuration for each computer that runs a Node Manager process. The machine configuration includes information about the listen address and port number that the Administration Server uses to connect with the Node Manager process running on that machine.

In a cluster, WebLogic Server uses machines to ensure that server session data is replicated on separate pieces of hardware.

If the computer runs a UNIX operating system, you can create a UNIX machine configuration, which enables you to assign the process under which a WebLogic Server instance runs to a user ID (UID) or group ID (GID). The WebLogic Server process is assigned (bound) to the UID or GID after the computer has carried out all privileged startup actions.

 

Tasks

Configuring a Machine

  1. Click the Machines node. The Machines table displays in the right pane showing all the machines defined in the domain.
  2. Click the Configure a New Machine link (or, if you are configuring a UNIX machine, click the Configure a New Unix Machine link). A dialog displays in the right pane showing the tabs associated with the new machine.
  3. Enter a name for the new machine in the Name attribute field. This name is used to identify the machine within the WebLogic Server domain; it does not have to correspond to the machine's network name.

Note: The name must be unique in relation to all other configurable resources in the domain.

  1. If you are creating a UNIX machine and you want to bind the processes under which WebLogic Server instances run to a user ID or group ID, do any of the following:
  2. Click Create to create a machine instance with the name you specified. The new instance is added to the Machines node in the left pane.
  3. Click the Node Manager tab to define the Node Manager connection and authentication attributes for the machine.

    4. Enter the DNS name or IP address upon which Node Manager listens in the Listen Address box. If you identify the Listen Address by IP address, you must disable Host Name Verification on Administration Servers that will access Node Manager. For more information and instructions, see Using a Hostname Verifier in Managing WebLogic Security.

    Click Apply to apply your changes.

  4. Click the Servers tab to identify which Managed Servers reside on this machine. To assign an existing server to this machine, select the server name in the Available column, and click the appropriate arrow to move the server to the Chosen column.
  5. Click Apply to apply your changes. The new machine entry now specifies the attributes required to connect to the Node Manager process running on the machine, as well as identify which WebLogic Server instances reside on the machine.

Cloning a Machine

  1. Click the Machines node. The Machines table displays in the right pane showing all the machines defined in the domain.
  2. Click the Clone icon in the row of the machine you want to clone. A dialog displays in the right pane showing the tabs associated with cloning a machine.
  3. Enter a name for the new machine in the Name attribute field.
  4. Click Clone to create a machine instance with the name you specified in the Name field. The new instance is added under the Machines node in the left pane.
  5. Click the Node Manager tab and modify the connection information as needed.
  6. Click the Servers tab and modify the list of servers that this machine hosts.
  7. Click Apply to save the changes.

Deleting a Machine

  1. Click the Machines node. The Machines table displays in the right pane showing all the machines defined in the domain.
  2. Click the Delete icon in the row of the machine you want to delete. A dialog displays in the right pane asking you to confirm your deletion request.
  3. Click Yes to delete the machine. The machine instance is deleted from the Machines node in the left pane.

Assign a WebLogic Server Instance to a Machine

  1. Click the Machines node. The Machines table displays in the right pane showing all the machines defined in the domain
  2. Click the name of the machine to which you wish to assign a server instance.
  3. Click the Servers Tab in the right pane.
  4. Select a server from the Available box.
  5. Click the right arrow to move the server to the Chosen box.
  6. Click Apply.

Monitoring Node Manager Status

  1. Click the Machines node. The Machines table displays in the right pane showing all the machines defined in the domain
  2. Click the name of the machine on which you wish to monitor Node Manager.
  3. Click the Monitoring tab in the right pane. If Node Manager is currently running on the machine, the Node Manager Status tab displays the following information about the Node Manager process:
  4. To view the contents of the Node Manager Log, click the Node Manager Log tab g tab in the right pane. If Node Manager is currently running on the machine, contents of the log file are displayed.

Monitoring Node Manager Log

  1. Click the Machines node. The Machines table displays in the right pane showing all the machines defined in the domain
  2. Click the name of the machine on which you wish to monitor Node Manager.
  3. Click the Monitoring tab in the right pane.
  4. To view the contents of the Node Manager Log, click the Node Manager Log tab g tab in the right pane. If Node Manager is currently running on the machine, contents of the log file are displayed.

Binding to Protected Ports on UNIX

On UNIX systems, only processes that run under a privileged user account (in most cases, root) can bind to ports lower than 1024. However, long-running processes like WebLogic Server should not run under these privileged accounts.

If you want a WebLogic Server instance to bind to protected ports (such as port 80), do either of the following:

To configure a server instance to bind to protected ports on UNIX:

  1. Start the Administration Server for the domain.

    2. See Starting Administration Servers.

  2. Stop the server instances that you want to configure.
  3. Create a UNIX machine and assign the server to the machine:
    1. In the Administration Console, in the left pane, click on the Machines folder.
    2. In the right pane, select the Configure a New Unix Machine link.
    3. On the Create a New UNIX Machine page, in the Name field, enter a name for the new machine.

      4. A machine represents the physical machine that hosts one or more WebLogic Server instances. BEA recommends that you create one UNIX machine for each UNIX host that runs instances of WebLogic Server.

      The machine name is used for identification within the WebLogic Server domain; it does not have to correspond to the machine's network name.

      Note: Assign a unique name to the machine. Each configurable resource in your WebLogic Server environment should have a unique name.

    4. To specify a non-privileged user account under which the server instance runs, place a check mark in the Enable Post-bind UID field and enter the user ID in the Post-Bind UID field.

      5. The user ID that you enter must have read, write, and execute privileges within the BEA Home directory, the WebLogic Server product directory tree, and your domain directory.

      The default value of the Post-Bind UID field, nobody, is a standard UNIX account that provides the least possible privileges. While the nobody account is acceptable for use in a development environment, in a production environment, BEA recommends that you create an operating-system user account specifically for running instances of WebLogic Server. See "Securing the WebLogic Server Host."

    5. To specify a non-privileged group instead of (or in addition to) providing a user ID, place a check mark in the Enable Post-bind GID field and enter the group ID in the Post-Bind GID field.
    6. Click Create.
    7. Select the Servers tab. Move each server instance that you want to run on this UNIX machine from the Available list to the Chosen list. Then click Apply.
    8. If you want to use the Node Manager to start server instances on this UNIX machine, click the Node Manager tab and specify the address and listen port through which the Node Manager can be reached.

      9. In a production environment, BEA recommends that you specify a listen port that is secured by SSL. See Binding to Protected Ports with Servers That a Node Manager Starts.

      Click Apply to apply your changes.

  4. Log in to the WebLogic Server host computer under an account that has access to protected ports.
  5. Do either of the following for the server instances that you assigned to the UNIX machine:

The WebLogic Server instance starts under the privileged user ID. After it binds to ports, it invokes native code to change its user or group ID to the one you specified in the UNIX machine configuration.

Binding to Protected Ports with Servers That a Node Manager Starts

Node Manager is a small Java application that runs on WebLogic Server hosts and can start and stop instances of WebLogic Server. When Node Manager starts a server instance, the server instance starts under the same user account under which the Node Manager is running.

If you Node Manager to start server instances that bind to protected ports, you must run the Node Manager under a privileged account. If you configure a post-bind user ID or group for a server instance, after Node Manager starts a server, the server binds to ports and then changes the user account under which it runs.

In a production environment, BEA recommends that you do the following to secure Node Manager:

  1. Configure the Node Manager to listen on a port that is secured by SSL.
  2. In the Node Manager's nodemanager.hosts file, specify the host name of the Administration Server only.

See "Configuring Node Manager."

With the above configuration, Node Manager will accept requests only on a secure port and only from a single, known host.

 

Skip navigation bar  Back to Top Previous Next