weblogic11g 修改密码和重置密码【原】

修改密码

知道密码的情况下,可参考该链接 http://www.cnblogs.com/may12138/p/6022946.html

或 http://www.cnblogs.com/lsdb/p/6610394.html

重置密码

我们先约定

声明简称	中文意义	我的开发环境举例说明
%DOMAIN_HOME%	Server 域(Domain)目录	%DOMAIN_HOME%=/data/bea/weblogic11/user_projects/domains/zsins_domain
%WEBLOGIC_HOME%	WebLogic 安装目录	%WEBLOGIC_HOME%=/data/bea/weblogic11/wlserver_10.3

一. cd %DOMAIN_HOME%/security

实际操作如下,先切换到该目录:

cd /data/bea/weblogic11/user_projects/domains/zsins_domain/security

最好备份一个DefaultAuthenticatorInit.ldift,以防万一还能还原嘛.

然后删除DefaultAuthenticatorInit.ldift这个文件.

二. java -classpath %WEBLOGIC_HOME%/server/lib/weblogic.jar weblogic.security.utils.AdminAccount weblogic weblogic123 .

再执行以下语句(注意此时pwd当前目录一定要是%DOMAIN_HOME%/security,因为以下语句是在当前目录重新生成.ldift文件

java -classpath /data/bea/weblogic11/wlserver_10./server/lib/weblogic.jar weblogic.security.utils.AdminAccount weblogic weblogic123 .

尾部中文念法空格weblogic空格weblogic123空格点

三. rm -rf %DOMAIN_HOME%/servers/AdminServer

实际操作如下( 建议删之前备份下data目录下的内容,比如执行mv data data_old) :

rm -rf   /data/bea/weblogic11/user_projects/domains/zsins_domain/servers/AdminServer

据网上流传的标准操作仅仅是删除security(不包括)下的boot.properties及data(不包括)目录下的 ldap文件夹

四. 新建security文件夹,并建个boot.properties空文件,并设置明文.

实际操作如下:

username=weblogic
password=weblogic123

明文如果被成功加载一次后会变成密文.

五. cd %DOMAIN_HOME%/bin,启动weblogic

实际操作如下:

cd /data/bea/weblogic11/user_projects/domains/zsins_domain/bin
./startWebLogic.sh

如果没有报错就用nohup ./startWebLogic.sh & 用后台命令再次启动,因为./startWebLogic.sh 仅仅为了做一次性测试使用.

成功后boot.properties文件变成如下:

补充说明:

帐号/密码失败我遇上两种. 错误差异都是从:<Notice> <Security> <BEA-090082> <Security initializing using security realm myrealm.>语句之后开始体现的.

一. 当通过./startManagedWebLogic.sh启动后,手动输错密码,打印日志如下:

假设现在帐号/密码已从weblogic/weblogic123改成weblogic/weblogic798,此时故意输错密码成wbwbwb

^C
[weblogic@localhost bin]$ ./startManagedWebLogic.sh httpserver http://localhost:7001
.
.
JAVA Memory arguments: -Xms256m -Xmx512m  -XX:MaxPermSize=128m
.
WLS Start Mode=Production
.
CLASSPATH=/home/weblogic/Oracle/Middleware/patch_wls1036/profiles/default/sys_manifest_classpath/weblogic_patch.jar:/home/weblogic/Oracle/Middleware/patch_ocp371/profiles/default/sys_manifest_classpath/weblogic_patch.jar:/home/weblogic/Oracle/Middleware/jdk160_29/lib/tools.jar:/home/weblogic/Oracle/Middleware/wlserver_10./server/lib/weblogic_sp.jar:/home/weblogic/Oracle/Middleware/wlserver_10./server/lib/weblogic.jar:/home/weblogic/Oracle/Middleware/modules/features/weblogic.server.modules_10..jar:/home/weblogic/Oracle/Middleware/wlserver_10./server/lib/webservices.jar:/home/weblogic/Oracle/Middleware/modules/org.apache.ant_1./common/derby/lib/derbyclient.jar:/home/weblogic/Oracle/Middleware/wlserver_10./server/lib/xqrl.jar:.:/home/rootbobo/data/jdk/jdk1..0_80/lib/dt.jar:/home/rootbobo/data/jdk/jdk1..0_80/lib/tools.jar
.
PATH=/home/weblogic/Oracle/Middleware/wlserver_10./server/bin:/home/weblogic/Oracle/Middleware/modules/org.apache.ant_1..0_80/bin:/usr/lib64/qt-3.3/bin:/usr/local/bin:/bin:/usr/bin:/usr/local/sbin:/usr/sbin:/sbin:/home/weblogic/bin
.
***************************************************
*  To start WebLogic Server, use a username and   *
*  password assigned to an admin-level user.  For *
*  server administration, use the WebLogic Server *
*  console at http://hostname:port/console        *
***************************************************
starting weblogic with Java version:
java version "1.6.0_29"
Java(TM) SE Runtime Environment (build 1.6.0_29-b11)
Java HotSpot(TM) Server VM (build 20.4-b02, mixed mode)
Starting WLS with line:
/home/weblogic/Oracle/Middleware/jdk160_29/bin/java -server   -Xms256m -Xmx512m  -XX:MaxPermSize=128m -Dweblogic.Name=httpserver -Djava.security.policy=/home/weblogic/Oracle/Middleware/wlserver_10./server/lib/weblogic.policy  -Dweblogic.ProductionModeEnabled=/server/lib/cacerts   -da -Dplatform.home=/home/weblogic/Oracle/Middleware/wlserver_10. -Dwls.home=/home/weblogic/Oracle/Middleware/wlserver_10./server -Dweblogic.home=/home/weblogic/Oracle/Middleware/wlserver_10./server   -Dweblogic.management.discover=false -Dweblogic.management.server=http://localhost:7001  -Dwlw.iterativeDev=false -Dwlw.testConsole=false -Dwlw.logErrorsToConsole=false -Dweblogic.ext.dirs=/home/weblogic/Oracle/Middleware/patch_wls1036/profiles/default/sysext_manifest_classpath:/home/weblogic/Oracle/Middleware/patch_ocp371/profiles/default/sysext_manifest_classpath  weblogic.Server
<-- 下午04时35分50秒 CST> <Info> <Security> <BEA-> <Disabling CryptoJ JCE Provider self-integrity check for better startup performance. To enable this check, specify -Dweblogic.security.allowCryptoJDefaultJCEVerification=true>
<-- 下午04时35分50秒 CST> <Info> <Security> <BEA-> <Changing the default Random Number Generator in RSA CryptoJ from ECDRBG to FIPS186PRNG. To disable this change, specify -Dweblogic.security.allowCryptoJDefaultPRNG=true>
<-- 下午04时35分51秒 CST> <Info> <WebLogicServer> <BEA-> <Starting WebLogic Server with Java HotSpot(TM) Server VM Version 20.4-b02 from Sun Microsystems Inc.>
<-- 下午04时35分52秒 CST> <Info> <Security> <BEA-> <Getting boot identity from user.>
Enter username to boot WebLogic server:weblogic
Enter password to boot WebLogic server:
<-- 下午04时35分59秒 CST> <Info> <Management> <BEA-> <Version: WebLogic Server  :: PST   >
<-- 下午04时36分01秒 CST> <Emergency> <Management> <BEA-> <The admin server could not be reached at http://localhost:7001.>
<-- 下午04时36分01秒 CST> <Info> <Configuration Management> <BEA-> <This server is being started in managed server independence mode in the absence of the admin server.>
<-- 下午04时36分01秒 CST> <Notice> <WebLogicServer> <BEA-> <Server state changed to STARTING>
<-- 下午04时36分01秒 CST> <Info> <WorkManager> <BEA-> <Initializing self-tuning thread pool>
<-- 下午04时36分01秒 CST> <Notice> <Log Management> <BEA-> <The server log file /home/weblogic/Oracle/Middleware/user_projects/domains/base_domain/servers/httpserver/logs/httpserver.log is opened. All server side log events will be written to this file.>
<-- 下午04时36分04秒 CST> <Notice> <Security> <BEA-090082> <Security initializing using security realm myrealm.>
<-- 下午04时36分04秒 CST> <Critical> <Security> <BEA-> <Authentication for user weblogic denied>
<-- 下午04时36分04秒 CST> <Critical> <WebLogicServer> <BEA-> <Server subsystem failed. Reason: weblogic.security.SecurityInitializationException: Authentication for user weblogic denied
weblogic.security.SecurityInitializationException: Authentication for user weblogic denied
        at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.doBootAuthorization(CommonSecurityServiceManagerDelegateImpl.java:)
        at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.initialize(CommonSecurityServiceManagerDelegateImpl.java:)
        at weblogic.security.service.SecurityServiceManager.initialize(SecurityServiceManager.java:)
        at weblogic.security.SecurityService.start(SecurityService.java:)
        at weblogic.t3.srvr.SubsystemRequest.run(SubsystemRequest.java:)
        Truncated. see log file for complete stacktrace
Caused By: javax.security.auth.]Authentication Failed: User weblogic javax.security.auth.]Authentication Failed: User weblogic denied
        at weblogic.security.providers.authentication.LDAPAtnLoginModuleImpl.)
        at com.bea.common.security.internal.service.LoginModuleWrapper$.run(LoginModuleWrapper.java:)
        at java.security.AccessController.doPrivileged(Native Method)
        at com.bea.common.security.internal.service.LoginModuleWrapper.)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        Truncated. see log file for complete stacktrace
>
<-- 下午04时36分04秒 CST> <Notice> <WebLogicServer> <BEA-> <Server state changed to FAILED>
<-- 下午04时36分04秒 CST> <Error> <WebLogicServer> <BEA-> <A critical service failed. The server will shut itself down>
<-- 下午04时36分04秒 CST> <Notice> <WebLogicServer> <BEA-> <Server state changed to FORCE_SHUTTING_DOWN>
[weblogic@localhost bin]$

二. 误以为boot.properties配置错误,其实是NodeManager.sh密码问题

该错误一般在使用NodeManager.sh启动被管理Server时会报.

[weblogic@localhost bin]$ ./startWebLogic.sh
.
.
JAVA Memory arguments: -Xms256m -Xmx512m  -XX:MaxPermSize=128m
.
WLS Start Mode=Production
.
CLASSPATH=/home/weblogic/Oracle/Middleware/patch_wls1036/profiles/default/sys_manifest_classpath/weblogic_patch.jar:/home/weblogic/Oracle/Middleware/patch_ocp371/profiles/default/sys_manifest_classpath/weblogic_patch.jar:/home/weblogic/Oracle/Middleware/jdk160_29/lib/tools.jar:/home/weblogic/Oracle/Middleware/wlserver_10./server/lib/weblogic_sp.jar:/home/weblogic/Oracle/Middleware/wlserver_10./server/lib/weblogic.jar:/home/weblogic/Oracle/Middleware/modules/features/weblogic.server.modules_10..jar:/home/weblogic/Oracle/Middleware/wlserver_10./server/lib/webservices.jar:/home/weblogic/Oracle/Middleware/modules/org.apache.ant_1./common/derby/lib/derbyclient.jar:/home/weblogic/Oracle/Middleware/wlserver_10./server/lib/xqrl.jar:.:/home/rootbobo/data/jdk/jdk1..0_80/lib/dt.jar:/home/rootbobo/data/jdk/jdk1..0_80/lib/tools.jar
.
PATH=/home/weblogic/Oracle/Middleware/wlserver_10./server/bin:/home/weblogic/Oracle/Middleware/modules/org.apache.ant_1..0_80/bin:/usr/lib64/qt-3.3/bin:/usr/local/bin:/bin:/usr/bin:/usr/local/sbin:/usr/sbin:/sbin:/home/weblogic/bin
.
***************************************************
*  To start WebLogic Server, use a username and   *
*  password assigned to an admin-level user.  For *
*  server administration, use the WebLogic Server *
*  console at http://hostname:port/console        *
***************************************************
starting weblogic with Java version:
java version "1.6.0_29"
Java(TM) SE Runtime Environment (build 1.6.0_29-b11)
Java HotSpot(TM) Server VM (build 20.4-b02, mixed mode)
Starting WLS with line:
/home/weblogic/Oracle/Middleware/jdk160_29/bin/java -server   -Xms256m -Xmx512m  -XX:MaxPermSize=128m -Dweblogic.Name=AdminServer -Djava.security.policy=/home/weblogic/Oracle/Middleware/wlserver_10./server/lib/weblogic.policy  -Dweblogic.ProductionModeEnabled= -Dwls.home=/home/weblogic/Oracle/Middleware/wlserver_10./server -Dweblogic.home=/home/weblogic/Oracle/Middleware/wlserver_10./server   -Dweblogic.management.discover=true  -Dwlw.iterativeDev=false -Dwlw.testConsole=false -Dwlw.logErrorsToConsole=false -Dweblogic.ext.dirs=/home/weblogic/Oracle/Middleware/patch_wls1036/profiles/default/sysext_manifest_classpath:/home/weblogic/Oracle/Middleware/patch_ocp371/profiles/default/sysext_manifest_classpath  weblogic.Server
<-- 下午05时03分53秒 CST> <Info> <Security> <BEA-> <Disabling CryptoJ JCE Provider self-integrity check for better startup performance. To enable this check, specify -Dweblogic.security.allowCryptoJDefaultJCEVerification=true>
<-- 下午05时03分53秒 CST> <Info> <Security> <BEA-> <Changing the default Random Number Generator in RSA CryptoJ from ECDRBG to FIPS186PRNG. To disable this change, specify -Dweblogic.security.allowCryptoJDefaultPRNG=true>
<-- 下午05时03分54秒 CST> <Info> <WebLogicServer> <BEA-> <Starting WebLogic Server with Java HotSpot(TM) Server VM Version 20.4-b02 from Sun Microsystems Inc.>
<-- 下午05时03分55秒 CST> <Info> <Management> <BEA-> <Version: WebLogic Server  :: PST   >
<-- 下午05时03分56秒 CST> <Notice> <WebLogicServer> <BEA-> <Server state changed to STARTING>
<-- 下午05时03分56秒 CST> <Info> <WorkManager> <BEA-> <Initializing self-tuning thread pool>
<-- 下午05时03分56秒 CST> <Notice> <Log Management> <BEA-> <The server log file /home/weblogic/Oracle/Middleware/user_projects/domains/base_domain/servers/AdminServer/logs/AdminServer.log is opened. All server side log events will be written to this file.>
<-- 下午05时04分00秒 CST> <Notice> <Security> <BEA-090082> <Security initializing using security realm myrealm.>
<-- 下午05时04分00秒 CST> <Critical> <Security> <BEA-> <Authentication denied: Boot identity not valid; The user name and/or password from the boot identity file (boot.properties) is not valid. The boot identity may have been changed since the boot identity file was created. Please edit and update the boot identity file with the proper values of username and password. The first time the updated boot identity file is used to start the server, these new values are encrypted.>
<-- 下午05时04分00秒 CST> <Critical> <WebLogicServer> <BEA-> <Server subsystem failed. Reason: weblogic.security.SecurityInitializationException: Authentication denied: Boot identity not valid; The user name and/or password from the boot identity file (boot.properties) is not valid. The boot identity may have been changed since the boot identity file was created. Please edit and update the boot identity file with the proper values of username and password. The first time the updated boot identity file is used to start the server, these new values are encrypted.
weblogic.security.SecurityInitializationException: Authentication denied: Boot identity not valid; The user name and/or password from the boot identity file (boot.properties) is not valid. The boot identity may have been changed since the boot identity file was created. Please edit and update the boot identity file with the proper values of username and password. The first time the updated boot identity file is used to start the server, these new values are encrypted.
        at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.doBootAuthorization(CommonSecurityServiceManagerDelegateImpl.java:)
        at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.initialize(CommonSecurityServiceManagerDelegateImpl.java:)
        at weblogic.security.service.SecurityServiceManager.initialize(SecurityServiceManager.java:)
        at weblogic.security.SecurityService.start(SecurityService.java:)
        at weblogic.t3.srvr.SubsystemRequest.run(SubsystemRequest.java:)
        Truncated. see log file for complete stacktrace
Caused By: javax.security.auth.]Authentication Failed: User weblogic javax.security.auth.]Authentication Failed: User weblogic denied
        at weblogic.security.providers.authentication.LDAPAtnLoginModuleImpl.)
        at com.bea.common.security.internal.service.LoginModuleWrapper$.run(LoginModuleWrapper.java:)
        at java.security.AccessController.doPrivileged(Native Method)
        at com.bea.common.security.internal.service.LoginModuleWrapper.)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        Truncated. see log file for complete stacktrace
>
<-- 下午05时04分00秒 CST> <Notice> <WebLogicServer> <BEA-> <Server state changed to FAILED>
<-- 下午05时04分00秒 CST> <Error> <WebLogicServer> <BEA-> <A critical service failed. The server will shut itself down>
<-- 下午05时04分00秒 CST> <Notice> <WebLogicServer> <BEA-> <Server state changed to FORCE_SHUTTING_DOWN>

其实这个时候我们已修改了AdminServer管理控制台密码,但是NodeManager记住的还是一开始从AdminServer那里抓取的旧密码,而用NodeManager启动被管理Server时,是不需要读取boot.properties的,只有在用./startManagerWeblogic.sh时才需要用到boot.properties帐号密码.

所以有时候出现以上错误,需要进入wlst(weblogic script tool),让NodeManager重新抓取一下AdminServer那里的配置,以保持一致的密码.

此时需要执行以下命令,请一句一句执行.

cd /oracle/esbapp/bea/weblogic11/wlserver_10./common/bin
sh ./wlst.sh 

connect('weblogic','password123','t3://10.11.12.13:7004')
nmEnroll('/oracle/esbapp/bea/weblogic11/user_projects/domains/ilog_domain/')
disconnect()
exit()

nmEnroll解释: 参考 https://my.oschina.net/psuyun/blog/145595#OSC_h2_1 搜索 nmEnroll .

另外一个nodemanager可以对应多个域, 当用nmEnroll命令成功连接后,会在/oracle/esbapp/bea/weblogic11/wlserver_10.3/common/nodemanager/nodemanager.domains文件中追加允许管理的域,如下:

#
#Mon May 22 20:34:31 CST 2017
esb_domain=/oracle/esbapp/bea/weblogic11/user_projects/domains/esb_domain
log_domain=/oracle/esbapp/bea/weblogic11/user_projects/domains/log_domain
pfp_domain=/oracle/esbapp/bea/weblogic11/user_projects/domains/pfp_domain

什么! 执行完毕,关闭NodeManager后重启还是一样错误.....没关系,进入到被管理server目录下,清下缓存喽

cd /oracle/esbapp/bea/weblogic11/user_projects/domains/esb_domain/servers/vhlSearch/
rm -rf tmp
rm -rf stage/
rm -rf cache/
rm -rf data

好的,再到控制台启动下被管理Server下.

以下为命令轨迹:

<May 22, 2017 8:13:15 PM CST> <Info> <Management> <BEA-141107> <Version: WebLogic Server Temporary Patch for BUG22248372 Tue Nov 24 00:35:04 MST 2015
WebLogic Server 10.3.6.0.12 PSU Patch for BUG20780171 THU JUN 18 15:54:42 IST 2015
WebLogic Server 10.3.6.0  Tue Nov 15 08:52:36 PST 2011 1441050 >
<May 22, 2017 8:13:17 PM CST> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to STARTING>
<May 22, 2017 8:13:17 PM CST> <Info> <WorkManager> <BEA-002900> <Initializing self-tuning thread pool>
<May 22, 2017 8:13:17 PM CST> <Notice> <Log Management> <BEA-170019> <The server log file /oracle/esbapp/bea/weblogic11/user_projects/domains/vhlSearch_domain/servers/server1/logs/server1.log is opened. All server side log events will be written to this file.>
<May 22, 2017 8:13:20 PM CST> <Notice> <Security> <BEA-090082> <Security initializing using security realm myrealm.>
<May 22, 2017 8:13:20 PM CST> <Critical> <Security> <BEA-090402> <Authentication denied: Boot identity not valid; The user name and/or password from the boot identity file (boot.properties) is not valid. The boot identity may have been changed since the boot identity file was created. Please edit and update the boot identity file with the proper values of username and password. The first time the updated boot identity file is used to start the server, these new values are encrypted.>
<May 22, 2017 8:13:20 PM CST> <Critical> <WebLogicServer> <BEA-000386> <Server subsystem failed. Reason: weblogic.security.SecurityInitializationException: Authentication denied: Boot identity not valid; The user name and/or password from the boot identity file (boot.properties) is not valid. The boot identity may have been changed since the boot identity file was created. Please edit and update the boot identity file with the proper values of username and password. The first time the updated boot identity file is used to start the server, these new values are encrypted.
weblogic.security.SecurityInitializationException: Authentication denied: Boot identity not valid; The user name and/or password from the boot identity file (boot.properties) is not valid. The boot identity may have been changed since the boot identity file was created. Please edit and update the boot identity file with the proper values of username and password. The first time the updated boot identity file is used to start the server, these new values are encrypted.
        at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.doBootAuthorization(CommonSecurityServiceManagerDelegateImpl.java:960)
        at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.initialize(CommonSecurityServiceManagerDelegateImpl.java:1054)
        at weblogic.security.service.SecurityServiceManager.initialize(SecurityServiceManager.java:888)
        at weblogic.security.SecurityService.start(SecurityService.java:141)
        at weblogic.t3.srvr.SubsystemRequest.run(SubsystemRequest.java:64)
        Truncated. see log file for complete stacktrace
Caused By: javax.security.auth.login.FailedLoginException: [Security:090304]Authentication Failed: User weblogic javax.security.auth.login.FailedLoginException: [Security:090302]Authentication Failed: User weblogic denied
        at weblogic.security.providers.authentication.LDAPAtnLoginModuleImpl.login(LDAPAtnLoginModuleImpl.java:261)
        at com.bea.common.security.internal.service.LoginModuleWrapper$1.run(LoginModuleWrapper.java:110)
        at java.security.AccessController.doPrivileged(Native Method)
        at com.bea.common.security.internal.service.LoginModuleWrapper.login(LoginModuleWrapper.java:106)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        Truncated. see log file for complete stacktrace
>
<May 22, 2017 8:13:20 PM CST> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to FAILED>
<May 22, 2017 8:13:20 PM CST> <Error> <WebLogicServer> <BEA-000383> <A critical service failed. The server will shut itself down>
<May 22, 2017 8:13:20 PM CST> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to FORCE_SHUTTING_DOWN>
<May 22, 2017 8:13:21 PM> <FINEST> <NodeManager> <Waiting for the process to die: 138665>
<May 22, 2017 8:13:21 PM> <INFO> <NodeManager> <Server failed during startup so will not be restarted>
<May 22, 2017 8:13:21 PM> <FINEST> <NodeManager> <runMonitor returned, setting finished=true and notifying waiters>

[esbapp@zscxwxdb-1 vhlSearchapp]$ cd /oracle/esbapp/bea/weblogic11/user_projects/domains/vhlSearch_domain/servers/proxyServer/security
[esbapp@zscxwxdb-1 security]$ cd /oracle/esbapp/bea/weblogic11/wlserver_10.3/common/bin
[esbapp@zscxwxdb-1 bin]$ sh ./wlst.sh 

CLASSPATH=/oracle/esbapp/bea/weblogic11/patch_wls1036/profiles/default/sys_manifest_classpath/weblogic_patch.jar:/oracle/esbapp/bea/weblogic11/patch_ocp371/profiles/default/sys_manifest_classpath/weblogic_patch.jar:/oracle/esbapp/jdk1.6.0_45/lib/tools.jar:/oracle/esbapp/bea/weblogic11/wlserver_10.3/server/lib/weblogic_sp.jar:/oracle/esbapp/bea/weblogic11/wlserver_10.3/server/lib/weblogic.jar:/oracle/esbapp/bea/weblogic11/modules/features/weblogic.server.modules_10.3.6.0.jar:/oracle/esbapp/bea/weblogic11/wlserver_10.3/server/lib/webservices.jar:/oracle/esbapp/bea/weblogic11/modules/org.apache.ant_1.7.1/lib/ant-all.jar:/oracle/esbapp/bea/weblogic11/modules/net.sf.antcontrib_1.1.0.0_1-0b2/lib/ant-contrib.jar::/oracle/esbapp/bea/weblogic11/utils/config/10.3/config-launch.jar::/oracle/esbapp/bea/weblogic11/wlserver_10.3/common/derby/lib/derbynet.jar:/oracle/esbapp/bea/weblogic11/wlserver_10.3/common/derby/lib/derbyclient.jar:/oracle/esbapp/bea/weblogic11/wlserver_10.3/common/derby/lib/derbytools.jar::

Initializing WebLogic Scripting Tool (WLST) ...

Welcome to WebLogic Server Administration Scripting Shell

Type help() for help on available commands

wls:/offline> connect('weblogic','Zsins_123321','t3://192.168.1.110:7004')
Connecting to t3://192.168.1.110:7004 with userid weblogic ...
Successfully connected to Admin Server 'AdminServer' that belongs to domain 'vhlSearch_domain'.

Warning: An insecure protocol was used to connect to the
server. To ensure on-the-wire security, the SSL port or
Admin port should be used instead.

wls:/vhlSearch_domain/serverConfig> nmEnroll('/oracle/esbapp/bea/weblogic11/user_projects/domains/vhlSearch_domain/')
Enrolling this machine with the domain directory at /oracle/esbapp/bea/weblogic11/user_projects/domains/vhlSearch_domain/ ...
Successfully enrolled this machine with the domain directory at /oracle/esbapp/bea/weblogic11/user_projects/domains/vhlSearch_domain.
wls:/vhlSearch_domain/serverConfig> disconnect()
Disconnected from weblogic server: AdminServer
wls:/offline> exit()

Exiting WebLogic Scripting Tool.

[esbapp@zscxwxdb-1 bin]$ ps -ef|grep NodeManager
esbapp     3769      1  0 May20 ?        00:00:00 sh ./startNodeManager.sh
esbapp     3801   3769  0 May20 ?        00:24:19 /oracle/esbapp/jdk1.6.0_45/bin/java -client -Xms32m -Xmx200m -XX:MaxPermSize=128m -Dcoherence.home=/oracle/esbapp/bea/weblogic11/coherence_3.7 -Dbea.home=/oracle/esbapp/bea/weblogic11 -Xverify:none -Djava.security.policy=/oracle/esbapp/bea/weblogic11/wlserver_10.3/server/lib/weblogic.policy -Dweblogic.nodemanager.javaHome=/oracle/esbapp/jdk1.6.0_45 weblogic.NodeManager -v
esbapp   143624 120608  0 20:35 pts/1    00:00:00 grep NodeManager
[esbapp@zscxwxdb-1 bin]$ kill -9 3801
[esbapp@zscxwxdb-1 bin]$ cd /oracle/esbapp/bea/weblogic11/wlserver_10.3/server/bin
[esbapp@zscxwxdb-1 bin]$ nohup ./startNodeManager.sh >>nodemanager.log 2>&1 &
[esbapp@zscxwxdb-1 bin]$ tail -f nodemanager.log
INFO:  Initializing ServerMonitor for weblogic.nodemanager.server.ServerManager@50d17ec3 : with config : weblogic.nodemanager.common.StartupConfig@69d95da8
<May 22, 2017 8:35:21 PM> <INFO> <ebizPI_domain> <ebizPI_Proxy> <Startup configuration properties loaded from "/oracle/esbapp/bea/weblogic11/user_projects/domains/ebizPI_domain/servers/ebizPI_Proxy/data/nodemanager/startup.properties">
May 22, 2017 8:35:21 PM weblogic.nodemanager.server.AbstractServerManager log
INFO: Startup configuration properties loaded from "/oracle/esbapp/bea/weblogic11/user_projects/domains/ebizPI_domain/servers/ebizPI_Proxy/data/nodemanager/startup.properties"
<May 22, 2017 8:35:21 PM> <INFO> <ebizPI_domain> <ebizPI_s1> <Startup configuration properties loaded from "/oracle/esbapp/bea/weblogic11/user_projects/domains/ebizPI_domain/servers/ebizPI_s1/data/nodemanager/startup.properties">
May 22, 2017 8:35:21 PM weblogic.nodemanager.server.AbstractServerManager log
INFO: Startup configuration properties loaded from "/oracle/esbapp/bea/weblogic11/user_projects/domains/ebizPI_domain/servers/ebizPI_s1/data/nodemanager/startup.properties"
<May 22, 2017 8:35:21 PM CST> <Info> <Security> <BEA-090905> <Disabling CryptoJ JCE Provider self-integrity check for better startup performance. To enable this check, specify -Dweblogic.security.allowCryptoJDefaultJCEVerification=true>
<May 22, 2017 8:35:21 PM CST> <Info> <Security> <BEA-090906> <Changing the default Random Number Generator in RSA CryptoJ from ECDRBG to FIPS186PRNG. To disable this change, specify -Dweblogic.security.allowCryptoJDefaultPRNG=true>
<May 22, 2017 8:35:21 PM CST> <Info> <Security> <BEA-090908> <Using default WebLogic SSL Hostname Verifier implementation.>
<May 22, 2017 8:35:21 PM> <INFO> <Secure socket listener started on port 5556>
May 22, 2017 8:35:21 PM weblogic.nodemanager.server.SSLListener run
INFO: Secure socket listener started on port 5556
^C

[esbapp@zscxwxdb-1 server1]$ cd /oracle/esbapp/bea/weblogic11/user_projects/domains/esb_domain/servers/vhlSearch/
[esbapp@zscxwxdb-1 server1]$ rm -rf tmp
[esbapp@zscxwxdb-1 server1]$ rm -rf stage/
[esbapp@zscxwxdb-1 server1]$ rm -rf cache/
[esbapp@zscxwxdb-1 server1]$ rm -rf data

[esbapp@zscxwxdb-1 server1]$ cd logs/

[esbapp@zscxwxdb-1 logs]$ tail -f server1.out
<May 22, 2017 8:39:01 PM CST> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to RUNNING>
<May 22, 2017 8:39:01 PM CST> <Notice> <WebLogicServer> <BEA-000360> <Server started in RUNNING mode>

正常boot.properties文件或正常用NodeManager启动成功打印信息如下:

[weblogic@localhost bin]$ ./startWebLogic.sh
.
.
JAVA Memory arguments: -Xms256m -Xmx512m -XX:MaxPermSize=128m
.
WLS Start Mode=Production
.
CLASSPATH=/home/weblogic/Oracle/Middleware/patch_wls1036/profiles/default/sys_manifest_classpath/weblogic_patch.jar:/home/weblogic/Oracle/Middleware/patch_ocp371/profiles/default/sys_manifest_classpath/weblogic_patch.jar:/home/weblogic/Oracle/Middleware/jdk160_29/lib/tools.jar:/home/weblogic/Oracle/Middleware/wlserver_10./server/lib/weblogic_sp.jar:/home/weblogic/Oracle/Middleware/wlserver_10./server/lib/weblogic.jar:/home/weblogic/Oracle/Middleware/modules/features/weblogic.server.modules_10..jar:/home/weblogic/Oracle/Middleware/wlserver_10./server/lib/webservices.jar:/home/weblogic/Oracle/Middleware/modules/org.apache.ant_1./common/derby/lib/derbyclient.jar:/home/weblogic/Oracle/Middleware/wlserver_10./server/lib/xqrl.jar:.:/home/rootbobo/data/jdk/jdk1..0_80/lib/dt.jar:/home/rootbobo/data/jdk/jdk1..0_80/lib/tools.jar
.
PATH=/home/weblogic/Oracle/Middleware/wlserver_10./server/bin:/home/weblogic/Oracle/Middleware/modules/org.apache.ant_1..0_80/bin:/usr/lib64/qt-3.3/bin:/usr/local/bin:/bin:/usr/bin:/usr/local/sbin:/usr/sbin:/sbin:/home/weblogic/bin
.
***************************************************
* To start WebLogic Server, use a username and *
* password assigned to an admin-level user. For *
* server administration, use the WebLogic Server *
* console at http://hostname:port/console *
***************************************************
starting weblogic with Java version:
java version "1.6.0_29"
Java(TM) SE Runtime Environment (build 1.6.0_29-b11)
Java HotSpot(TM) Server VM (build 20.4-b02, mixed mode)
Starting WLS with line:
/home/weblogic/Oracle/Middleware/jdk160_29/bin/java -server -Xms256m -Xmx512m -XX:MaxPermSize=128m -Dweblogic.Name=AdminServer -Djava.security.policy=/home/weblogic/Oracle/Middleware/wlserver_10./server/lib/weblogic.policy -Dweblogic.ProductionModeEnabled= -Dwls.home=/home/weblogic/Oracle/Middleware/wlserver_10./server -Dweblogic.home=/home/weblogic/Oracle/Middleware/wlserver_10./server -Dweblogic.management.discover=true -Dwlw.iterativeDev=false -Dwlw.testConsole=false -Dwlw.logErrorsToConsole=false -Dweblogic.ext.dirs=/home/weblogic/Oracle/Middleware/patch_wls1036/profiles/default/sysext_manifest_classpath:/home/weblogic/Oracle/Middleware/patch_ocp371/profiles/default/sysext_manifest_classpath weblogic.Server
<-- 下午09时40分54秒 CST> <Info> <Security> <BEA-> <Disabling CryptoJ JCE Provider self-integrity check for better startup performance. To enable this check, specify -Dweblogic.security.allowCryptoJDefaultJCEVerification=true>
<-- 下午09时40分54秒 CST> <Info> <Security> <BEA-> <Changing the default Random Number Generator in RSA CryptoJ from ECDRBG to FIPS186PRNG. To disable this change, specify -Dweblogic.security.allowCryptoJDefaultPRNG=true>
<-- 下午09时40分54秒 CST> <Info> <WebLogicServer> <BEA-> <Starting WebLogic Server with Java HotSpot(TM) Server VM Version 20.4-b02 from Sun Microsystems Inc.>
<-- 下午09时40分56秒 CST> <Info> <Management> <BEA-> <Version: WebLogic Server  :: PST   >
<-- 下午09时40分57秒 CST> <Notice> <WebLogicServer> <BEA-> <Server state changed to STARTING>
<-- 下午09时40分57秒 CST> <Info> <WorkManager> <BEA-> <Initializing self-tuning thread pool>
<-- 下午09时40分57秒 CST> <Notice> <Log Management> <BEA-> <The server log file /home/weblogic/Oracle/Middleware/user_projects/domains/base_domain/servers/AdminServer/logs/AdminServer.log is opened. All server side log events will be written to this file.>
<-- 下午09时41分01秒 CST> <Notice> <Security> <BEA-090082> <Security initializing using security realm myrealm.>
<-- 下午09时41分01秒 CST> <Notice> <Security> <BEA-> <Storing boot identity in the file: /home/weblogic/Oracle/Middleware/user_projects/domains/base_domain/servers/AdminServer/security/boot.properties>
<-- 下午09时41分04秒 CST> <Notice> <WebLogicServer> <BEA-> <Server state changed to STANDBY>
<-- 下午09时41分04秒 CST> <Notice> <WebLogicServer> <BEA-> <Server state changed to STARTING>
<-- 下午09时41分09秒 CST> <Notice> <Log Management> <BEA-> <The Server has established connection with the Domain level Diagnostic Service successfully.>
<-- 下午09时41分09秒 CST> <Notice> <WebLogicServer> <BEA-> <Server state changed to ADMIN>
<-- 下午09时41分09秒 CST> <Notice> <WebLogicServer> <BEA-> <Server state changed to RESUMING>
<-- 下午09时41分09秒 CST> <Notice> <Server> <BEA-> <Channel  for protocols iiop, t3, ldap, snmp, http.>
<-- 下午09时41分09秒 CST> <Notice> <Server> <BEA-> <Channel :::a00:27ff:fec4:c477: for protocols iiop, t3, ldap, snmp, http.>
<-- 下午09时41分09秒 CST> <Notice> <Server> <BEA-> <Channel :::::::: for protocols iiop, t3, ldap, snmp, http.>
<-- 下午09时41分09秒 CST> <Notice> <Server> <BEA-> <Channel  for protocols iiop, t3, ldap, snmp, http.>
<-- 下午09时41分09秒 CST> <Notice> <WebLogicServer> <BEA-> <Started WebLogic Admin Server "AdminServer" for domain "base_domain" running in Production Mode>
<-- 下午09时41分09秒 CST> <Warning> <Server> <BEA-> <Hostname :::::::>
<-- 下午09时41分09秒 CST> <Notice> <WebLogicServer> <BEA-> <Server state changed to RUNNING>
<-- 下午09时41分09秒 CST> <Notice> <WebLogicServer> <BEA-> <Server started in RUNNING mode>

无解之迷

当然大家也不要太深信weblogic的健壮性,我在2017年5月18号,用weblogic的生产模式,使用以上各种标准方式前后更改密码不下30次.重启过不下30次.

死活都报错<Authentication denied: Boot identity not valid; The user name and/or password from the boot identity file (boot.properties) is not valid.

足足浪费了一整个下午的时间,还是没研究透为什么密码不确.

而当偶尔密码正确,成功进入console时,我的69Bytes大小明文boot.properties有时候根本就没有被加密成150Bytes大小的密文boot.properties.

参考: http://www.cnblogs.com/lsdb/p/6610394.html