2. About Sun GlassFish Enterprise Server
3. Known Issues and Limitations
Enterprise Server does not detect conflicts with the heartbeat port of a cluster (Issue number 1967)
Domain creation stops on NFS server running 64-bit Linux (Issue Number 1961)
Performance degradation seen when a huge log file is rotated (6718611)
Failed to Deploy Generic RA Resource Adapter against IBM MQ (Issue 6605)
Standalone instances sometimes obtain files from other instances (6698604)
Startup Message from the start-cluster command are too verbose (6728317)
Failed to Deploy Generic RA Resource Adapter against IBM MQ (Issue 6605)
The package-appclient script does not work if domain1 is not present (6171458)
Starting the Server with additional JMX Agent is not supported (6200011)
.asadmintruststore file not described in the Enterprise Server documentation (6315957)
Clustered instances fail to start due to a timeout in reaching the JMS broker (6523663)
Cannot display jmaki chart in Netscape 8.1.3, Mozilla 1.7 and Safari 2.0.4 browsers (6543014)
Default ports changing in each AS major release (6566481)
The create-domain command fails with custom master password in AIX (6628170)
Solution: (AIX) To Create a Domain With a Custom Master Password
AIX: 0403-027 The parameter list is too long (6625591)
(AIX) To Increase the Maximum Length of the Command Line
Apache and Load Balancer Plugin
SGES 2.1.1 Patch 2 LB plugin on WS7u8 crashes the web server on SUSE Linux 10 SP2 (6928066)
Must start Apache Web Server as root (6308021)
Library JAR packaged in Application Client Archive overwrites MANIFEST file (6193556)
ACC always tries to connect to localhost:3700 (6527987)
Unable to start domain , missing sunpkcs11.jar (6571044)
PreparedStatement errors (6170432)
Java DB is not started after machine reboot or server start (6515124)
Autodeployment fails on a cluster sometimes (6610527)
Bundled ANT throws java.lang.NoClassDefFoundError (6265624)
Application specific classloader not used by JSP compilation (6693246)
Javadoc Inconsistencies (various IDs)
GlassFish 2.x documentation referring to invalid create-session-store command (6935976)
HTTP Service Statistics attributes discrepancies (7018903)
Glassfish GFv2 Mod_JK AJP listens to all interfaces (7008190)
[UB]The *Global Transaction support box* is nowhere to be found (7536)
Misleading Documentation for Configuring JMS Physical Destinations
Upgrade Procedure is Confusing
Resouce Injection does not work in HandlerChain (6750245)
HADB Configuration with Double Networks (no ID)
HADB Database Creation Fails (no ID)
hadbm set does not check resource availability (disk and memory space) (5091280)
Heterogeneous paths for packagepath not supported (5091349)
hadbm createdomain may fail (6173886, 6253132)
Starting, stopping, and reconfiguring HADB may fail or hang (6230792, 6230415)
The management agent terminates with the exception "IPV6_MULTICAST_IF failed" (6232140)
clu_trans_srv cannot be interrupted (6249685)
hadbm does not support passwords containing capital letters (6262824)
Install/removal and symlink preservation (6271063)
Management agents in global and local zones may interfere (6273681)
Non-root users cannot manage HADB (6275319)
The Management Agent should not use special-use interfaces (6293912)
Reassembly failures on Windows (6291562)
Session state not maintained if the browser has another cookie with / path (6553415)
LB does not work with IIS 6; SASL32.DLL and ZLIB.DLL missing under as-install/lib (6572184)
DAS creation/startup and HA package propagation issues in Global Zone (6573511)
Enable/disable LB for an instance/cluster should show correct status (6595113)
Installer decoration image shows old product version (6862674)
The start-domain Command Times Out on OpenSolaris 2008.11 (6820169 and 6741572)
Enterprise profile installation is not supported with a 64-bit JVM on a 64-bit platform (6977626)
Installation with 64-bit JDK Fails (6796171)
Enterprise Server installer crashes on Linux (6739013)
Installation shutdown hanging on some Linux systems after clicking the "Finish" button (5009728)
On Windows, the imq directory needs to be created during installation (6199697)
IFR. Was not able to install AS in the sparse local zone, MQ packages issue. (6555578)
After upgrade, the following exceptions are seen in the log when a domain is started. (6774663)
TopLink expects my Collection field/property to be cloneable (Issue Tracker 556)
GenerationType.IDENTITY and DataDirect Driver with SyBase (Issue Tracker 2431)
Setting ejb-timer-service property causes set command to fail (6193449)
Error thrown when list JMS physical destinations within non-DAS config (6532532)
Win2003 only: Non-paged pool leak memory, breaking tcp stack and richaccess test (6575349)
Setting debug statement for access,failure causes hang in server startup (6180095)
Log level Setting for Persistence Cannot Be Made Persistent (13253247)
Enterprise Server Does Not Start If MQ Broker is Not Started (6740797)
MQ broker fails to start with cluster profile on Linux (6524871)
Mismatch of old and new classes is created when imqjmsra.jar is loaded before upgrade (6740794)
Open JNDI Browsing from Admin UI dumps a huge amount of exceptions in the server.log (6591734)
AIX: monitor command doesn't work on AIX (6655731)
Solution: To Install the Missing libcliutil.so Library File
Installation Log Shows Failures for Samples Installation (6802286)
After upgrade Enterprise Server samples and JES5 portal samples compete on derby port 1527 (6574563)
Expired Root CA for CN=GTE CyberTrust Root 5, OU=GTE CyberTrust Solutions, Inc. (17405362)
To Delete the GTE CyberTrust Root 5 Certificate From the Truststore
Modify Policy Files for Existing Domains (17419736 and 17574160)
CA Certificate bundled with Enterprise Server v2.1.1 has expired (12287499)
OutofMemory Error in SSL Scenarios During Heavy Stress (JDK 6 Issue 23)
AIX: WSS dynamic encrypt key test failed due to server side certification validation error (6627379)
SSL termination is not working (6269102)
Socket connection leak with SSL (6492477)
General Vulnerability Assessment (Issue 17287)
Different domains are lost during upgrade when different build combinations are used (6546130)
Localized Online Help for asupgrade GUI Does Not Exist (6610170)
Solution: To Preserve All Node Agents in a Side-by-Side Upgrade of Multiple Domains
In-place upgrade does not update the index.html file of existing domain (6831429)
Unable to compile JSP page on resource constrained servers (6184122)
Enterprise Server does not support auth-passthrough Web Server 6.1 Add-On (6188932)
AS 9.1 b50e.Linux. Can not start WS after AS LB installation: libjvm.so:cannot open shared (6572654)
Ant task wsimport fails with Java EE SDK b33d (using JDK 1.6) with NoClassDefFoundError (6527842)
publish-to-registry commands fail in IFR EE builds (6602046)
wscompile fails with "package javax.xml.rpc does not exist" on JDK6 u4 b3 (6638567)
This section describes known high availability database (HADB) issues and associated solutions.
Load balancer plug-in healthcheck generates a large number of connection/disconnection at the background (load). For health check purposes, a runDaemonMonitor thread performs connect/disconnect for every Application Server listener. This can lead to connection saturation on Enterprise Server.
A new attribute, monitor-interval-in-seconds, has been developed for the loadbalancer.xml file. This attribute can be used to insert a pause between connect/disconnect events in the case where hundreds of listeners are configure for the load balancer plug-in. Default pause value is 0.
HADB configured with double networks on two subnets works properly on Solaris SPARC. However, due to problems in the operating system or network drivers on some hardware platforms, it has been observed that Solaris x86 and Linux platforms do not always handle double networks properly. This causes the following problems with HADB:
On Linux, some of the HADB processes are blocked when sending messages. This causes HADB node restarts and network partitioning.
On Solaris x86, some problems may arise after a network failure that prevent switching to the other network interface. This does not happen all the time, so it is still better to have two networks than one. These problems are partially solved in Solaris 10.
Trunking is not supported.
HADB does not support double networks on Windows 2003 (ID 5103186).
Creating a new database may fail with the following error, stating that too few shared memory segments are available:
HADB-E-21054: System resource is unavailable: HADB-S-05512: Attaching shared memory segment with key "xxxxx" failed, OS status=24 OS error message: Too many open files.
Verify that shared memory is configured and the configuration is working. In particular, on Solaris 8, inspect the file /etc/system, and check that the value of the variable shmsys:shminfo_shmseg is at least six times the number of nodes per host.
When increasing device or buffer sizes using hadbm set, the management system checks resource availability when creating databases or adding nodes, but does not check if there are sufficient resources available when device or main-memory buffer sizes are changed.
Verify that there is enough free disk/memory space on all hosts before increasing any of the devicesize or buffersize configuration attributes.
It is not possible to register the same software package with the same name with different locations at different hosts; for example:
hadbm registerpackage test --packagepath=/var/install1 --hosts europa11 Package successfully registered. hadbm registerpackage test --packagepath=/var/install2 --hosts europa12 hadbm:Error 22171: A software package has already been registered with the package name test.
HADB does not support heterogeneous paths across nodes in a database cluster. Make sure that the HADB server installation directory (--packagepath) is the same across all participating hosts.
If running the management agent on a host with multiple network interfaces, the createdomain command may fail if not all network interfaces are on the same subnet:
hadbm:Error 22020: The management agents could not establish a domain, please check that the hosts can communicate with UDP multicast.
The management agents will (if not configured otherwise) use the "first" interface for UDP multicasts ("first" as defined by the result from java.net.NetworkInterface.getNetworkInterfaces()).
The best solution is to tell the management agent which subnet to use (set ma.server.mainternal.interfaces in the configuration file, e.g., ma.server.mainternal.interfaces=10.11.100.0). Alternatively one may configure the router between the subnets to route multicast packets (the management agent uses multicast address 228.8.8.8).
Before retrying with a new configuration of the management agents, you may have to clean up the management agent repository. Stop all agents in the domain, and delete all files and directories in the repository directory (identified by repository.dr.path in the management agent configuration file). This must be done on all hosts before restarting the agents with a new configuration file.
On Solaris 10 Opteron, starting, stopping or reconfiguring HADB using the hadbm command may fail or hang with one of the following errors:
hadbm:Error 22009: The command issued had no progress in the last 300 seconds. HADB-E-21070: The operation did not complete within the time limit, but has not been cancelled and may complete at a later time.
This may happen if there are inconsistencies reading/writing to a file (nomandevice) which the clu_noman_srv process uses. This problem can be detected by looking for the following messages in the HADB history files:
n:3 NSUP INF 2005-02-11 18:00:33.844 p:731 Child process noman3 733 does not respond. n:3 NSUP INF 2005-02-11 18:00:33.844 p:731 Have not heard from it in 104.537454 sec. n:3 NSUP INF 2005-02-11 18:00:33.844 p:731 Child process noman3 733 did not start.
The following workaround is unverified, as the problem has not been reproduced manually. However, running this command for the affected node should solve the problem.
hadbm restartnode --level=clear nodeno dbname
Note that all devices for the node will be reinitialized. You may have to stop the node before reinitializing it.
When starting on a host running Solaris 8 with several NIC cards installed, if there is a mixture of cards with IPv6 and IPv4 enabled, the management agent may terminate with the exception "IPV6_MULTICAST_IF failed."
Set the environment variable JAVA_OPTIONS to -Djava.net.preferIPv4Stack=true; for example:
export JAVA_OPTIONS="-Djava.net.preferIPv4Stack=true"
Alternatively, use Solaris 9 or later, which do not exhibit this problem.
There is a bug in the 64-bit version of Red Hat Enterprise Linux 3.0 that makes the clu_trans_srv process end up in an uninterruptible mode when performing asynchronous I/O. This means that kill -9 does not work and the operating system must be rebooted.
Use a 32-bit version of Red Hat Enterprise Linux 3.0.
Capital letters in passwords are converted to lowercase when the password is stored in hadb.
Do not use passwords containing capital letters.
When downgrading to a previous HADB version, the management agent may fail with different error codes.
It is possible to downgrade the HADB database, however the management agent cannot be downgraded if there changes have been made in the repository objects. After a downgrade, you must keep use the management agent from the latest HADB version.
Regarding install/removal of HADB c package (Solaris: SUNWhadbc, Linux: sun-hadb-c) version <m.n.u-p>, the symlink /opt/SUNWhadb/<m> is never touched once it exists. Thus, it is possible that an orphaned symlink will exist.
Delete the symlink before install or after uninstall unless in use.
On Solaris 10, stopping a management agent by using the ma-initd script in a global zone stops the management agent in the local zone as well.
Do not install the management agent both in the global and local zone.
Sometimes, a resource contention problem on the server may cause a management client to become disconnected, When reconnecting, a misleading error message "hadbm:Error 22184: A password is required to connect to the management agent" may be returned.
Sometimes, a resource contention problem on the server may cause a management client to become disconnected, When reconnecting, a misleading error message "hadbm:Error 22184: A password is required to connect to the management agent" may be returned.
Check if there is a resource problem on the server, take proper action (e.g., add more resources), and retry the operation.
Installing with Java Enterprise System (as root) does not permit non-root users to manage HADB.
Always login as root to manage HADB.
Special use interfaces with IP addresses like 0.0.0.0 should not be registered as valid interfaces to be used for HADB nodes in the Management Agent. Registering such interfaces may cause problems if HADB nodes are set up on these interfaces by means of a user issuing a hadbm create command using host names instead of IP addresses. The nodes will then be unable to communicate, causing the create command to hang.
When using hadbm create on hosts with multiple interfaces, always specify the IP addresses explicitly using DDN notation.
On the Windows platform, with certain configurations and loads, there may be a large number of reassembly failures in the operating system. The problem has been seen with configurations of more than twenty nodes when running several table scans (select *) in parallel. The symptoms may be that transactions abort frequently, repair or recovery may take a long time to complete, and there may be frequent timeouts in various parts of the system.
To fix the problem, the Windows registry variable HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters can be set to a value higher than the default 100. It is recommended that you increase this value to 0x1000 (4096). For more information, see. article 811003 from the Microsoft support pages.
Cookies with a path equal to “/” interfere with the cookies of a highly available web application deployed at a context root other than “/” that uses in-memory replication as its persistence type, making it impossible for the highly available web application to maintain any HTTP session state. One common scenario where this may happen is when using the same browser to access both the Admin GUI (which is deployed at “/”) and the highly available web application.
Access the web application deployed at “/” from a different browser.
SASL32.DLL and ZLIB.DLL are required files for Load Balancer to work with Windows IIS 6. These files are currently not available under as-install/lib.
Copy the two DLL files manually to as-install/lib. These files can be downloaded from:
http://download.java.net/javaee5/external/OS/aslb/jars/
Where OS represents the desired platform, and can be one of the following values:
SunOS
SunOS_X86
Linux
WINNT
Two issues arise when installing or uninstalling Enterprise Server with High Availability packages in a Global Zone:
HA packages get installed in all zones, which may not be desirable.
When uninstalling, HA, MQ, JDK packages get removed from all zones, which may not be desirable.
This problem does not occur when installing or uninstalling from a root local zone.
Perform installation and uninstallations from a local root zone rather than a global zone.
Highly available web applications deployed at “/” are unable to maintain any HTTP sessions when using in-memory replication as their persistence type.
Deploy highly available web applications that use in-memory replication as their persistence type to a context root other than “/”. If you want to make such a web application available at “/”, you may designate it as the default-web-module of the virtual server to which the web application has been deployed.
During Enterprise Server Load Balancer installation for Apache on Solaris, the installer updates LD_LIBRARY_PATH in the apachectl script. However, the installer does not correctly write the /usr/lib/mps path. On Solaris, the Apache security instance will not start without this path in LD_LIBRARY_PATH.
This issue exists only on Solaris platforms. To work around the issue, add /opt/SUNWappserver/appserver/lib/lbplugin/lib to your LD_LIBRARY_PATH.
The Enable LoadBalance button is always enabled on the Clustered/Instance general page, regardless of what is saved in domain.xml.
For clustered instances, select Instances tab, and then click the Quiesce action from the table pull-down.
For standalone instances, make sure the instance is running, and then click the Quiesce button on instance General screen.
(Solaris only) After installing Enterprise Server v2.1.1 on SPARC Solaris 10 with HADB, you may receive the following error after starting Enterprise Server and then attempting to install JES 5 UR1 with Registry Server:
Dependency Error: Installation can not proceed because the version of HA Session Store 4.4.3 detected on this host is incomplete , and a compatible version is required by Servervice Registry Deployment Support.
It is not possible to install Registry Server from JES 5 UR1 with Enterprise Server IFR on Solaris machines. The Registry Server packages have to be installed manually using the pkgadd command from the following JES5 UR1 distribution directory:
path/OS/Products/registry-svr/Packages
(Internet Explorer 6 and 7 only) When attempting to export the Load Balancer configuration file (loadbalancer.xml) from Internet Explorer 6 or 7, the browser displays an error message saying that the sun-loadbalancer_1_2.dtd DTD file cannot be located.
To save the file, use the following workaround:
Click Export on the Load Balancer page in Internet Explorer.
The “XML page cannot be displayed” message is displayed.
Click the error frame, and then choose File->Save As from the Internet Explorer.
Save the loadbalancer.xml file to the directory of your choice.