Issue while starting managed server

[satish]

One more doubt before proceeding with password change.

I have edited the boot.properties with username and password but it didnt get encrypted after starting the failed oacore_server3

can we copy the boot.properties file of another oacore_server which is running to this failed oacore_server3,can we do it in EBS?

[ErmanArslansOracleBlog]

No.

Please reset the weblogic admin password and retry..
reset the password using the link that I sent you in my previous update..

[satish]

Thanks for prompt response,will do it and update here

After changing the password of weblogic and updating it in nodemanager.It was given in note id as below

For the first time, AdminServer has to be stopped from the Admin console.why is it so?any specific reason?

[ErmanArslansOracleBlog]

"For the first time, AdminServer has to be stopped from the Admin console" -Where is it written?

[satish]

Thanks for the update erman,It was written here How To Change or Reset The WebLogic Administration Password In 12.2 E-Business Suite (Doc ID 1385751.1)

https://docs.oracle.com/cd/E26401_01/doc.122/e22953.pdf--changing weblogic password step 6

[ErmanArslansOracleBlog]

Aha.. Yes. There is a specific reason. It is probably because after the command "weblogic.security.utils.AdminAccount", related AD script can not properly stop the Weblogic admin server.. As the password change is a big thing, we need a guaranteed graceful stop there.. I think that's it reasons.

similarly, as you may already see, you also start the weblogic admin server using command line, in the previous step.. (naturally, it can not be started from weblogic console, as it hosts the weblogic console..)

[satish]

Thanks for the support erman.

[satish]

Dear erman,

we have reproduced the issue in test instance and we could the same error in test as well

This is the actual issue

One of my colleague has deleted the security folder from $EBS_DOMAIN_HOME/domains/EBS_domain_SUPPDB/servers/oacore_server3

and then started oacore_server3 using admanagedsrvctl.sh start oacore_server3.Then he faced the error.
He is able to see the security folder and subfolder created again but however boot.properties file was not created and causing the error messages

can you help in this case.we will go for weblogic password change in last resort

Thank you

[ErmanArslansOracleBlog]

What happens when you copy the boot.properties from another managed server's security directory ?

[satish]

Thanks for the update erman,I tried that but didnt work and the error was changed to below one

<28 Mar, 2018 4:32:37 PM IST> <Notice> <Security> <BEA-090082> <Security initializing using security realm myrealm.>
<28 Mar, 2018 4:32:37 PM IST> <Critical> <Security> <BEA-090402> <Authentication denied: Boot identity not valid; The user name and/or password from the boot identity file (boot.properties) is not valid. The boot identity may have been changed since the boot identity file was created. Please edit and update the boot identity file with the proper values of username and password. The first time the updated boot identity file is used to start the server, these new values are encrypted.>
<28 Mar, 2018 4:32:37 PM IST> <Critical> <WebLogicServer> <BEA-000386> <Server subsystem failed. Reason: weblogic.security.SecurityInitializationException: Authentication denied: Boot identity not valid; The user name and/or password from the boot identity file (boot.properties) is not valid. The boot identity may have been changed since the boot identity file was created. Please edit and update the boot identity file with the proper values of username and password. The first time the updated boot identity file is used to start the server, these new values are encrypted.
weblogic.security.SecurityInitializationException: Authentication denied: Boot identity not valid; The user name and/or password from the boot identity file (boot.properties) is not valid. The boot identity may have been changed since the boot identity file was created. Please edit and update the boot identity file with the proper values of username and password. The first time the updated boot identity file is used to start the server, these new values are encrypted.
        at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.doBootAuthorization(CommonSecurityServiceManagerDelegateImpl.java:960)
        at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.initialize(CommonSecurityServiceManagerDelegateImpl.java:1054)
        at weblogic.security.service.SecurityServiceManager.initialize(SecurityServiceManager.java:888)
        at weblogic.security.SecurityService.start(SecurityService.java:141)
        at weblogic.t3.srvr.SubsystemRequest.run(SubsystemRequest.java:64)
        Truncated. see log file for complete stacktrace
Caused By: javax.security.auth.login.FailedLoginException: [Security:090303]Authentication Failed: User weblogic weblogic.security.providers.authentication.LDAPAtnDelegateException: [Security:090295]caught unexpected exception
        at weblogic.security.providers.authentication.LDAPAtnLoginModuleImpl.login(LDAPAtnLoginModuleImpl.java:251)
        at com.bea.common.security.internal.service.LoginModuleWrapper$1.run(LoginModuleWrapper.java:110)
        at java.security.AccessController.doPrivileged(Native Method)
        at com.bea.common.security.internal.service.LoginModuleWrapper.login(LoginModuleWrapper.java:106)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        Truncated. see log file for complete stacktrace
>

[ErmanArslansOracleBlog]

Okay. what happens when you do the following? ->

Use weblogic.security.Encrypt to encyrpt the weblogic admin password.
Then take those encyrpted values and create the boot.properties files under the security folder with that encprypted values..

Example usage: /FMW_Home/user_projects/domains/your_domain>java weblogic.security.Encrypt weblogic

Example usage:
cd [domain_home]/bin
./setDomainEnv.sh
java weblogic.security.Encrypt <password>  | for ex: java weblogic.security.Encrypt weblogic123

[ErmanArslansOracleBlog]

I mean -> encyrpting the password manually..

[satish]

Thanks erman for the update,I have done but didnt help.

we have brought down the oacore_server1  and then copied the boot.properties to oacore_server3 which then worked.

earlier we have copied the file when the server was up and running and so it didnt work.

Not sure what is the difference

Thanks for all your support

[ErmanArslansOracleBlog]

Good news.