What is a GlassFish master password anyway?

This blog has moved to alexismp.wordpress.com
Follow the link for the most up-to-date version of this blog entry.

If you came here looking for the default password for the GlassFish admin console, it's "adminadmin" (although with GlassFish 3 and above the introduction of a default anonymous user now means you should no longer be prompted for user/password). If the master password is what you're looking for, then read on.

With GlassFish v2 (SJS Application Server 9.1) soon to be released in final version, people are starting to move from the development phase to the production planning phase. This means that they are often moving from the "developer" profile to the "cluster" or "enterprise" profiles. One of the questions I often hear is "what is a master password anyway"? Here are a few hints gathered from talking to customers experiencing the use of a more secure and clustered environments (thanks to Sreeni and Kedar for some of these):

What is an Domain? What is a cluster? What is an Domain Admin Server (DAS)? What is a Node Agent (NA)? What is a repository?
These links explain it in best detail:
http://docs.sun.com/app/docs/doc/819-3671/6n5si4bv7?a=view and http://blogs.sun.com/bloggerkedar/entry/concept_of_a_glassfish_domain. See also this picture.

What is a master password?
First you shouldn't need it in the "developer" profile. Otherwise, straight from the documentation: "The master password (MP) is an overall shared password. It is never used for authentication and is never transmitted over the network.". The master password is also the password for the secure keystore (NSS in the case of an "Enterprise" profile, KJS otherwise).

What is the default master password?
"changeit" (not "adminadmin")

What is the "default" profile?
$INSTALL-DIR/config/asadminenv.conf contains the default profile used during installation (the one used by the "asadmin create-domain" command).

One can upgrade from a "developer" to a "cluster" profile on the fly. Can I move back to a "developer" profile?
It's not supported but the only file touched during the upgrade is domain.xml, so restoring the original file should work.

Why would I need an "Enterprise" profile rather than the "Cluster" profile?
The "Enterprise" profile is when you need HADB (the distributed Highly-Available DataBase) and/or an NSS keystore.

Is it necessary to start the node before starting the domain ?
No, but whenever the Node Agent (NA) is started for the first time, it tries to bind with Domain Admin Server (DAS). The usual sequence is to start DAS and then NA. If the DAS is not running at the time node agent is started, it knows that it is yet to bind with DAS and it does so whenever the DAS comes up later.

Comments:

Is it possible to use enterprise profile in glassfish v2 final?

Thanks

Posted by legolas wood on août 09, 2007 at 10:44 AM CEST #

Can I upgrade from a developer profile to a Enterprise profile ? When will enterprise profile support coming into Glassfish ?

Posted by sushma on août 19, 2007 at 11:31 PM CEST #

Post a Comment:
Comments are closed for this entry.
About

This blog has moved

Alexis Moussine-Pouchkine's Weblog

GlassFish - Stay Connected

Search

Archives
« avril 2014
lun.mar.mer.jeu.ven.sam.dim.
 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
    
       
Today
Blogroll

No bookmarks in folder

News

No bookmarks in folder