Troubleshooting
Problem
When trying to install MetaData Workbench (MDW) on existing Information Server installation, the following error message is displayed: Can't connect to port 9080.
Diagnosing The Problem
SystemOut.log contains:
[12/15/10 8:40:35:020 EST] 0000000a TrustAssociat A SECJ0121I: Trust Association Init class com.ibm.ws.security.web.TAMTrustAssociationInterceptorPlus loaded successfully
[12/15/10 8:40:35:042 EST] 0000000a TAMTrustAssoc I com.ibm.ws.security.web.TAMTrustAssociationInterceptorPlusinitialize(Properties) AWXRB0008E An error occurred retrieving the mandatory property, com.ibm.websphere.security.webseal.loginId, causing initialization to fail.
[12/15/10 8:40:35:045 EST] 0000000a TAMTrustAssoc I
com.ibm.ws.security.web.TAMTrustAssociationInterceptorPlusinitialize(Properties) The Trust Association Interceptor component of embedded Tivoli Access Manager initialization has failed.
[12/15/10 8:40:35:047 EST] 0000000a TrustAssociat E SECJ0384E: Trust Association Init Error. The Trust Association interceptor implementation com.ibm.ws.security.web.TAMTrustAssociationInterceptorPlus initialization failed. The error status/exception is -1.
Resolving The Problem
On AIX platform, the errors can indicate a ulimit problem. If you are using the WAS startServer.sh server1 command please perform the following to ensure the ulimit is set to 10240:
- Modify MetadataServer_env.sh file in ASBServer/bin directory to add the following line:
ulimit -n 10240
- Run the following command in ASBServer/bin to start WebSphere:
MetadataServer.sh run
If the above checks out or you are not running on AIX platform, the problem may be explained by the following:
WebSeal is throwing the errors. WebSeal seems to have been shipped enabled with WAS 8.1. WebSeal is a product also related to Tivoli. WebSeal has not been tested or QAed with IS 8.1.
Here are the steps to disable it.
- Backup the current security.xml file from:
WAS_HOME/profiles/<profileName>/config/cells/<cellName>
- Log in to Web Admin console and navigate to:
Global security > LTPA > Trust association > Interceptors > com.ibm.ws.security.web.WebSealTrustAssociationInterceptor > Custom properties
- Remove all trust association from custom properties
com.ibm.websphere.security.webseal.loginId <trusted user>
com.ibm.websphere.security.webseal.id Iv-user,iv-creds (TAI++ req)
com.ibm.WebSphere.security.WebSEAL.hostnames <host1>,<host2>...<hostn> com.ibm.WebSphere.security.WebSEAL.ports <port1>,<port2>...<portn> com.ibm.websphere.security.webseal.ssoPwdExpiry (positive integer) com.ibm.websphere.security.webseal.viaDepth (positive integer)
- Save and sync with node - if it is Network Deployment setup, if it is stand alone, save the file
Was this topic helpful?
Document Information
Modified date:
16 June 2018
UID
swg21460735