CLM Server Monitoring - error during connection activation
I need monitor my CLM 5.0.1 environment deployed on a WAS 8.5.
Following the instructions of infocenter, I've enabled JMX on WAS and I'm able to connect to WAS with a jconsole.
I've installed the CLM Server Monitoring based on Tomcat on another linux server and I'm able to run all the setup steps but when I try to define a JMX connection, on csm.log I receive the following error messages
*** SSL SIGNER EXCHANGE PROMPT ***
SSL signer from target host 10.10.50.127 is not found in trust store /home/angelo/IBM/csm/server/tomcat/etc/trust.p12.
Here is the signer information (verify the digest value matches what is displayed at the server):
Subject DN: CN=clm501, OU=clm501Node01Cell, OU=clm501Node01, O=IBM, C=US
Issuer DN: CN=clm501, OU=Root Certificate, OU=clm501Node01Cell, OU=clm501Node01, O=IBM, C=US
Serial number: 6466575338109
Expires: Sun Oct 25 14:58:13 CET 2015
SHA-1 Digest: 0C:7C:1E:4F:95:93:EF:52:36:D5:68:25:05:19:09:33:7E:C8:84:0C
MD5 Digest: C7:00:5A:A7:88:EC:1D:F1:AB:C3:94:D0:56:0D:2B:CD
Subject DN: CN=clm501, OU=Root Certificate, OU=clm501Node01Cell, OU=clm501Node01, O=IBM, C=US
Issuer DN: CN=clm501, OU=Root Certificate, OU=clm501Node01Cell, OU=clm501Node01, O=IBM, C=US
Serial number: 6465613946227
Expires: Sun Oct 21 15:58:12 CEST 2029
SHA-1 Digest: 0C:7C:1E:4F:95:93:EF:52:36:D5:68:25:05:19:09:33:7E:C8:84:0C
MD5 Digest: C7:00:5A:A7:88:EC:1D:F1:AB:C3:94:D0:56:0D:2B:CD
Add signer to the trust store now? (y/n)
com.ibm.team.repository.common.TeamRepositoryException: com.ibm.websphere.management.exception.ConnectorException: ADMC0017E: Could not create an RMI connector to connect to host clm501 at port 2809
at com.ibm.team.server.monitoring.agent.jmx.service.internal.JMXConnectionService.connect(JMXConnectionService.java:432)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:60)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:37)
at java.lang.reflect.Method.invoke(Method.java:611)
at org.eclipse.soda.sat.core.internal.record.ExportProxyServiceRecord.invoke(ExportProxyServiceRecord.java:361)
at org.eclipse.soda.sat.core.internal.record.ExportProxyServiceRecord.access$0(ExportProxyServiceRecord.java:347)
at org.eclipse.soda.sat.core.internal.record.ExportProxyServiceRecord$ExportedServiceInvocationHandler.invoke(ExportProxyServiceRecord.java:56)
at com.sun.proxy.$Proxy611.connect(Unknown Source)
at com.ibm.team.server.monitoring.agent.jmx.service.internal.diagnostics.JMXConnectionRetryDiagnostic.executeTest(JMXConnectionRetryDiagnostic.java:64)
at com.ibm.team.repository.service.diagnostic.AbstractDiagnostic.execute(AbstractDiagnostic.java:147)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:60)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:37)
at java.lang.reflect.Method.invoke(Method.java:611)
at org.eclipse.soda.sat.core.internal.record.ExportProxyServiceRecord.invoke(ExportProxyServiceRecord.java:361)
at org.eclipse.soda.sat.core.internal.record.ExportProxyServiceRecord.access$0(ExportProxyServiceRecord.java:347)
at org.eclipse.soda.sat.core.internal.record.ExportProxyServiceRecord$ExportedServiceInvocationHandler.invoke(ExportProxyServiceRecord.java:56)
at com.sun.proxy.$Proxy614.execute(Unknown Source)
at com.ibm.team.repository.service.internal.diagnostic.DiagnosticExecutionService$1.run(DiagnosticExecutionService.java:244)
at java.lang.Thread.run(Thread.java:761)
Caused by: java.io.IOException: com.ibm.websphere.management.exception.ConnectorException: ADMC0017E: Could not create an RMI connector to connect to host clm501 at port 2809
at com.ibm.team.server.monitoring.agent.jmx.service.internal.was.WebSphereConnector.connect(WebSphereConnector.java:97)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:60)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:37)
at java.lang.reflect.Method.invoke(Method.java:611)
at com.ibm.team.server.monitoring.agent.jmx.service.internal.was.WebsphereMBeanServerProvider$1$1.run(WebsphereMBeanServerProvider.java:96)
at java.security.AccessController.doPrivileged(AccessController.java:362)
at javax.security.auth.Subject.doAs(Subject.java:573)
at com.ibm.websphere.security.auth.WSSubject.doAs(WSSubject.java:195)
at com.ibm.websphere.security.auth.WSSubject.doAs(WSSubject.java:152)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:60)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:37)
at java.lang.reflect.Method.invoke(Method.java:611)
at com.ibm.team.server.monitoring.agent.jmx.service.internal.was.WebsphereMBeanServerProvider$1.invoke(WebsphereMBeanServerProvider.java:87)
at com.sun.proxy.$Proxy626.connect(Unknown Source)
at com.ibm.team.server.monitoring.agent.jmx.service.internal.was.WebsphereMBeanServerProvider$WASProvider$1.run(WebsphereMBeanServerProvider.java:251)
at java.security.AccessController.doPrivileged(AccessController.java:362)
at javax.security.auth.Subject.doAs(Subject.java:573)
at com.ibm.websphere.security.auth.WSSubject.doAs(WSSubject.java:195)
at com.ibm.websphere.security.auth.WSSubject.doAs(WSSubject.java:152)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:60)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:37)
at java.lang.reflect.Method.invoke(Method.java:611)
at com.ibm.team.server.monitoring.agent.jmx.service.internal.was.WebsphereMBeanServerProvider$WASProvider.createJMXConnection(WebsphereMBeanServerProvider.java:207)
at com.ibm.team.server.monitoring.agent.jmx.service.CompositeMBeanServerProvider.createJMXConnection(CompositeMBeanServerProvider.java:59)
at com.ibm.team.server.monitoring.agent.jmx.service.internal.JMXConnectionService.connect(JMXConnectionService.java:405)
... 20 more
Caused by: com.ibm.websphere.management.exception.ConnectorException: ADMC0017E: Could not create an RMI connector to connect to host clm501 at port 2809
at com.ibm.websphere.management.AdminClientFactory.createAdminClientPrivileged(AdminClientFactory.java:777)
at com.ibm.websphere.management.AdminClientFactory.access$000(AdminClientFactory.java:126)
at com.ibm.websphere.management.AdminClientFactory$1.run(AdminClientFactory.java:209)
at com.ibm.ws.security.util.AccessController.doPrivileged(AccessController.java:63)
at com.ibm.websphere.management.AdminClientFactory.createAdminClient(AdminClientFactory.java:205)
at com.ibm.team.server.monitoring.agent.jmx.service.internal.was.WebSphereConnector.connect(WebSphereConnector.java:83)
... 47 more
Caused by: java.lang.reflect.InvocationTargetException
at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:56)
at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:39)
at java.lang.reflect.Constructor.newInstance(Constructor.java:527)
at com.ibm.websphere.management.AdminClientFactory.createAdminClientPrivileged(AdminClientFactory.java:663)
... 52 more
Caused by: com.ibm.websphere.management.exception.ConnectorNotAvailableException: javax.naming.NamingException: Error during resolve [Root exception is org.omg.CORBA.TRANSIENT: initial and forwarded IOR inaccessible vmcid: IBM minor code: E07 completed: No]
at com.ibm.ws.management.connector.rmi.RMIConnectorClient.reconnect(RMIConnectorClient.java:322)
at com.ibm.ws.management.connector.rmi.RMIConnectorClient.reconnect(RMIConnectorClient.java:230)
at com.ibm.ws.management.connector.rmi.RMIConnectorClient.<init>(RMIConnectorClient.java:138)
... 57 more
Caused by: javax.naming.NamingException: Error during resolve [Root exception is org.omg.CORBA.TRANSIENT: initial and forwarded IOR inaccessible vmcid: IBM minor code: E07 completed: No]
at com.ibm.ws.naming.jndicos.CNContextImpl.doLookup(CNContextImpl.java:1867)
at com.ibm.ws.naming.jndicos.CNContextImpl.doLookup(CNContextImpl.java:1776)
at com.ibm.ws.naming.jndicos.CNContextImpl.lookupExt(CNContextImpl.java:1433)
at com.ibm.ws.naming.jndicos.CNContextImpl.lookup(CNContextImpl.java:615)
at com.ibm.ws.naming.util.WsnInitCtx.lookup(WsnInitCtx.java:165)
at com.ibm.ws.naming.util.WsnInitCtx.lookup(WsnInitCtx.java:179)
at javax.naming.InitialContext.lookup(InitialContext.java:436)
at com.ibm.ws.management.connector.rmi.RMIConnectorClient.reconnect(RMIConnectorClient.java:314)
... 59 more
Caused by: org.omg.CORBA.TRANSIENT: initial and forwarded IOR inaccessible vmcid: IBM minor code: E07 completed: No
at com.ibm.rmi.corba.ClientDelegate.createRequest(ClientDelegate.java:1150)
at com.ibm.CORBA.iiop.ClientDelegate.createRequest(ClientDelegate.java:1384)
at com.ibm.rmi.corba.ClientDelegate.createRequest(ClientDelegate.java:1039)
at com.ibm.CORBA.iiop.ClientDelegate.createRequest(ClientDelegate.java:1350)
at com.ibm.rmi.corba.ClientDelegate.request(ClientDelegate.java:1682)
at com.ibm.CORBA.iiop.ClientDelegate.request(ClientDelegate.java:1306)
at org.omg.CORBA.portable.ObjectImpl._request(ObjectImpl.java:458)
at com.ibm.WsnOptimizedNaming._NamingContextStub.resolve_complete_info(_NamingContextStub.java:490)
at com.ibm.ws.naming.jndicos.CNContextImpl$2.run(CNContextImpl.java:2957)
at com.ibm.ws.naming.jndicos.CNContextImpl$2.run(CNContextImpl.java:2953)
at com.ibm.ws.naming.util.CommonHelpers.retry(CommonHelpers.java:801)
at com.ibm.ws.naming.jndicos.CNContextImpl.cosResolve(CNContextImpl.java:2951)
at com.ibm.ws.naming.jndicos.CNContextImpl.doLookup(CNContextImpl.java:1817)
... 66 more
Caused by: org.omg.CORBA.COMM_FAILURE: CAUGHT_EXCEPTION_WHILE_CONFIGURING_SSL_CLIENT_SOCKET: JSSL0080E: javax.net.ssl.SSLHandshakeException - The client and server could not negotiate the desired level of security. Reason: com.ibm.jsse2.util.j: PKIX path building failed: java.security.cert.CertPathBuilderException: PKIXCertPathBuilderImpl could not build a valid CertPath.; internal cause is:
java.security.cert.CertPathValidatorException: The certificate issued by CN=clm501, OU=Root Certificate, OU=clm501Node01Cell, OU=clm501Node01, O=IBM, C=US is not trusted; internal cause is:
java.security.cert.CertPathValidatorException: Certificate chaining error vmcid: 0x49421000 minor code: 70 completed: No
at com.ibm.ws.security.orbssl.WSSSLClientSocketFactoryImpl.createSSLSocket(WSSSLClientSocketFactoryImpl.java:230)
at com.ibm.ws.orbimpl.transport.WSSSLTransportConnection.createSocket(WSSSLTransportConnection.java:236)
at com.ibm.CORBA.transport.TransportConnectionBase.connect(TransportConnectionBase.java:358)
at com.ibm.ws.orbimpl.transport.WSTransport$1.run(WSTransport.java:502)
at com.ibm.ws.security.util.AccessController.doPrivileged(AccessController.java:118)
at com.ibm.ws.orbimpl.transport.WSTransport.getConnection(WSTransport.java:499)
at com.ibm.CORBA.transport.TransportBase.getConnection(TransportBase.java:182)
at com.ibm.rmi.iiop.TransportManager.get(TransportManager.java:98)
at com.ibm.rmi.iiop.GIOPImpl.getConnection(GIOPImpl.java:135)
at com.ibm.rmi.iiop.GIOPImpl.locate(GIOPImpl.java:232)
at com.ibm.rmi.corba.ClientDelegate.locate(ClientDelegate.java:1766)
at com.ibm.rmi.corba.ClientDelegate._createRequest(ClientDelegate.java:1791)
at com.ibm.rmi.corba.ClientDelegate.createRequest(ClientDelegate.java:1061)
at com.ibm.rmi.corba.ClientDelegate.createRequest(ClientDelegate.java:1146)
... 78 more
Please, can you help me to solve this problem?
Thanks in advance.
Bye.
Following the instructions of infocenter, I've enabled JMX on WAS and I'm able to connect to WAS with a jconsole.
I've installed the CLM Server Monitoring based on Tomcat on another linux server and I'm able to run all the setup steps but when I try to define a JMX connection, on csm.log I receive the following error messages
*** SSL SIGNER EXCHANGE PROMPT ***
SSL signer from target host 10.10.50.127 is not found in trust store /home/angelo/IBM/csm/server/tomcat/etc/trust.p12.
Here is the signer information (verify the digest value matches what is displayed at the server):
Subject DN: CN=clm501, OU=clm501Node01Cell, OU=clm501Node01, O=IBM, C=US
Issuer DN: CN=clm501, OU=Root Certificate, OU=clm501Node01Cell, OU=clm501Node01, O=IBM, C=US
Serial number: 6466575338109
Expires: Sun Oct 25 14:58:13 CET 2015
SHA-1 Digest: 0C:7C:1E:4F:95:93:EF:52:36:D5:68:25:05:19:09:33:7E:C8:84:0C
MD5 Digest: C7:00:5A:A7:88:EC:1D:F1:AB:C3:94:D0:56:0D:2B:CD
Subject DN: CN=clm501, OU=Root Certificate, OU=clm501Node01Cell, OU=clm501Node01, O=IBM, C=US
Issuer DN: CN=clm501, OU=Root Certificate, OU=clm501Node01Cell, OU=clm501Node01, O=IBM, C=US
Serial number: 6465613946227
Expires: Sun Oct 21 15:58:12 CEST 2029
SHA-1 Digest: 0C:7C:1E:4F:95:93:EF:52:36:D5:68:25:05:19:09:33:7E:C8:84:0C
MD5 Digest: C7:00:5A:A7:88:EC:1D:F1:AB:C3:94:D0:56:0D:2B:CD
Add signer to the trust store now? (y/n)
com.ibm.team.repository.common.TeamRepositoryException: com.ibm.websphere.management.exception.ConnectorException: ADMC0017E: Could not create an RMI connector to connect to host clm501 at port 2809
at com.ibm.team.server.monitoring.agent.jmx.service.internal.JMXConnectionService.connect(JMXConnectionService.java:432)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:60)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:37)
at java.lang.reflect.Method.invoke(Method.java:611)
at org.eclipse.soda.sat.core.internal.record.ExportProxyServiceRecord.invoke(ExportProxyServiceRecord.java:361)
at org.eclipse.soda.sat.core.internal.record.ExportProxyServiceRecord.access$0(ExportProxyServiceRecord.java:347)
at org.eclipse.soda.sat.core.internal.record.ExportProxyServiceRecord$ExportedServiceInvocationHandler.invoke(ExportProxyServiceRecord.java:56)
at com.sun.proxy.$Proxy611.connect(Unknown Source)
at com.ibm.team.server.monitoring.agent.jmx.service.internal.diagnostics.JMXConnectionRetryDiagnostic.executeTest(JMXConnectionRetryDiagnostic.java:64)
at com.ibm.team.repository.service.diagnostic.AbstractDiagnostic.execute(AbstractDiagnostic.java:147)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:60)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:37)
at java.lang.reflect.Method.invoke(Method.java:611)
at org.eclipse.soda.sat.core.internal.record.ExportProxyServiceRecord.invoke(ExportProxyServiceRecord.java:361)
at org.eclipse.soda.sat.core.internal.record.ExportProxyServiceRecord.access$0(ExportProxyServiceRecord.java:347)
at org.eclipse.soda.sat.core.internal.record.ExportProxyServiceRecord$ExportedServiceInvocationHandler.invoke(ExportProxyServiceRecord.java:56)
at com.sun.proxy.$Proxy614.execute(Unknown Source)
at com.ibm.team.repository.service.internal.diagnostic.DiagnosticExecutionService$1.run(DiagnosticExecutionService.java:244)
at java.lang.Thread.run(Thread.java:761)
Caused by: java.io.IOException: com.ibm.websphere.management.exception.ConnectorException: ADMC0017E: Could not create an RMI connector to connect to host clm501 at port 2809
at com.ibm.team.server.monitoring.agent.jmx.service.internal.was.WebSphereConnector.connect(WebSphereConnector.java:97)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:60)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:37)
at java.lang.reflect.Method.invoke(Method.java:611)
at com.ibm.team.server.monitoring.agent.jmx.service.internal.was.WebsphereMBeanServerProvider$1$1.run(WebsphereMBeanServerProvider.java:96)
at java.security.AccessController.doPrivileged(AccessController.java:362)
at javax.security.auth.Subject.doAs(Subject.java:573)
at com.ibm.websphere.security.auth.WSSubject.doAs(WSSubject.java:195)
at com.ibm.websphere.security.auth.WSSubject.doAs(WSSubject.java:152)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:60)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:37)
at java.lang.reflect.Method.invoke(Method.java:611)
at com.ibm.team.server.monitoring.agent.jmx.service.internal.was.WebsphereMBeanServerProvider$1.invoke(WebsphereMBeanServerProvider.java:87)
at com.sun.proxy.$Proxy626.connect(Unknown Source)
at com.ibm.team.server.monitoring.agent.jmx.service.internal.was.WebsphereMBeanServerProvider$WASProvider$1.run(WebsphereMBeanServerProvider.java:251)
at java.security.AccessController.doPrivileged(AccessController.java:362)
at javax.security.auth.Subject.doAs(Subject.java:573)
at com.ibm.websphere.security.auth.WSSubject.doAs(WSSubject.java:195)
at com.ibm.websphere.security.auth.WSSubject.doAs(WSSubject.java:152)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:60)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:37)
at java.lang.reflect.Method.invoke(Method.java:611)
at com.ibm.team.server.monitoring.agent.jmx.service.internal.was.WebsphereMBeanServerProvider$WASProvider.createJMXConnection(WebsphereMBeanServerProvider.java:207)
at com.ibm.team.server.monitoring.agent.jmx.service.CompositeMBeanServerProvider.createJMXConnection(CompositeMBeanServerProvider.java:59)
at com.ibm.team.server.monitoring.agent.jmx.service.internal.JMXConnectionService.connect(JMXConnectionService.java:405)
... 20 more
Caused by: com.ibm.websphere.management.exception.ConnectorException: ADMC0017E: Could not create an RMI connector to connect to host clm501 at port 2809
at com.ibm.websphere.management.AdminClientFactory.createAdminClientPrivileged(AdminClientFactory.java:777)
at com.ibm.websphere.management.AdminClientFactory.access$000(AdminClientFactory.java:126)
at com.ibm.websphere.management.AdminClientFactory$1.run(AdminClientFactory.java:209)
at com.ibm.ws.security.util.AccessController.doPrivileged(AccessController.java:63)
at com.ibm.websphere.management.AdminClientFactory.createAdminClient(AdminClientFactory.java:205)
at com.ibm.team.server.monitoring.agent.jmx.service.internal.was.WebSphereConnector.connect(WebSphereConnector.java:83)
... 47 more
Caused by: java.lang.reflect.InvocationTargetException
at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:56)
at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:39)
at java.lang.reflect.Constructor.newInstance(Constructor.java:527)
at com.ibm.websphere.management.AdminClientFactory.createAdminClientPrivileged(AdminClientFactory.java:663)
... 52 more
Caused by: com.ibm.websphere.management.exception.ConnectorNotAvailableException: javax.naming.NamingException: Error during resolve [Root exception is org.omg.CORBA.TRANSIENT: initial and forwarded IOR inaccessible vmcid: IBM minor code: E07 completed: No]
at com.ibm.ws.management.connector.rmi.RMIConnectorClient.reconnect(RMIConnectorClient.java:322)
at com.ibm.ws.management.connector.rmi.RMIConnectorClient.reconnect(RMIConnectorClient.java:230)
at com.ibm.ws.management.connector.rmi.RMIConnectorClient.<init>(RMIConnectorClient.java:138)
... 57 more
Caused by: javax.naming.NamingException: Error during resolve [Root exception is org.omg.CORBA.TRANSIENT: initial and forwarded IOR inaccessible vmcid: IBM minor code: E07 completed: No]
at com.ibm.ws.naming.jndicos.CNContextImpl.doLookup(CNContextImpl.java:1867)
at com.ibm.ws.naming.jndicos.CNContextImpl.doLookup(CNContextImpl.java:1776)
at com.ibm.ws.naming.jndicos.CNContextImpl.lookupExt(CNContextImpl.java:1433)
at com.ibm.ws.naming.jndicos.CNContextImpl.lookup(CNContextImpl.java:615)
at com.ibm.ws.naming.util.WsnInitCtx.lookup(WsnInitCtx.java:165)
at com.ibm.ws.naming.util.WsnInitCtx.lookup(WsnInitCtx.java:179)
at javax.naming.InitialContext.lookup(InitialContext.java:436)
at com.ibm.ws.management.connector.rmi.RMIConnectorClient.reconnect(RMIConnectorClient.java:314)
... 59 more
Caused by: org.omg.CORBA.TRANSIENT: initial and forwarded IOR inaccessible vmcid: IBM minor code: E07 completed: No
at com.ibm.rmi.corba.ClientDelegate.createRequest(ClientDelegate.java:1150)
at com.ibm.CORBA.iiop.ClientDelegate.createRequest(ClientDelegate.java:1384)
at com.ibm.rmi.corba.ClientDelegate.createRequest(ClientDelegate.java:1039)
at com.ibm.CORBA.iiop.ClientDelegate.createRequest(ClientDelegate.java:1350)
at com.ibm.rmi.corba.ClientDelegate.request(ClientDelegate.java:1682)
at com.ibm.CORBA.iiop.ClientDelegate.request(ClientDelegate.java:1306)
at org.omg.CORBA.portable.ObjectImpl._request(ObjectImpl.java:458)
at com.ibm.WsnOptimizedNaming._NamingContextStub.resolve_complete_info(_NamingContextStub.java:490)
at com.ibm.ws.naming.jndicos.CNContextImpl$2.run(CNContextImpl.java:2957)
at com.ibm.ws.naming.jndicos.CNContextImpl$2.run(CNContextImpl.java:2953)
at com.ibm.ws.naming.util.CommonHelpers.retry(CommonHelpers.java:801)
at com.ibm.ws.naming.jndicos.CNContextImpl.cosResolve(CNContextImpl.java:2951)
at com.ibm.ws.naming.jndicos.CNContextImpl.doLookup(CNContextImpl.java:1817)
... 66 more
Caused by: org.omg.CORBA.COMM_FAILURE: CAUGHT_EXCEPTION_WHILE_CONFIGURING_SSL_CLIENT_SOCKET: JSSL0080E: javax.net.ssl.SSLHandshakeException - The client and server could not negotiate the desired level of security. Reason: com.ibm.jsse2.util.j: PKIX path building failed: java.security.cert.CertPathBuilderException: PKIXCertPathBuilderImpl could not build a valid CertPath.; internal cause is:
java.security.cert.CertPathValidatorException: The certificate issued by CN=clm501, OU=Root Certificate, OU=clm501Node01Cell, OU=clm501Node01, O=IBM, C=US is not trusted; internal cause is:
java.security.cert.CertPathValidatorException: Certificate chaining error vmcid: 0x49421000 minor code: 70 completed: No
at com.ibm.ws.security.orbssl.WSSSLClientSocketFactoryImpl.createSSLSocket(WSSSLClientSocketFactoryImpl.java:230)
at com.ibm.ws.orbimpl.transport.WSSSLTransportConnection.createSocket(WSSSLTransportConnection.java:236)
at com.ibm.CORBA.transport.TransportConnectionBase.connect(TransportConnectionBase.java:358)
at com.ibm.ws.orbimpl.transport.WSTransport$1.run(WSTransport.java:502)
at com.ibm.ws.security.util.AccessController.doPrivileged(AccessController.java:118)
at com.ibm.ws.orbimpl.transport.WSTransport.getConnection(WSTransport.java:499)
at com.ibm.CORBA.transport.TransportBase.getConnection(TransportBase.java:182)
at com.ibm.rmi.iiop.TransportManager.get(TransportManager.java:98)
at com.ibm.rmi.iiop.GIOPImpl.getConnection(GIOPImpl.java:135)
at com.ibm.rmi.iiop.GIOPImpl.locate(GIOPImpl.java:232)
at com.ibm.rmi.corba.ClientDelegate.locate(ClientDelegate.java:1766)
at com.ibm.rmi.corba.ClientDelegate._createRequest(ClientDelegate.java:1791)
at com.ibm.rmi.corba.ClientDelegate.createRequest(ClientDelegate.java:1061)
at com.ibm.rmi.corba.ClientDelegate.createRequest(ClientDelegate.java:1146)
... 78 more
Please, can you help me to solve this problem?
Thanks in advance.
Bye.
Accepted answer
Based on the error message, the trust store of Tomcat does not have the signer certificate from the WAS server, hence it does not "trust" WAS and no SSL connections can be established. To resolve it, you need to export the root certificate from WAS and import into the Tomcat trust store. The steps are similar to what's described in the below documents - the path is not the same so you need to adjust to fit, and you can see the path to the Tomcat trust store in the error message.
https://jazz.net/help-dev/clm/topic/com.ibm.rational.rrdi.admin.doc/topics/t_export_sign_cert.html
https://jazz.net/help-dev/clm/topic/com.ibm.rational.rrdi.admin.doc/topics/t_int_ssl_reportsrv_jazz.html
https://jazz.net/help-dev/clm/topic/com.ibm.rational.rrdi.admin.doc/topics/t_export_sign_cert.html
https://jazz.net/help-dev/clm/topic/com.ibm.rational.rrdi.admin.doc/topics/t_int_ssl_reportsrv_jazz.html