Why won't this command stop WAS?
WAS version 8.5.5.11 running CLM 6.0.4
From this directory:
C:\IBM\Websphere\AppServer\profiles\AppSrv01\bin
I'm running this command:
stopServer.bat server1 -user **** -password ***
It used to stop WAS cleanly, now WebSphere just gets hung up and I have to kill the Java processes using Task Manager in order to stop the service. Any ideas as to why the command no longer stops WAS cleanly?
One answer
I'm pretty sure if you remove the Windows service, you should be able to stop the process by the command. The message basically says that the WASService.exe command cannot attach to the WAS process (java.exe) due to certificate issues. The two processes are likely using different trust stores, and you will need to import the certificate from the WAS profile keystore, into the default trust store of the bundled JVM, particularly when you have replaced the WAS profile certificate. I haven't got time to tested it to give you the exact steps though.
https://www.ibm.com/support/knowledgecenter/en/SSAW57_8.5.5/com.ibm.websphere.nd.doc/ae/rins_wasservice.html
Comments
I've seen this on interactive shutdown when a new SSL certificate was installed in the DefaultKeyStore. The stopServer offers the ability to add the certificate "on the spot" and if the certificate is confirmed, then future stopServer commands will not be hindered.
i.e. run the stopServer.sh in a console, accept the certificate, run the startServer
That's right, and I have seen it before. That's why I suggested removing the Windows service first - otherwise the task will be delegated to the Windows service (WASService.exe).
Will simply uninstalling and reinstalling the service solve this? Or do I need to also import a certificate? It is not prompting me to add a cert "on the spot", so can you tell me which keystore I add the certificate to?
Uninstalling the service does not necessarily "resolve" the issue, but it makes it interactive and easier to work with. If you don't get prompt to import the certificate on the spot, you can try to follow the instructions below.
https://www.ibm.com/support/knowledgecenter/en/SSYGQH_5.5.0/admin/install/t_exchange_keys_network.html
https://www.ibm.com/support/knowledgecenter/en/SSKTXQ_9.0.0/admin/config/config_gw_ssl_interm_ca_clus.html
(The truststore/keystore location was mentioned in the error message that you posted)
Hello is there a final resolution?
I found the solution, remove it from windows services, start it without windows service and then try to stop it it will prompt to accept the certificate and after that you can hook it back in a windows service and should work.
Comments
Donald Nong
Sep 07 '17, 10:11 p.m.What's the output of the command?
Matthew Clark
Sep 07 '17, 10:29 p.m.Running the command initially produces this response:
ADMU0116I: Tool information is being logged in file
C:\IBM\Websphere\AppServer\profiles\AppSrv01\logs\server1\stopServer.
log
ADMU7702I: Because server1 is registered to run as a Windows Service, the
request to stop this server will be completed by stopping the
associated Windows Service.
ADMU0116I: Tool information is being logged in file
C:\IBM\Websphere\AppServer\profiles\AppSrv01\logs\server1\stopServer.
log
ADMU0128I: Starting tool with the AppSrv01 profile
ADMU3100I: Reading configuration for server: server1
Matthew Clark
Sep 07 '17, 10:30 p.m.Matthew Clark
Sep 07 '17, 10:31 p.m.oh wow! I can finally upload image attachments!!
I need to attached the stopServer.log, not a screenshot of it.
Matthew Clark
Sep 07 '17, 10:40 p.m.