Weblogic 8.1 SP6 - console admin display 503 after dis/enable "console "

Question

hi,
when we startup a weblogic server 8.1 sp 6 admin instance, the console is started automatically, so as a security precaution , we can stop the "Console" deployment so that nobody can access and take control of admin. But when we perform a start of the admin "Console" deployment,we can still login but the right hand page of the web browser admin console will show webpage error 503. This "bug" is repeatable and I am not sure if anyone else is facing this problem?
my platform is solaris10 SPARC/INTEL, weblogic 8.1 SP6.
i stop my Console admin via:
java weblogic.Deployer -verbose -url t3://localhost:80 -username system -password password -stop -name console
and start my Console admin deployment via:
java weblogic.Deployer -verbose -url t3://localhost:80 -username system -password password -start -name console

Answer 1

Andrea,
I wasn't clear in my previous message but the Administrators group I mentioned does not have to be the AD admin group, if that's the reason for your hesitation. You can add an Administrators group under a different Organizational Unit (OU) which would represent your WLS console users.
If that's not possible you could:
1) Add a ConsoleUser (or whatever) group in AD that represents your WLS console users. Then, edit the Admin Global Role in WLS to include the ConsoleUser group. A user in this group can then access the console assuming your authenticator is configured properly. (NOTE: This worked for me in WLS 9 but I didn't try 8.1.)
2) Use the DefaultAuthenticator to store your WLS admins in WLS' embedded LDAP. Each admin user would be in the Administrators group, of course. If you didn't know, you can have multiple authenticators in your realm.
Hope this helps...
Mike
Weblogic/J2EE Security Blog: http://monduke.com