NCipher server not in operational mode : Cisco NAC

One of the NAC server got rebooted and then while restart i am getting an error nCipher server not in operational mode. Please change the settings on back of the card. Also error-sshd-server not running.
Please let me know how to make the ncipher in operational mode and change the mode of NAC in FIPS mode.
It is very urgent. Please let me know the solution.
Regards,
Tarunava

The Cisco NAC is 3315 and software version is 4.1.2.
Below are the error logs.
[root@PLHO_CAS_01 ~]# cd /perfigo/common/bin/
[root@PLHO_CAS_01 bin]# ./test_fips.sh info
Installed FIPS card is nCipher
Info-FIPS file exists
NFastApp_Connect failed: ServerNotRunning
Error-card is not in operational mode
Error-httpd worker is in Non FIPS mode
Error-sshd not up
System not in FIPS mode
[root@PLHO_CAS_01 bin]#
[root@PLHO_CAS_01 ~]# /etc/init.d/sshd start
Starting sshd:WARNING: initlog is deprecated and will be removed in a future rel
ease
key_load_private_pem: RSA_blinding_on failed
Could not load host key: /root/.perfigo/sec/tomcat.key
Disabling protocol version 2. Could not load host key
sshd: no hostkeys available -- exiting.
[FAILED]
[root@PLHO_CAS_01 ~]# /etc/init.d/httpd start
Starting httpd: Syntax error on line 167 of /etc/httpd/conf/httpd.conf:
DocumentRoot must be a directory
[FAILED]

Similar Messages

Access server not displaying ROMMON mode target device

Hi All,
I'm encountering a curious problem (or I'm overlooking something).
I'm configuring a console server for configuring remote devices. This is working well except for the fact that if a target device is in ROMMON mode, the console server refuses to displays the target device console. It does open the connection but the ROMMON prompt is not shown on the console server . This is essential for this device as we will need to use it to reset passwords remotely and thus need to be able to access ROMMON mode from the console server.
Parts used are a 2951 router and a HWIC-8A serial card. Does anyone has some ideas?
Posted my config below:
[code]
Current configuration : 4389 bytes
! Last configuration change at 04:19:45 UTC Wed Sep 19 2012
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
hostname Router
boot-start-marker
boot-end-marker
no aaa new-model
crypto pki token default removal timeout 0
no ipv6 cef
ip auth-proxy max-login-attempts 5
ip admission max-login-attempts 5
ip host Chassis1 2002 100.0.0.1
ip host Chassis2 2003 100.0.0.1
ip host Chassis3 2004 100.0.0.1
ip host Chassis4 2005 100.0.0.1
ip host Chassis5 2006 100.0.0.1
ip host Chassis6 2007 100.0.0.1
ip host Chassis7 2008 100.0.0.1
ip host Chassis8 2009 100.0.0.1
ip cef
multilink bundle-name authenticated
license udi pid CISCO2951/K9 sn FCZ13507226
hw-module sm 1
redundancy
interface Loopback0
ip address 100.0.0.1 255.255.255.255
interface Embedded-Service-Engine0/0
no ip address
shutdown
interface GigabitEthernet0/0
no ip address
shutdown
duplex auto
speed auto
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
interface GigabitEthernet0/2
no ip address
shutdown
duplex auto
speed auto
interface GigabitEthernet1/0
no ip address
shutdown
interface GigabitEthernet1/1
description Internal switch interface connected to EtherSwitch Service Module
no ip address
interface Vlan1
no ip address
interface Async0/0/0
no ip address
encapsulation slip
interface Async0/0/1
no ip address
encapsulation slip
interface Async0/0/2
no ip address
encapsulation slip
interface Async0/0/3
no ip address
encapsulation slip
interface Async0/0/4
no ip address
encapsulation slip
interface Async0/0/5
no ip address
encapsulation slip
interface Async0/0/6
no ip address
encapsulation slip
interface Async0/0/7
no ip address
encapsulation slip
ip forward-protocol nd
no ip http server
no ip http secure-server
menu TS title ^C
Virtual Lab Terminal Server
To exit from a device, use CTRL+SHIFT+6 then press x
^C
menu TS prompt ^C Your selection : ^C
menu TS text 1 Connect to Rack1 - Chassis1
menu TS command 1 resume Chassis1 /connect telnet Chassis1
menu TS text 2 Connect to Rack1 - Chassis2
menu TS command 2 resume Chassis2 /connect telnet Chassis2
menu TS text 3 Connect to Rack1 - Chassis3
menu TS command 3 resume Chassis3 /connect telnet Chassis3
menu TS text 4 Connect to Rack1 - Chassis4
menu TS command 4 resume Chassis4 /connect telnet Chassis4
menu TS text 5 Connect to Rack1 - Chassis5
menu TS command 5 resume Chassis5 /connect telnet Chassis5
menu TS text 6 Connect to Rack1 - Chassis6
menu TS command 6 resume Chassis6 /connect telnet Chassis6
menu TS text 7 Connect to Rack1 - Chassis7
menu TS command 7 resume Chassis7 /connect telnet Chassis7
menu TS text 8 Connect to Rack1 - Chassis8
menu TS command 8 resume Chassis8 /connect telnet Chassis8
menu TS text s show all established sessions
menu TS command s show sessions
menu TS options s pause
menu TS text c<no> clear the session by number ie: c5
menu TS text e menu-exit
menu TS command e menu-exit
menu TS text q Quit terminal server session
menu TS command q exit
menu TS command c1 c1
menu TS command c2 c2
menu TS command c3 c3
menu TS command c4 c4
menu TS command c5 c5
menu TS command c6 c6
menu TS command c7 c7
menu TS command c8 c8
menu TS clear-screen
menu TS line-mode
control-plane
alias exec c1 disconnect Chassis1
alias exec c2 disconnect Chassis2
alias exec c3 disconnect Chassis3
alias exec c4 disconnect Chassis4
alias exec c5 disconnect Chassis5
alias exec c6 disconnect Chassis6
alias exec c7 disconnect Chassis7
alias exec c8 disconnect Chassis8
line con 0
transport output all
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line 0/0/0 0/0/7
exec-timeout 0 0
no exec
transport input all
transport output none
stopbits 1
flowcontrol hardware
line 67
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
flowcontrol software
line vty 0 4
login
transport input all
scheduler allocate 20000 1000
end
Router#
[/code]

This appeared to be a hardware issue and is solved. Configuration of the access server was o.k..

Cisco NAC Server

Hello! Help me please!
Im perform installation Cisco NAC Server 3315 ver. 4.8(2) but after that I cann't connect to Server by https - HTTP 403 Forbidden. And I can connect to NAC Server by ssh.
What could be the reason?

While rebooting , i am getting this:
Starting nc_drivers: /dev/nfastpci0
[ OK ]
Starting nc_hardserver: waiting for nCipher server to become operational ...
waiting for nCipher server to become operational ...
waiting for nCipher server to become operational ...
waiting for nCipher server to become operational ...
waiting for nCipher server to become operational ...
nCipher server did not start; see /opt/nfast/log/hardserver.log
[FAILED]
Starting sshd:WARNING: initlog is deprecated and will be removed in a future release
key_load_private_pem: RSA_blinding_on failed
Could not load host key: /root/.perfigo/sec/tomcat.key
Disabling protocol version 2. Could not load host key
sshd: no hostkeys available -- exiting.
[FAILED]
Starting xinetd: [ OK ]
Starting console mouse services: [ OK ]
Starting nessusd: Loading the Nessus plugins...
All plugins loaded
[ OK ]
Starting crond: [ OK ]
Starting anacron: [ OK ]
Starting atd: [ OK ]
Starting jexec: Starting jexec services[ OK ]
Starting Ncipher services
-- Running startup script 45drivers
-- Running startup script 46exard
-- Running startup script 50hardserver
waiting for nCipher server to become operational ...
waiting for nCipher server to become operational ...
waiting for nCipher server to become operational ...
waiting for nCipher server to become operational ...
waiting for nCipher server to become operational ...
nCipher server did not start; see /opt/nfast/log/hardserver.log
Starting perfigo: click: starting router thread pid 2092 (f7b7d340)
Failed execute command : CONNECTFORCE, Error : Connection refused
BaseAgent process reconnecting...
Failed execute command : ACTIVE, Error : Connection refused
BaseAgent executes [ACTIVE] ...
Link Detect Manager only operates when HA is enabled.
NFastApp_Connect failed: ServerNotRunning
And then in the hardserver log I am getting nCipher card not in operational mode. Please change the settings on the card.
How to resolve the issue.
Thanks
Shalvi Yadav

Profile consistency check when operation mode change

If the number of work processes in the profiles is changed, the system can no longer switch operation modes until after a restart of the instance. It's therefore necessary to adjust the configuration of the operation modes after a change to the profiles.
In above paragraph, I don't understand why the system can not switch mode if the number of wp in profile is changed? Does system will compare wp number in profile with currently running wp number before the operation mode switch? Please advise.
Thanks.
James

Yes, I can understand it, when the number of work processes is changed, we need redefine the operation mode.
But I am confused this sentence "If the number of work processes in the profiles is changed, the system can no longer switch operation modes until after a restart of the instance. "
After the number of work processes in profile is changed, I think it will not impact instance immediately until restart the instance. According to this sentence, it seems when I change the parameter in profile, it impacts the instance immediately and the system can not switch operation mode right now if we don't restart the instance. Is it reasonable? And I think the operation mode still need redefine even if we restart the instance, since scenario in Ralph's description. Is my thought right?
Thanks so much.
James

Windows server 2008 r2 operating system not booting in normal mode after unstalled the virus gaurd

Windows server 2008 r2 operating system is not booting in normal mode after i uninstalled the virus guard in the system. I tried to repair the system but repairing option not available in server 2008. i can log in to the system only safe mode.
Please help me to solve this issue as soon as possible .I do not have the any system backup with me .

Hi,
Regarding the issue here, please restart the computer and press F8 until you see the
advanced boot options, select start windows normally,
if it starts with no problem, please check if you have the option boot from safe mode checked:
run->type msconfig->tab boot->boot options, check if the
safe boot is selected, if yes please uncheck it. Then restart the computer to check if this problem still exists.
If the system needs repair, please take a look into the below WIKI article, and check the event viewer to see if any errors for further troubleshooting.:
Windows Server 2008 Repair Steps for No Boot Issues
http://social.technet.microsoft.com/wiki/contents/articles/4162.windows-server-2008-repair-steps-for-no-boot-issues.aspx
Hope this helps
Best regards
Michael
If you have any feedback on our support, please click
here.
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

How to change the 'Default operating mode' of a mapping on the repository and not from the client

Hi everybody,
I am using OWB 11.2.0.3 and under the mapping's configuration property, I have the necessity to change the Run time parameter "Default operating mode" to SET_BASED in almost all my mappings.
Because I have 745 mappings in which the Default operating mode is different from SET_BASED, instead to open 745 times the 'Configure' and update manually the value, is there a way to update safely these values (with an oracle predefined script) directly on the repository ?
I know that exists a view called CMPSTRINGPROPERTYVALUE_V based on a table called CMPSCOPrpClasses, but changing this table it's very complicated for me because contains only keys and then I don't know in which way is connected with all the other structures....
If somebody knows a method more efficient to do these updates on the repository and not from OWB client I will appreciated it!
Thanks in advance
Alessandro

Urgent... help!!! Thanks
in short, my server log says transaction access mode is "read only", so my calling home.create() always triggers a transaction rollback. How to change the access mode to "read write"?
Is possible to work out through one of the descriptor files? Or ini settings of the underlying pointbase database? Or any other way around?

Cisco NAC server hang issue

Hi All Cisco NAC Experts, I am currently experiencing a Cisco NAC NAC3315-SVR hang issue.
The issue was already happened for few time on the same server and the symptom when NAC server hung includes no response to ICMP ping, no response to SSH request, no response for access request to CAS management page via https, HA pair was detected down from its HA neighbor and triggered failover to secondary CAS.
The CAS server was recovered after manually power cycle the hardware.
After went through the attachment CAS logs, I found all the services and logging service were stopped when the issue happening but unfortunately there is no any suspicious activity was logged down before or during the issue happening.
I have also tried to search on Cisco Bug Toolkit but no similar case was found, I believe it was not caused by software bug due to the software version 4.8.1 is running in my company for years and only one CAS server having the issue.
That will be great if any one can help me out for the same.
Thanks,
Eric

Hi Bro
This could be a problem with the certificate in that Cisco NAC appliance itself. My suggestion is to redo the certificate generation between the CAS CAM and CA Server. If this still doesn’t work, it could also be due to overload/broadcast storm on the LAN portion. This can be verified via Wireshark.
If all else fail, then a hardware swap would seem like the next best thing.

Cisco NAC 4.8 and Windows Server 2008 Enterprise 64bit SSO

Hi,
     I try to setup SSO on Cisco NAC 4.8 and Windows Server 2008 Enterprise 64bit, but I can't start Active Directory SSO Service that show error follow below. I saw this error " KDC has no support for encryption type (14)" . Could anyone help me to troubleshoot this problem?
FQDN: active.test.com
Domain Name : test.com
User : ccasso
2011-02-05 12:00:30.225 +0700 WARN com.perfigo.wlan.jmx.adsso.GSSServer
- Server was not running ...
2011-02-05 12:00:30.225 +0700 INFO com.perfigo.wlan.jmx.adsso.GSSServer
- Server starting server ...
2011-02-05 12:00:30.225 +0700 INFO com.perfigo.wlan.jmx.adsso.GSSServer
- Server is now running ...
2011-02-05 12:00:30.225 +0700 INFO com.perfigo.wlan.jmx.adsso.GSSServer
- GSSServer - SPN : [ccasso/[email protected]]
2011-02-05 12:00:30.225 +0700 INFO com.perfigo.wlan.jmx.adsso.GSSServer
- GSSServer - building kdc list for domain active.test.com
2011-02-05 12:00:40.224 +0700 INFO com.perfigo.wlan.jmx.adsso.GSSServer
- GSSServer - done building kdc list for domain active.test.com
2011-02-05 12:00:40.224 +0700 INFO com.perfigo.wlan.jmx.adsso.GSSServer
- GSSServer - KDC(s) :[10.0.240.100]
2011-02-05 12:00:40.224 +0700 INFO com.perfigo.wlan.jmx.adsso.GSSServer
- GSSServer - writeKrbFile: writing to file ../conf/krb.txt
2011-02-05 12:00:40.224 +0700 INFO com.perfigo.wlan.jmx.adsso.GSSServer
- GSSServer - writeKrbFile: wrote to file ../conf/krb.txt
2011-02-05 12:00:40.224 +0700 INFO com.perfigo.wlan.jmx.adsso.GSSServer
- GSSServer - creating login context ...
2011-02-05 12:00:40.224 +0700 INFO com.perfigo.wlan.jmx.adsso.GSSServer
- GSSServer - created login context ...javax.security.auth.login.LoginCon
text@5ad7b2
2011-02-05 12:00:40.239 +0700 ERROR com.perfigo.wlan.jmx.adsso.GSSServer
- Unable to start server ... KDC has no support for encryption type (14)
2011-02-05 12:00:50.244 +0700 INFO com.perfigo.wlan.jmx.adsso.GSSServer
- Notifying GSSServer status Stopped
2011-02-05 12:00:50.244 +0700 INFO com.perfigo.wlan.jmx.adsso.GSSServer
- server is exiting .

Hi,
This error means that your DC does not support the encryption method the ACS wants to use.
Usually this happens when you run 2008 Server with 2003 functionality...
You will need to run ktpass.exe according to the DC you are running:
http://www.cisco.com/en/US/docs/security/nac/appliance/configuration_guide/48/cas/s_adsso.html#wp1277452.
For Windows 2008 Server at 2003 Server functional level:
ktpass -princ newadsso/[adserver.][email protected] -mapuser newadsso -pass
PasswordText -out c:\newadsso.keytab -ptype KRB5_NT_PRINCIPAL
HTH,
Tiago
If this helps you and/or answers your question please mark the question as "answered" and/or rate it, so other users can easily find it.

Cisco NAC agent services not running on Windows XP

Hi,
I've problem with Cisco NAC agent services on Windows XP professional SP3.
After first installation using user local administrator, the services of Cisco NAC agent on windows machine running well, but after logout, and login using another user which is registered in domain users, the services of Cisco NAC agent is going to stopped (going to Manual mode not automatic, and the status is stopped).
This situation is not happened on all windows machines, several machines running well.
Cisco NAC agent version 4.9.0.42
Has anyone seen this type of problem?
Below i attached windows machine information from ones running well and not running, Thanks
Regards,
Rian

Hi thanks for your answers, dbconsole is started in services.msc and also Agent, but goes on to say that the agent is not running.
In sysman log shows this,
"03/20/2012 13:38:54,553 [MetricCollector: HOMETAB_THREAD600: 60] ERROR rt.DbMetricCollectorTarget _getAllData.328 - oracle.sysman.emSDK.emd.comm.CommException: Exception in sending Request :: null
oracle.sysman.emSDK.emd.comm.CommException: Exception in sending Request :: null
at oracle.sysman.emSDK.emd.comm.EMDClient.getResponseForRequest_ (EMDClient.java: 1330)
at oracle.sysman.emSDK.emd.comm.EMDClient.getResponseForRequest (EMDClient.java: 1223)
at oracle.sysman.emSDK.emd.comm.EMDClient.getMetrics (EMDClient.java: 640)
at oracle.sysman.emo.perf.metric.rt.DbHomeTab._getAllData (DbHomeTab.java: 324)
at oracle.sysman.emo.perf.metric.rt.DbHomeTab.getData (DbHomeTab.java: 139)
at oracle.sysman.emo.perf.metric.eng.MetricCached.collectCachedData (MetricCached.java: 402)
at
at oracle.sysman.emo.perf.metric.eng.MetricCollectorThread.run (MetricCollectorThread.java: 320)
at java.lang.Thread.run (Thread.java: 595)
20/03/2012 22:00:03,335 [JobWorker 772: Thread-13] ERROR em.jobs executeCommand.161 - UpdateARUTables: Oracle MetaLink credentials are incorrect or missing. Click Patching Setup parameters required to September."
In event viewer shows this,
"Agent process exited abnormally DURING initialization." but this message appears a few hours after having started the service.
I am using the Administrator account

Cisco NAC Agent and Windows 8 still not working

Hello. I recently upgraded the Cisco NAC Agent to the latest version (4.9.1.13) on a Windows 8 VM. The release notes state that Windows 8 support has been added, and that a patch must be downloaded. However, the information about the patch is vague. I'm not sure if it's a client or server-side patch, or perhaps if I already have it as a result of upgrading to the latest version.
I ask this because I plan to upgrade some computers to Windows 8, and have noticed that Cisco NAC Agent can't handshake with the NAC server on Windows 8 (both native and VM), and despite upgrading to the latest version, the handshake is still unsuccessful.
Thanks,
-Collin

Hi Collin,
The 4.9.1 Patch for Windows 8 Support can be downloaded from the following link :
http://www.cisco.com/cisco/software/release.html?mdfid=282910502&flowid=34713&softwareid=282573326&release=4.9.1&relind=AVAILABLE&rellifecycle=&reltype=latest
The patch should be applied to both 4.9.1 CAM and CAS.
Please go through the README file for patch provided in the download link provided above. It has detailed information.
Regards,
Karthik Chandran

%OIR-SP-6-DOWNGRADE_EARL: Module 4 DFC installed is not identical to system PFC and will perform at current system operating mode

Hi Everyone,
Good day!
We have WS-SUP720-3BXL and WS-F6700-DFC3CXL installed on 7609-S router and based on this link http://www.cisco.com/c/en/us/support/docs/switches/catalyst-6500-series-switches/107258-C6K-PFC-DFC-CFC.html the Resultant mode should be PFC3BXL. However, as shown below, the PFC operating mode becomes PFC3B.
Router#sh platform hardware pfc mod
PFC operating mode : PFC3B
Following are the modules installed in our router.
Router#sh mod
Mod Ports Card Type                              Model              Serial No.
4    8 CEF720 8 port 10GE with DFC            WS-X6708-10GE      XXXXXXXXX
5    2 Supervisor Engine 720 (Active)         WS-SUP720-3BXL     XXXXXXXXX
6    2 Supervisor Engine 720 (Hot)            WS-SUP720-3BXL     XXXXXXXXX
Mod MAC addresses                       Hw    Fw           Sw           Status
4 001f.6ca4.2588 to 001f.6ca4.258f   2.1   12.2(18r)S1 12.2(33)SRE9 Ok
5 001f.6c77.8448 to 001f.6c77.844b   5.9   8.5(3)       12.2(33)SRE9 Ok
6 001a.a22d.b200 to 001a.a22d.b203   5.10 8.5(3)       12.2(33)SRE9 Ok
Mod Sub-Module                  Model              Serial       Hw     Status
4 Distributed Forwarding Card WS-F6700-DFC3CXL   XXXXXXXXX 1.0    Ok
5 Policy Feature Card 3       WS-F6K-PFC3BXL     XXXXXXXXX 1.11   Ok
5 MSFC3 Daughterboard         WS-SUP720          XXXXXXXXX 4.0    Ok
6 Policy Feature Card 3       WS-F6K-PFC3BXL     XXXXXXXXX 1.11   Ok
6 MSFC3 Daughterboard         WS-SUP720          XXXXXXXXX 4.1    Ok
Mod Online Diag Status
4 Pass
5 Pass
6 Pass
The problem now is that I am seeing the messages below and the maximum value that I can enter for mls cef maximum-routes is 239K only instead of 1M.
%MLSCEF-SP-4-FIB_EXCEPTION_THRESHOLD: Hardware CEF entry usage is at 95% capacity for IPv4 unicast protocol.
Based on this link, http://www.cisco.com/c/en/us/support/docs/switches/catalyst-6500-series-switches/117712-problemsolution-cat6500-00.html WS-SUP720-3BXL and WS-F6700-DFC3CXL has a Default IPv4 TCAM Space of 512K but I'm only getting the following.
Router#sh mls cef max
FIB TCAM maximum routes :
=======================
Current :-
IPv4 + MPLS         - 192k (default)
IPv6 + IP Multicast - 32k (default)
Please advise what seems the problem.
Thanks

Was the WS-X6708-10GE inserted some time after the router was last reloaded? Cisco's PFC/DFC FAQ states that mixing different types of PFCs and DFCs affects OIR (online insertion and removal) - i.e. the router needs to be reloaded with the line-card installed in order for that PFC/DFC combination to work as expected (or even to work at all) - and although I couldn't find PFC3BXL+DFC3CXL as an explicit example of such situation, a reload might be worth a shot if the downtime is not too much trouble...

The switch of operating mode does not occur

Hello
I wander what could be the reason teh system does not switch to operating mode "night". It is an database server.
The profiles are consistent. However the switch does not occurs

Hi,
Did you define the timetable for the operation modes ?
Regards,
Olivier

The document could not be saved. The server said: "The operation failed because an unexpected error occurred. (Result code 0×80020005)" Please ensure you have completed all required properties with the correct information and try again.

I am having problems saving documents back to SharePoint when any of the document properties (metadata columns) are set to be "managed metadata". The check-in/save fails with error:
The document could not be saved. The server said:
“The operation failed because an unexpected error occurred. (Result code 0×80020005)”
Please ensure you have completed all required properties with the correct information and try again.
I have seen similar threads that suggest this is a known issue with this version of Acrobat but I would like conformation from Adobe that this is a known issue and whether it is fixed in a newer version?
Adobe Acrobat version 10.1.13
SharePoint 2010

Hi quodd,,
We are sorry for the issue being faced by you. I need some information from you so that I take further steps:
1. Which Adobe product are you using Acrobat or Adobe reader- what is the complete version?
2. How are you opening and saving the PDF, the exact workflow?
Are you doing it from within Adobe Reader/Acrobat application or opening it from browser, doing changes and saving it using browser itself.
3. Can you try to save a PDF to library with Custom template and managed metadata columns using browser directly.
4. Please verify that columns name do not contain spaces or some other special characters.
Can you try to save PDF to library with Custom template and just a single managed metadata column with a simple name
Thanks,
Nikhil Gupta

Server started in RUNNING mode not showing in Startup Log File when MS Starts

Dear all,
When we start OSB Managed Server, server status is showing Running Status in Web logic console and it is also serving the requests. but in server Start up log file, it is not showing 'Server started in RUNNING mode' after it started.
this behavior is only for 4 managed servers in cluster of 6 managed servers. other 2 managed servers are starting and showing the message correctly.
please some body show some light on it as we need to fix this issue urgently.
thanks in advance.
pr

Dear all,
When we start OSB Managed Server, server status is showing Running Status in Web logic console and it is also serving the requests. but in server Start up log file, it is not showing 'Server started in RUNNING mode' after it started.
this behavior is only for 4 managed servers in cluster of 6 managed servers. other 2 managed servers are starting and showing the message correctly.
please some body show some light on it as we need to fix this issue urgently.
thanks in advance.
pr

How to check whether weblogic server is in DEBUG mode or not

Hi
I want to check in my OSB proxy whether weblogic server is in Debug mode or not?
IF abv thing is not possible ,
I have check whether server is in development mode or production mode from my OSB proxy service?
I m not able to find any doc on this??Please let me know how it can be done?
Thanks

There isnt any other way except for doing a Java Callout. In the callout method you can access the Domain/Server MBean for the information that you seek. Based on the callout result you can go ahead with the logic in your PS..
Here is a sample Java Code to get the Server Log Level and ascertain whether the server is in Production Mode or not.
package com.dell.mbean;
import java.io.IOException;
import java.net.MalformedURLException;
import java.util.Hashtable;
import javax.management.MBeanServerConnection;
import javax.management.MalformedObjectNameException;
import javax.management.ObjectName;
import javax.management.remote.JMXConnector;
import javax.management.remote.JMXConnectorFactory;
import javax.management.remote.JMXServerErrorException;
import javax.management.remote.JMXServiceURL;
import javax.naming.Context;
public class MyConnection {
     private static MBeanServerConnection connection;
     private static JMXConnector connector;
     private static final ObjectName service;
     static {
          try {
          service = new ObjectName("com.bea:Name=DomainRuntimeService,Type=weblogic.management.mbeanservers.domainruntime.DomainRuntimeServiceMBean");
          catch (MalformedObjectNameException e) {
          throw new AssertionError(e.getMessage());
     * Initialize connection to the Domain Runtime MBean Server.
     @SuppressWarnings("unchecked")
     public static void initConnection(String hostname, String portString,
     String username, String password) throws IOException,
     MalformedURLException {
     String protocol = "t3";
     Integer portInteger = Integer.valueOf(portString);
     int port = portInteger.intValue();
     String jndiroot = "/jndi/";
     String mserver = "weblogic.management.mbeanservers.domainruntime";
     JMXServiceURL serviceURL = new JMXServiceURL(protocol, hostname, port,
     jndiroot + mserver);
     Hashtable h = new Hashtable();
     h.put(Context.SECURITY_PRINCIPAL, username);
     h.put(Context.SECURITY_CREDENTIALS, password);
     h.put(JMXConnectorFactory.PROTOCOL_PROVIDER_PACKAGES,"weblogic.management.remote");
     h.put("jmx.remote.x.request.waiting.timeout", new Long(10000));
     try {
     connector = JMXConnectorFactory.connect(serviceURL, h);
     connection = connector.getMBeanServerConnection();
     } catch(JMXServerErrorException jmxSE)
          jmxSE.printStackTrace();
     catch(Exception ex)
          ex.printStackTrace();
     public static String getLogSeverity(String hostName, String portName, String userName, String password) throws Exception {
          initConnection(hostName, portName, userName,password);
          connector.close();
          ObjectName domainConfig = (ObjectName) connection.getAttribute(service,
          "DomainConfiguration");
          ObjectName logMbean =(ObjectName) connection.getAttribute(domainConfig, "Log");
          String logFileFilter = (String) connection.getAttribute(logMbean, "LogFileSeverity");
          System.out.println("Log File Filter= "+ logFileFilter.toString());
          return logFileFilter;
     public static boolean isProductionModeEnabled(String hostName, String portName, String userName, String password) throws Exception {
          initConnection(hostName, portName, userName,password);
          connector.close();
          ObjectName domainConfig = (ObjectName) connection.getAttribute(service,
          "DomainConfiguration");
          boolean prodEnabled= (Boolean) connection.getAttribute(domainConfig, "ProductionModeEnabled");
          System.out.println("Is Production Mode Enabled=" +prodEnabled);
          return prodEnabled;
Make sure you have wlclient.jar and wljmxclient.jar as your dependent libraries.

NCipher server not in operational mode : Cisco NAC

Similar Messages

Maybe you are looking for