Admin port?

Question

I am setting up a simple server configuration with WLS 6.1 GA.
The information I have from BEA PS people is that you normally have one
server instance set aside as the admin server. This server instance is
always up and generally you dont deploy apps to it. The other server(s),
which may or may not be in a cluster are all managed servers - pointing at
this one admin server.
Now, I agree wholeheartedly that this is the best way to go - however I want
a very simple setup (having a couple of problems with starting managed
servers, for one).
Now, the question is, can I start an Admin Server on port 80, but define a
different port to access the admin app from? I am just a little concerned
that the admin app would be available to the web-app user, should they go
for the url /console/ (even though its password protected, it is still some
worry).
I am sure that there is a simple answer to this...
Thanks.
Nick

Answer 1

Right. And you do want to set them up a little bit different in the firewall
too. For example, you don't want the admin-server to be able to be accessed
from the outside.
I would not trust a username/password-authentication-scheme on such a
critical resource as the admin-console.
"Mihir Kulkarni" <[email protected]> wrote in message
news:[email protected]..
Now, the question is, can I start an Admin Server on port 80, but definea
different port to access the admin app from? I am just a littleconcerned
that the admin app would be available to the web-app user, should theygo
for the url /console/ (even though its password protected, it is stillsome
worry).so, it seems that you want to deploy your webapps to the Admin serveritself.
in that case, why worry, when the console application is passwordprotected and
only the users from the Admin group can access it.
if you do not want to rely on this security, you just need to start onemanaged
server and deploy your web applications on to that server. In this way,the
console and the webApplications are on different servers with the adminserver
url never being exposed except to the Admin.
I cannot think of any other way.
thanks,
Mihir