Kernel Config for Server

Arch's default kernel config is well suited to desktop performance, but what about the server?  Ubuntu server lists these items on their Kernel Features page:
* The Server Edition uses the Deadline I/O scheduler instead of the CFQ scheduler used by the Desktop Edition.
* Pre-emption is turned off in the Server Edition.
* The timer interrupt is 100 Hz in the Server Edition and 250 Hz in the Desktop Edition.
* The Server Edition is optimised for i686 processors while the Desktop Edition is optimised for both the i586 and i686.
* Virtualization is better supported in the Server Edition through the enabling of IPC namespaces.
* Multiple routing tables for the IPv6 protocol are also supported in the Server Edition.
* For 32-bit systems the Server Edition is configured to use PAE which allows addressing up to 64GB of memory while the Desktop Edition is configured for 4GB.
So if you were making a "Server Edition" of Arch, what would you change?

imho, with all my respect to arch as a great desktop distribution, i would not run arch on any production server.

Similar Messages

  • Kernel config for Transcend IDE Flash Module

    I'm trying to build a minimal custom kernel for my set-top-box (very limited ressources), which I use as home server.
    From a recent Arch Live (USB-stick) the Transcend Flash SSD (4GB, 40pin IDE) gets detected as /dev/sda (by the "sd"-driver, I think). The Problem now is that I can't find the kernel settings and always get a kernel panic because it can't find the root device.
    Here's the data I have:
    lspci (Intel ICH chipset):
    00:00.0 Host bridge: Intel Corporation 82830 830 Chipset Host Bridge (rev 04)
    00:02.0 VGA compatible controller: Intel Corporation 82830 CGC [Chipset Graphics Controller] (rev 04)
    00:02.1 Display controller: Intel Corporation 82830 CGC [Chipset Graphics Controller]
    00:1d.0 USB Controller: Intel Corporation 82801DB/DBL/DBM (ICH4/ICH4-L/ICH4-M) USB UHCI Controller #1 (rev 02)
    00:1d.1 USB Controller: Intel Corporation 82801DB/DBL/DBM (ICH4/ICH4-L/ICH4-M) USB UHCI Controller #2 (rev 02)
    00:1d.2 USB Controller: Intel Corporation 82801DB/DBL/DBM (ICH4/ICH4-L/ICH4-M) USB UHCI Controller #3 (rev 02)
    00:1d.7 USB Controller: Intel Corporation 82801DB/DBM (ICH4/ICH4-M) USB2 EHCI Controller (rev 02)
    00:1e.0 PCI bridge: Intel Corporation 82801 PCI Bridge (rev 82)
    00:1f.0 ISA bridge: Intel Corporation 82801DB/DBL (ICH4/ICH4-L) LPC Interface Bridge (rev 02)
    00:1f.1 IDE interface: Intel Corporation 82801DB (ICH4) IDE Controller (rev 02)
    00:1f.3 SMBus: Intel Corporation 82801DB/DBL/DBM (ICH4/ICH4-L/ICH4-M) SMBus Controller (rev 02)
    00:1f.5 Multimedia audio controller: Intel Corporation 82801DB/DBL/DBM (ICH4/ICH4-L/ICH4-M) AC'97 Audio Controller (rev 02)
    01:06.0 Ethernet controller: Realtek Semiconductor Co., Ltd. RTL-8139/8139C/8139C+ (rev 10)
    dmesg output from the live stick:
    Linux version 2.6.30-ARCH (root@T-POWA-LX) (gcc version 4.4.1 (GCC) ) #1 SMP PREEMPT Fri Jul 31 18:10:38 UTC 2009
    SCSI subsystem initialized
    libata version 3.00 loaded.
    ata_piix 0000:00:1f.1: version 2.13
    ata_piix 0000:00:1f.1: enabling device (0005 -> 0007)
    ata_piix 0000:00:1f.1: PCI INT A -> Link[LNKC] -> GSI 9 (level, low) -> IRQ 9
    ata_piix 0000:00:1f.1: setting latency timer to 64
    scsi0 : ata_piix
    scsi1 : ata_piix
    ata1: PATA max UDMA/100 cmd 0x1f0 ctl 0x3f6 bmdma 0xffa0 irq 14
    ata2: PATA max UDMA/100 cmd 0x170 ctl 0x376 bmdma 0xffa8 irq 15
    ata1.00: CFA: TRANSCEND, 20071207, max UDMA/66
    ata1.00: 7831152 sectors, multi 0: LBA
    ata1.00: limited to UDMA/33 due to 40-wire cable
    ata1.00: configured for UDMA/33
    scsi 0:0:0:0: Direct-Access ATA TRANSCEND 2007 PQ: 0 ANSI: 5
    ata2: port disabled. ignoring.
    Driver 'sd' needs updating - please use bus_type methods
    sd 0:0:0:0: [sda] 7831152 512-byte hardware sectors: (4.00 GB/3.73 GiB)
    sd 0:0:0:0: [sda] Write Protect is off
    sd 0:0:0:0: [sda] Mode Sense: 00 3a 00 00
    sd 0:0:0:0: [sda] Write cache: disabled, read cache: enabled, doesn't support DPO or FUA
    sda: sda1 sda2 sda3
    sd 0:0:0:0: [sda] Attached SCSI disk
    sd 0:0:0:0: Attached scsi generic sg0 type 0
    sd 2:0:0:0: Attached scsi generic sg1 type 0
    ls -lh /dev/disk/by-id (the "USB_2.0_Memory_Adapter" is the live stick):
    ata-TRANSCEND_20091118_500059E8 -> /dev/sda
    ata-TRANSCEND_20091118_500059E8-part1 -> /dev/sda1
    ata-TRANSCEND_20091118_500059E8-part2 -> /dev/sda2
    ata-TRANSCEND_20091118_500059E8-part3 -> /dev/sda3
    scsi-SATA_TRANSCEND_20091118_500059E8 -> /dev/sda
    scsi-SATA_TRANSCEND_20091118_500059E8-part1 -> /dev/sda1
    scsi-SATA_TRANSCEND_20091118_500059E8-part2 -> /dev/sda2
    scsi-SATA_TRANSCEND_20091118_500059E8-part3 -> /dev/sda3
    usb-USB_2.0_Memory_Adapter_AAAAA10062345-0:0 -> /dev/sdb
    usb-USB_2.0_Memory_Adapter_AAAAA10062345-0:0-part1 -> /dev/sdb1
    The kernel configuration I tried can be found here (from another box running Gentoo).
    Any suggestions how I could find the right driver?
    Thanks in advance,
    lynix

    Although I have compiled a custom kernel w/o any kind of automatic support, and it worked, I REALLY don' think that it is worth the effort.  In the wiki it recommends: zcat /proc/config.gz > .config  (from within the kernel directory), and I strongly recommend it as well.  All it does is copy some information from your existing kernel into your .config, which vastly improves your odds of having a working kernel right off the bat.  I would compile that, verify that it works, and from that point start taking out modules that you are confident have nothing to do with your system.  (don't forget to select your processor type, and deselect smp if you don't have smp)
    I know that it is dissappointing and you'd like to perfect your kernel in one go, but I really think that in the long run, this is your best option.  I don't think that you are going to find anyone who is willing to take the time to tell you what options you personally need to compile in or as modules for you, however, there will be plenty of people who are willing to help. 
    I know that there are even smarter solutions, including scripts that can supposedly configure a kernel based on the modules and options that are already loaded, but I think results are mixed.  Although, they might make a great starting point.  I think (but could be wrong) that gentoo's 'genkernel' worked like that.  Though I've used it years ago, I don't think that I fully understood how it worked at the time.
    If you are dead set on minimizing all of the options that you compile for your kernel manually, your tools are lspci, lsmod, cat /proc* etc.  You can save the output, figure out what options correspond with that output, and hope for the best!
    Good luck
    Last edited by Convergence (2009-03-13 11:51:01)

  • [solved] kernel configuration for clarkdale server

    Update: I guess since the arch kernel config works there's really nothing to improve.
    Hey everyone,
    i'm about to compile a kernel for a server with intel clarkdale hardware, intel i3-530.
    Up to now i only compiled kernels for my consumer laptop.
    1) Is there any option in particular i should pay attention to when compiling a kernel for a server system?
    And regarding the i3-530:
    2) Should i just pick x86 generic cpu support or something else?
    3) Are there any patches right now to improve support for clarkdale?
    Thanks,
    demian
    P.S.: I guess i should choose 2.6.33-rc7 since real clarkdale support is supposed to come with 2.6.33? Usually i just pick the latest stable version.
    Last edited by demian (2010-02-12 11:39:48)

    graysky wrote:Your xfers are via scp... are the files large or numerous small files?  Have you the ability to use jumbo  frames on your network if the network is a GigLAN backbone?  If so, you'll have to test to see if a non-standard 4000 or 9000 mtu size improves xfers.
    thanks for your rapid response and i googled about it, but unfortunatelly i dont have a gigLan in the lab but usually all file transfered exceed 5GB of size.
    Would the scheduler have a significant impact on performance? The servers are used individually (not sharing load like in a bewoulf cluster)
    The disk I/O operations are mostly about writes into the output files (a few number of bytes per write), would reiserfs be superior to ext3 ?
    PS.: i'm feeling really stupid for not reading more about the kernel26-lts for it has all the major options i was thinking about.
    Last edited by Duca (2009-09-27 18:26:34)

  • SAP ECC 6.0  Kernel Upgrade for 32 bit Win2003 Server

    Dear All,
        We are in the process of updating kernel patch (Unicode) in our Solution Manager system which is running on - 32 bit Xeon processor - Win2003 server.
    When we download kernel patch from SAP Market place, there lists kernel patch only for IA32-32-bit (Windows Server on IA32 32bit), but not for x86-32 bit.
    But in the case of 64 bit, we can find both for xeon and itanium processor ( ie., Windows Server on IA64 64bit,   Windows Server on x64 64bit )
    I quite confused to select the correct kernel patch for our 32 bit Xeon processor.
    Could anybody help me in this regard ?
    Regards,
    Sridhar

    Dear Reyes,
              Thank you for ur timely reply.
             Is there any SAP note regarding this, ie IA32 32 bit is compatible for x86 32 bit ?,
    Regards,
    Sridhar

  • Server vs. Desktop kernel config?

    Relatively new arch user here, so feel free to flame me for RTFM.  I have been reading the docs, but haven't stumbled across anything related to this issue.
    I'm going to be installing arch on servers and desktops, and noticed there is only one kernel package, presumably optimized for desktop users.  I'm wondering if this means that I need to configure a different kernel package for my server installs?  For example, should I be be using a different default scheduler (i.e. deadline instead of cfq), or, maybe the kernel devs have already resolved this at runtime.
    Also note the comment that I've heard frequently "don't run arch on production servers" doesn't apply.  Save for critical security updates, we already stage all deployments (even using Ubuntu) on testing systems for at least a month before deploying to production.  I expect the arch servers will be just as stable as anything else out there (probably more, actually).
    Last edited by pgoetz (2014-02-22 10:52:28)

    Some kernel patches to consider:
    BFS for desktop responsiveness (here's the patch I've put together for kernel 3.10)
    PHC for CPU undervolting - cooler is always better
    BFQ disk scheduler
    Full AppArmor support

  • Linux kernel config file for suspend to ram

      Hi all
    To anyone who has suspend to ram working on there lenovo can you send me a copy of your kernel config file.
    My suspend to ram instead of going to sleep, it just makes the moon led blink and turns off the pc. I am using the 2.6.27.4 kernel with the new libata driver,  I just want to try  a reference kernel config that is know to work,
    thanks

    prysm, welcome to the forum,
    which Lenovo 3000 system do you have? Posting the Type and Model number will help members help you.
    Moved from Lenovo 3000 Notebooks board to Linux board
    Andy  ______________________________________
    Please remember to come back and mark the post that you feel solved your question as the solution, it earns the member + points
    Did you find a post helpfull? You can thank the member by clicking on the star to the left awarding them Kudos Please add your type, model number and OS to your signature, it helps to help you. Forum Search Option T430 2347-G7U W8 x64, Yoga 10 HD+, Tablet 1838-2BG, T61p 6460-67G W7 x64, T43p 2668-G2G XP, T23 2647-9LG XP, plus a few more. FYI Unsolicited Personal Messages will be ignored.
      Deutsche Community     Comunidad en Español    English Community Русскоязычное Сообщество
    PepperonI blog 

  • How to use the same services-config for the local and remote servers.

    My flex project works fine using the below but when I upload my flash file to the server I doesn't work, all the relative paths and files are the same execpt the remote one is a linux server.
    <?xml version="1.0" encoding="UTF-8"?>
    <services-config>
        <services>
            <service id="amfphp-flashremoting-service"
                class="flex.messaging.services.RemotingService"
                messageTypes="flex.messaging.messages.RemotingMessage">
                <destination id="amfphp">
                    <channels>
                        <channel ref="my-amfphp"/>
                    </channels>
                    <properties>
                        <source>*</source>
                    </properties>
                </destination>
            </service>
        </services>
        <channels>
        <channel-definition id="my-amfphp" class="mx.messaging.channels.AMFChannel">
            <endpoint uri="http://localhost/domainn.org/amfphp/gateway.php" class="flex.messaging.endpoints.AMFEndpoint"/>
        </channel-definition>
        </channels>
    </services-config>
    I think the problem  is the line
            <endpoint uri="http://localhost/domainn.org/amfphp/gateway.php" class="flex.messaging.endpoints.AMFEndpoint"/>
    but I'm not sure how to use the same services-config for the local and remote servers.

    paul.williams wrote:
    You are confusing "served from a web-server" with "compiled on a web-server". Served from a web-server means you are downloading a file from the web-server, it does not necessarily mean that the files has been generated / compiled on the server.
    The server.name and server.port tokens are replaced at runtime (ie. on the client when the swf has been downloaded and is running) not compile time (ie. while mxmlc / ant / wet-tier compiler is running). You do not need to compile on the server to take advantage of this.
    Hi Paul,
    In Flex, there is feature that lets developer to put all service-config.xml file configuration information into swf file. with
    -services=path/to/services-config.xml
    IF
    services-config.xml
    have tokens in it and user have not specified additional
    -context-root
    and this swf file is not served from web-app-server (like tomcat for example) than it will not work,
    Flash player have no possible way to replace token values of service-config.xml file durring runtime if that service-config.xml file have been baked into swf file during compilation,
    for example during development you can launch your swf file from your browser with file// protocol and still be able to access blazeDS services if
    -services=path/to/services-config.xml
    have been specified durring compilation.
    I dont know any better way to exmplain this, but in summary there is two places that you can tell swf  about service confogiration,
    1) pass -services=path/to/services-config.xml  parameter to compiler this way you tell swf file up front about all that good stuff,
    or 2) you put that file on the webserver( in this case, yes you should have replacement tokens in that file) and they will be repaced at runtime .

  • Development Environment for Server APIs in Webcenter Interaction 10.3

    Hi, I installed “Oracle Web Center Interaction 10.3" on standard environment mentioned by oracle (Window 2003 server, IIS6.0, SQL Server 2005). Everything works fine concerning the portal and services.
    I also have visual studio 2005 on the same machine and trying to setup a development environment where I can user server APIs (I start with creating IPTSession).
    I am using follwong code to start with:
    /String serverConfigDir = ConfigPathResolver.GetOpenConfigPath();
    IOKContext configContext = OKConfigFactory.createInstance(serverConfigDir, "portal");
    PortalObjectsFactory.Init(configContext);
    IPTSession ptSession = PortalObjectsFactory.CreateSession();
    Problem: code compiles if I add few dlls, but it do not run, it throws following error
    com.plumtree.openkernel.exceptions.OKFactoryException: Error in AOKFactory.createAndInitializeInstance, unable to create object with name 'com.plumtree.openkernel.impl.config.Config' in assembly or JAR file 'openconfig'.
    I think either server APIs are not more supported in 10.3 or I do not know how to setup the development environment for server APIs.
    Can anyone help??

    i have already tried putting hardcoded path but it didn't help, morover the previous line gives me correct path.
    I issue i mentioned seems to be related with some setting or missing native dlls
    com.plumtree.openkernel.exceptions.OKFactoryException: Error in AOKFactory.createAndInitializeInstance, unable to create object with name 'com.plumtree.openkernel.impl.config.Config' in assembly or JAR file 'openconfig'.
    i got follwing extract from the wsserver-wrapper.log file
    INFO | jvm 1 | 2009/02/20 12:26:17 | 2-20-2009     12:26:17.606     Info     OpenKernel.Config     Disabled-1235112977434     WrapperStartStopAppMain     com.plumtree.openkernel.impl.config.providers.ConfigXMLFileProvider     Loading config data from C:\bea\alui\ptws\10.3.0\bin\..\..\..\common/../settings
    INFO | jvm 1 | 2009/02/20 12:26:18 | 2-20-2009     12:26:18.325     Info     OpenKernel.Config     Disabled-1235112977434     WrapperStartStopAppMain     com.plumtree.openkernel.impl.config.providers.ConfigXMLFileProvider     Setting subscription data.
    INFO | jvm 1 | 2009/02/20 12:26:18 | container config context:EAS:wsserver
    i didn't modified anything in any config file, just configured everything on one machine with oracle configuration manager

  • Trying to make the config for gensplash suppost :S

    Hello everyone im trying to patch the stock kernel of arch to get fbsplash working and im following the wiki topic about this matter http://wiki.archlinux.org/index.php/Gensplash , but the problem is that it it says i need to make the config with this options
    Which ever method you choose but be sure to choose the following settings at the config stage:
          Device Drivers
            Block Devices
              RAM disk support (BLK_DEV_RAM) = Y
                Inital RAM disk (initrd) support(BLK_DEV_INITRD)=Y
            Graphics Support
              Support for framebuffer devices (FB) = Y
                VESA VGA graphics support (FB_VESA) = Y
                  VESA driver type
                    vesafb (FB_VESA_STD) = Y                                        (see note 1)
                    vesafb-tng (FB_VESA_TNG) = N                                    (see note 2)
                "Card Specific" display support (FB_"CARD") = N                     (see note 3)
                Logo Configuration
                  Bootup logo (LOGO) = N
                Support for the framebuffer splash (FB_SPLASH) = Y
    and im making the config with xconfig , but i cannot find some options like for example
    VESA driver type
                    vesafb (FB_VESA_STD) = Y                                        (see note 1)
                    vesafb-tng (FB_VESA_TNG) = N                                    (see note 2)
                "Card Specific" display support (FB_"CARD") = N                     (see note 3)
    so rite now im thinking that maybe this options changed of subcategory or they do not exists anymore , i dont know :S
    maybe some of you would like helping me on finding this options as i think if they are not enabled the hole building process will end up on a not vesafb enabled kernel
    thanks for any help 

    The VESA driver type selection is only available if you also apply the vesa-tng patch, which is included in beyond, but is not necessary for gensplash. In other words, you can safely do without them.
    "Card Specific" display support refer to the options immediately after VESA VGA graphics support in the kernel config i.e. card-specific framebuffer drivers such as nvidiafb or radeonfb. Just make sure they are all turned off.

  • Cisco ISE configs for switch

    I suppose Cisco ISE sends a URL redirect to the switch and the switch presents it to the client in case of guest Access getting a URL redirect with User Acceptance Page (Wired Guests and not wireless).
    My question here is, Do we need to configure http and https server on the switches (both supplicant and authenticator)?
    I am sure it will need but just wanted a confirmation..
    I have checked the configuration for supplicant and Authenticator switches for ISE and it has no where mentioned that part of the config.
    http://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_troubleshooting.html (a problem of URL redirection and possible cause is mentioned) ------- makes me sure that the config is needed.
    http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2960x/software/15-0_2_EX/security/configuration_guide/b_sec_152ex_2960-x_cg/b_sec_152ex_2960-x_cg_chapter_010000.html
    (config of supplicant and authenticator switch)---- nowhere mentioned of the http/https config for both switches.

    Yes, its needed.  The http/s server within the swtich is used to grab the http user traffic and redirect the traffic to the CWA portal, or a device registration portal, or even to the Mobile Device Management (MDM) onboarding portal.  .
    ip http server
    ip http secure-server
    The info below I grabbed from Cisco ISE for BYOD and secure unified access book.
    "Many organization want to ensure that this redirection process using the switch's internal HTTP server is decoupled from the management of the switch itself, in order to limit the chances of an end user interacting with the management intervace and control plane of a switch.  this may be accomplished by running the following two commands from global configuration mode:
    ip http active-session-modules none
    ip http secure-active-session-modules none"

  • For server Eagle-PROD-Instance, the Node Manager associated with machine

    I have a wlst script that creates a domain and a managed server. I associate the server with a machine that's attached to a node manager. It creates the managed server fine but when I try and start it I get this error
    For server Eagle-PROD-Instance, the Node Manager associated with machine Eagle-Machine is not reachable.
    All of the servers selected are currently in a state which is incompatible with this operation or are not associated with a running Node Manager or you are not authorized to perform the action requested. No action will be performed.
    The machine is associated with the Node Manager and the NM is running. I can start the managed server from the command line, but not from the admin console
    This is the script, am I missing something?
    Thanks
    name: createManagedServer.py
    description: This script create the weblogic domain, and executes each weblogic queue module
    subfile. it reads a property file : weblogic_wlst.properties for server domain information
    author     : mike reynolds - edifecs 2011
    created     : April 8th 2011
    import sys
    from java.lang import System
    from java.util import Properties
    from java.io import FileInputStream
    from java.io import File
    from weblogic.management.security.authentication import UserEditorMBean
    from weblogic.management.security.authentication import GroupEditorMBean
    from weblogic.management.security.authentication import UserPasswordEditorMBean
    # Loads the contents a properties file into a java.util.Properties
    # configPropFile = "weblogic_wlst.properties"
    def loadPropertiesFromFile(configPropFile):
         configProps = Properties()
         propInputStream = FileInputStream(configPropFile)
         configProps.load(propInputStream)
         propInputStream.close()
         return configProps
    def getProperties():
         importConfigFile = sys.argv[1]
         print importConfigFile
         domainProps = loadPropertiesFromFile(importConfigFile)
         properties = Properties()
         input = FileInputStream(importConfigFile)
         properties.load(input)
         input.close()
         return properties
    def create_users(username, password, description):
    # create admin user
    cmo.getFileRealms()
    try:
    userObject=cmo.getSecurityConfiguration().getDefaultRealm().lookupAuthenticationProvider("DefaultAuthenticator")
    userObject.createUser(username,password,description)
    print "Created user " + username + "successfully"
    except:
    print "check to see if user " + username + " exists "
    def add_user_to_group(username):
    print "Adding a user to group ..."
    cmo.getFileRealms()
    try:
    userObject2 = cmo.getSecurityConfiguration().getDefaultRealm().lookupAuthenticationProvider("DefaultAuthenticator")
    userObject2.addMemberToGroup('Administrators',username)
    print "Done adding user " + username
    except:
    print "check to see if user " + username + " is already in group "
    def connect_server(user,pw,url):
              connect(user,pw,url)
    def create_machine():     
    try:
    print 'Creating machine' + machine
    # cd('/')
    # create(machine, 'Machine')
    mach = cmo.createUnixMachine(machine)
    mach.setPostBindUIDEnabled(true)
    mach.setPostBindUID('oracle')
    mach.setPostBindGIDEnabled(true)
    mach.setPostBindGID('oracle')
    mach.getNodeManager().setNMType('ssl')
    except:
         print "machine exists"
    def build_domain():
    ### Read Basic Template
    WL_HOME = "C:/Oracle/Middleware/wlserver_10.3"     
    readTemplate(WL_HOME+"/common/templates/domains/wls.jar")
    template=WL_HOME+"/common/templates/domains/wls.jar"
    cd('Servers/AdminServer')
    set('ListenAddress', adminServerAddress)
    set('ListenPort', int(adminServerPort))
    cd('/')
    cd('/Security/base_domain/User/weblogic')
    cmo.setPassword('w3bl0g1c')
    ### Write Domain
    setOption('OverwriteDomain', 'true')
    print "writing domain " + domainDir + domainName
    writeDomain(domainDir+'/'+domainName)
    closeTemplate()
    create_machine()
    arg = "Arguments=\" -server -Xms256m -Xmx768m -XX:MaxPermSize=256m -da\""
    prps = makePropertiesObject (arg)
    domain = domainDir + domainName
    try:
         #startNodeManager()
    #nmConnect('weblogic', 'w3bl0g1c', host, 5556, 'AdminServer', domain, 'ssl')
    # nmStart('AdminServer')
    startServer('AdminServer', domainName, url, adminUser, adminPassword, domainDir, 'true')
    except:
    print "could not connect to Node Manager"
    def create_server():     
    # get server instance properties
    name = properties.getProperty("serverName")
    domain = properties.getProperty("domainName")
    port = properties.getProperty("listenPort")
    address = properties.getProperty("listenAddress")
    servermb=getMBean("Servers/" + name)
    machine = properties.getProperty("machineName")
    nodePort = properties.getProperty("nodeManagerPort")
    domainDir = properties.getProperty("domainDir")
    if servermb is None:
              startEdit()
              cd('/')
              cmo.createServer(name)
              cd('/Servers/'+ name)
              cmo.setListenAddress(address)
              cmo.setListenPort(int(port))
              cd('/')
              cmo.createMachine(machine)
              cd('/Machines/' + machine + '/NodeManager/' + machine )
              cmo.setNMType('Plain')
              cmo.setListenAddress(address)
              cmo.setListenPort(int(nodePort))
              cmo.setDebugEnabled(false)
              cd('/Servers/' + name)
              cmo.setListenPortEnabled(true)
              cmo.setJavaCompiler('javac')
              cmo.setClientCertProxyEnabled(false)
              cmo.setMachine(getMBean('/Machines/' + machine ))
              cmo.setCluster(None)
              cd('/Servers/' + name + '/SSL/' + name)
              cd('/Servers/' + name + '/ServerDiagnosticConfig/' + name)
              cmo.setWLDFDiagnosticVolume('Low')
              cd('/Servers/' + name)
              cmo.setCluster(None)
              cd('/Servers/' + name + '/SSL/' + name)
              cmo.setEnabled(false)
    ### Executable Script
    ### CreateDomain.py
    ### Define constants
    WL_HOME = "C:/Oracle/Middleware/wlserver_10.3"
    print "Starting the script ..."
    print "Getting properties ... "
    properties = getProperties()
    adminServerAddress = properties.getProperty("adminServerAddress")
    adminServerPort = properties.getProperty("adminServerPort")
    adminUser = properties.getProperty("adminUser")
    adminPassword = properties.getProperty("adminPassword")
    edifecsUser = properties.getProperty("edifecsUser")
    edifecsPassword = properties.getProperty("edifecsPassword")
    host = properties.getProperty("host")
    domainDir = properties.getProperty("domainDir")
    domainName = properties.getProperty("domainName")
    user = properties.getProperty("username")
    pw = properties.getProperty("passwd")
    url = properties.getProperty("adminURL")
    machine = properties.getProperty("machineName")
    print "Building the domain..."
    build_domain()
    print "Connecting to server"     
    connect_server(adminUser, adminPassword, url)
    edit()
    startEdit()
    # create managed server
    # create_machine()
    create_server()
    print "Creating users"
    # starting configuration tree
    serverConfig()
    create_users(adminUser, adminPassword, "Administrator")
    add_user_to_group(adminUser)
    create_users(edifecsUser, edifecsPassword,"Administrator")
    add_user_to_group(edifecsUser)
    # have to restart edit to save config
    edit()
    startEdit()
    # nmKill('AdminServer')
    print "saving configuration"
    try:
         save()
         activate(block="true")
         print "script returns SUCCESS"
         print "admin server is running"
         print "starting server " + name
         startServer(domainName, name ,url,adminUser, adminPassword, domainDir,'true')
    except:
         print "failed to save server"
         dumpStack()

    Actually the cert is coming from your Dev machine but it is sending the Prod cert.
    What cert is used by your admin server ? It should match the host name.
    So your Dev machine is apparently using a copy of the prod cert / keystore rather than using its own DEV cert. It's not clear from your post whether this is the nodemanager using the wrong cert, or the managed server. So both should be checked.
    The managed servers need to be using a cert that matches their host name. If you have a managed server on VM-BEA-DEV, then the cert needs to be CN=VM-BEA-DEV. You can also use a load-balancer CN name in the cert if you have the cluster's HTTP values set to match.
    In your nodemanager.properties, are you explicitly accessing keystores, such as with:
    KeyStores=CustomIdentityAndJavaStandardTrust
    CustomIdentityAlias=some_alias
    CustomIdentityKeyStoreFileName=some_path_to_keystore
    CustomIdentityKeyStorePassPhrase={3DES}...
    CustomIdentityKeyStoreType=jks
    CustomIdentityPrivateKeyPassPhrase={3DES}
    In my multi-machine clusters, I have multiple certificates such as:
    admin machine1:
    has a cert for use by the admin server and NM that matches the host name ( with node manager.properties entries such as the above )
    has a 2nd cert that matches the load-balancer name for the cluster - used by the managed servers
    all other machines:
    has a cert for use by NM that matches the host name ( with node manager.properties entries such as the above )
    has a 2nd cert that matches the load-balancer name for the cluster - used by the managed servers

  • Working eMTA config for a Metaswitch for Cisco DPQ3925

    I need a working emta config for a DPQ3295 cable modem that will work with a Metaswitch AGC using NCS

    Thanks for the reply but it still doesn't work.  I have tried those commands a few times and I always get the same error...access violation.
    I am using TFTPserver for Mac.  My Server Status, Working path permissions and Parent folder permission are all green.
    I have tried it with a pre-made file and without a pre-made file and I get the same result.
    I can create and modify any files in my working directory.
    This the message in the log file...Mar 25 13:12:41 MacBook-Pro-Retina.local TftpServer[1295]: 10.4-style NSDateFormatter method called on a 10.0-style formatter, which doesn't work. Break on _NSDateFormatter_Log_New_Methods_On_Old_Formatters to debug. This message will only be logged once.
    I am not sure what that means, but I will research it after I post this.
    I have tried both the CLI and the GUI and neither will work.

  • Net8 Config/Directory Server Problem

    I have installed personnal 8i on my Windows 2000 Advanced Server box. I want to test it on this server only, don't want to do any networking, etc. How do I set up the Net8 config for no networking. Do I need to ?
    I can get the listener set up and started, but do I need it ?
    Every time I try to do anything, I get an error regarding "can't connect to a directory server" I have been trying to use the Net8 config ass't to set it, but can't get that working either. The server does have a host name and an IP address, but does'nt belong to a domain. I don't want to install active directory.
    How can I get this to run "stand alone" ??
    Thanks in advance for your help.
    Greg Stahl

    The directory server reports all connections, requests and results in the logs/access file (under the instance directory).
    All errors are reported in the logs/errors file.
    Additional messages can be generated by changing the errorlog level and infolog levels via the Console, or via LDAP. Please refer to the Administration Guide and the Reference Manual for the details.
    Regards,
    Ludovic.

  • Custom kernel config and fsck error

    Why does arch kernel config pass while custom kernel config fail the fsck during boot? Udev obviously populates /dev/sda* with the archlinux kernel config while the custom kernel config populates /dev/hda*. Is there a reason for this behavior related to the config file or is it a initscript based on /etc/fstab related issue? I have the two different kernel configuration files for the i686 machines, just in case someone can figure this out.
    http://aur.archlinux.org/packages/longe … ig-longene
    http://aur.archlinux.org/packages/longe … -archlinux

    Check to make sure that it is not because of the system time being changed.  It will complain about this if it has changed and fail the first filesystem check.
    Last edited by Wintervenom (2009-09-08 15:56:26)

  • Can I adjust the kernel config-file? [SOLVED]

    so i kicked out linux-3 kernel and installed the "aufs_friendly kernel" with the aufs2 package all went well...after the reboot i got an error "acer_wmid" failure .
    my question can i rebuild the kernel WHITOUT the "acer_wmi" part from the config-file within the kernel-source ????
    # Altera FPGA firmware download module
    CONFIG_ALTERA_STAPL=m
    CONFIG_X86_PLATFORM_DEVICES=y
    CONFIG_ACER_WMI=m <<==== compiled as module and i want to get rid off...
    CONFIG_ACERHDF=m
    CONFIG_ASUS_LAPTOP=m
    CONFIG_DELL_LAPTOP=m
    CONFIG_DELL_WMI=m
    CONFIG_DELL_WMI_AIO=m
    because in the heather of the file
    # Automatically generated make config: don't edit <<==== THIS ??!!
    # Linux/x86_64 2.6.39 Kernel Configuration
    # Mon Jun 6 22:07:19 2011
    anybody any ideas ??
    Last edited by gregor (2011-08-01 21:57:48)

    Uncomment the "make menuconfig" line in the PKGBUILD or run that command when creating your kernel config.  This will bring up the console config utility.  Navigate to Device Drivers --> all the way down to X86 Platform Specific..  Toggle Acer WMI Laptop Extras using the spacebar.
    gonna try ...i'd blacklisted the module for now.
    You can also edit the config file directly and change the 'm' to a 'n'  This will work but the reason it's not recommended is because some options are dependent on other kernel options.
    tried that one .....no success
    [EDIT:] Uncomment the "make menuconfig" line in the PKGBUILD = worked for me
    BIG THNX
    Last edited by gregor (2011-08-01 21:44:06)

Maybe you are looking for