NAME | SYNOPSIS | DESCRIPTION | OPTIONS | OPERANDS | EXAMPLES | EXIT STATUS | SEE ALSO
Use the create-domain command to create an administrative domain.
This command creates the configuration of a domain. A domain is an administrative namespace. Every domain has a configuration, which is stored in a set of files. Any number of domains each of which has a distinct administrative identity can be created in a given installation of application server. A domain can exist independent of other domains. Any user who has access to the asadmin script on a given system can create a domain and store its configuration in a folder of choice. By default, the domain configuration is created in the domains directory. You can override this location to store the configuration elsewhere.
A domain, in addition to being an administrative boundary, is also a fully compliant Java EE Server. This means that you can can deploy your Java EE Applications to the domain and run them when the domain is started. A domain provides all the necessary environment and services that are essential to run the applications.
A domain can be managed by tools such as the Administration GUI or asadmin.
This command is supported in local mode only.
Indicates that any output data must be very concise, typically avoiding human-friendly sentences and favoring well-formatted data for consumption by a script. Default is false.
Setting to true will echo the command line statement on the standard output. Default is false.
If set to true (default), only the required password options are prompted.
The directory where the domain is to be created. If specified, the path must be accessible in the filesystem. If not specified, the domain is created in the default domain directory.
The file name of a domain.xml template used to create the domain. This allows domains of different types to be created. This also allows you to define your own template.
The HTTP/S port for administration. This is the port to which you should point your browser (example, http://localhost:<this-port>) to manage the domain. The default value is 4848 for Platform Edition and 4849 for Enterprise Edition
The username of the adminstrator of the domain.
The file containing the domain application server password associated with the administrative instance. The create-domain command reads values for AS_ADMIN_ADMINPASSWORD and the AS_ADMIN_MASTERPASSWORD from this file. The password is defined in the following form: AS_ADMIN_ADMINPASSWORD=password, where password is the actual administrator password for the domain. The syntax for each is the same as the syntax for AS_ADMIN_PASSWORD. But create-domain reads the value of the AS_ADMIN_ADMINPASSWORD. In general, this file can contain many other passwords required by the asadmin commands. In adherence to application server security policy, asadmin does not accept clear text passwords on the command line.
If AS_ADMIN_ADMINPASSWORD and AS_ADMIN_MASTERPASSWORD are not in the passwordfile, create-domain command prompts for admin password as well as master password. If AS_ADMIN_ADMINPASSWORD is present in the file that is passed into -––passwordfile option, the create-domain command does not prompt for the master password. In this case, AS_ADMIN_MASTERPASSWORD defaults to the value, changeit.
Additionally, you may omit the ––passwordfile from the command line and allow the system to prompt you for these options.
Indicates that any output data must be very concise, typically avoiding human-friendly sentences and favoring well-formatted data for consumption by a script. Default is false.
As noted above, the domain provides services so that applications can run when deployed. This (HTTP) port specifies where the web application context roots are available for a Web browser to connect to. This port is a positive integer and must be available at the time of creation of the domain.
Setting the optional name/value pairs overrides the default values for the properties of the domain to be created. The list must be separated by the “:” character. The following properties are available:
Property |
Definition |
---|---|
jms.port |
Specifies the port number for JMS. Valid value is 7676 |
domain.jmxPort |
Specifies the port on which the JMX connector is initialized. The valid values are 1-65535. |
orb.listener.port |
Specifies which ORB listener port for IIOP connections orb-listener-1 listens on. |
http.ssl.port |
Specifies the port number for http-listener-2. Valid values are 1–65535. On UNIX, creating sockets that listen on ports 1–1024 requires superuser privileges. |
orb.ssl.port |
Specifies which ORB listener port for IIOP connections the IIOP listener called SSL listens on. |
orb.mutualauth.port |
Specifies which ORB listener port for IIOP connections the IIOP listener called SSL_MUTUALAUTH listens on. |
Setting this option to true allows the masterpassword to be written to the file system. A master password is really a password for the secure key store. A domain is designed to keep its own certificate (created at the time of domain creation) in a safe place in the configuration location. This certificate is called domain's SSL server certificate. When the domain is contacted by a Web browser over a secure channel (HTTPS), this certificate is presented by the domain. The master password is supposed to protect this store (a file) that contains this certificate. This file is called keystore.jks and is created in the config directory of the domain created. If however, this option is chosen, the master password is saved on the disk in domain's configuration location. The master password is stored in a file called master-password, which is a Java JCEKS type keystore. The only advantage of using this option is in case of unattended system boots, where at the time of start-domain, the master password is not prompted for, because it will be extracted from this file.
It is best to create a masterpassword when creating a domain, because masterpassword is used by the start-domain command. For security purposes, the default setting should be false, because saving the masterpassword on the disk is an insecure practice, unless file system permissions are properly set. If masterpassword is saved, then start-domain will not prompt for it. Masterpassword gives an extra level of security to the environment.
Saves the admin user name and password if you set this option to true. The default value is false. The username and password are stored in the .asadminpass file in user's home directory. A domain can only be created locally and hence while using the above option, the host name saved in .asadminpass will always be localhost. If the user has specified default admin port while creating the domain, there is no need to specify -––user, -––passwordfile, -––host, or -––port on any of the subsequent asadmin remote commands. These values will be automatically obtained.
When the same user creates multiple domains having same admin port number on the same or different machines (where the home directory is NFS mounted), the command is not going to prompt whether the password should be overwritten. It will always be overwritten.
The following command creates sampleDomain domain in the /export/domains directory
asadmin> create-domain --domaindir /export/domains --adminport 7070 --adminuser admin --instanceport 7071 sampleDomain Please enter the admin password> Please enter the admin password again> Please enter the master password> Please enter the master password again> Using default port 7676 for JMS. Using default port 3700 for IIOP. Using default port 8181 for HTTP_SSL. Using default port 3820 for IIOP_SSL. Using default port 3920 for IIOP_MUTUALAUTH. Using default port 8686 for JMX_ADMIN. Domain sampleDomain created. |
The following command creates the myDomain domain and saves the admin username and password.
asadmin> create-domain --adminport 8282 --adminuser admin --savelogin=true myDomain Please enter the admin password> Please enter the admin password again> Please enter the master password> Please enter the master password again> Default port 8080 for HTTP Instance is in use. Using 40718 Default port 7676 for JMS is in use. Using 40719 Default port 3700 for IIOP is in use. Using 40720 Default port 8181 for HTTP_SSL is in use. Using 40721 Default port 3820 for IIOP_SSL is in use. Using 40722 Default port 3920 for IIOP_MUTUALAUTH is in use. Using 40723 Default port 8686 for JMX_ADMIN is in use. Using 40724 Domain myDomain created. The admin user name and encoded password is saved in [/home/Joe/.asadminpass]. Make sure that this file remains protected. If admin user name and password is not specified otherwise, asadmin will use the information stored in this file to administer this domain [myDomain]. |
NAME | SYNOPSIS | DESCRIPTION | OPTIONS | OPERANDS | EXAMPLES | EXIT STATUS | SEE ALSO