Sunday, October 5, 2025

Weblogic 14.1.2 start managed server with Admin Channel

 

HOWTO


See also 


Git

Keep domain wide administration port disabled





Configure custom Admin Channel on Admin  server 





Configure custom Admin Channel on managed server 





Start managed server with Admin Channel

  • startManagedWebLogic.sh managed_server_name admin_url (UNIX)


dave@dave:/app/domains/dave_domain/bin$ ./startManagedWebLogic.sh dave-managed https://localhost:9002
.
.
JAVA Memory arguments: -Xms256m -Xmx512m -XX:CompileThreshold=8000
.
CLASSPATH=/home/app/weblogic/wlserver/../oracle_common/modules/com.oracle.webservices.wls.wls-jaxrpc.jar::/home/app/weblogic/wlserver/server/lib/weblogic.jar:/home/app/weblogic/wlserver/../oracle_common/modules/thirdparty/ant-contrib-1.0b3.jar:/home/app/weblogic/wlserver/modules/features/oracle.wls.common.nodemanager.jar:/home/app/weblogic/wlserver/common/derby/lib/derbytools.jar:/home/app/weblogic/wlserver/common/derby/lib/derbyclient.jar:/home/app/weblogic/wlserver/common/derby/lib/derby.jar:/home/app/weblogic/wlserver/common/derby/lib/derbyshared.jar
.
PATH=/app/domains/dave_domain/bin:/home/app/weblogic/wlserver/server/bin:/home/app/weblogic/wlserver/../oracle_common/modules/thirdparty/org.apache.ant/apache-ant/bin:/usr/lib/jvm/jdk-21.0.5-oracle-x64/bin:/usr/lib/jvm/jdk-21.0.5-oracle-x64/bin:/app/weblogic/oracle_common/modules/thirdparty/apache-maven_bundle/3.6.1.0.0/apache-maven-3.6.1//bin:/app/weblogic/wit/imagetool/bin:/app/weblogic-deploy/bin/:/usr/java/jdk-21/bin:/opt/google:/opt/jmc/jmc-8.3.1_linux-x64/JDK_Mission_Control:/app/weblogic/oracle_common/modules/thirdparty/apache-maven_bundle/3.6.1.0.0/apache-maven-3.6.1//bin:/app/weblogic/wit/imagetool/bin:/app/weblogic-deploy/bin/:/home/dave/.local/bin:/home/dave/bin:/usr/local/bin:/usr/local/sbin:/usr/bin:/usr/sbin:/var/lib/snapd/snap/bin
.
***************************************************
*  To start WebLogic Server, use a username and   *
*  password assigned to an admin-level user.  For *
*  server administration, use the WebLogic Server *
*  console at http://hostname:port/console        *
***************************************************
Starting WLS with line:
/usr/lib/jvm/jdk-21.0.5-oracle-x64/bin/java -server   -Xms256m -Xmx512m -XX:CompileThreshold=8000 -cp /home/app/weblogic/wlserver/server/lib/weblogic-launcher.jar -Dlaunch.use.env.classpath=true -Dweblogic.Name=dave-managed -Djava.security.policy=/home/app/weblogic/wlserver/server/lib/weblogic.policy  -Djava.system.class.loader=com.oracle.classloader.weblogic.LaunchClassLoader  -javaagent:/home/app/weblogic/wlserver/server/lib/debugpatch-agent.jar -da -Dwls.home=/home/app/weblogic/wlserver/server -Dweblogic.home=/home/app/weblogic/wlserver/server   -Dweblogic.management.server=https://localhost:9002   weblogic.Server
[0.009s][warning][cds] Archived non-system classes are disabled because the java.system.class.loader property is specified (value = "com.oracle.classloader.weblogic.LaunchClassLoader"). To use archived non-system classes, this property must not be set
<Oct 5, 2025, 1:54:28 PM Central European Summer Time> <Info> <Default> <BEA-000000> <JceConfig is unknown> 
<Oct 5, 2025, 1:54:28 PM Central European Summer Time> <Info> <Default> <BEA-000000> <FIPS compliant operation not available for configuration type OTHER> 
<Oct 5, 2025, 1:54:28 PM Central European Summer Time> <Info> <Default> <BEA-000000> <JceConfig is in non-FIPS mode> 
<Oct 5, 2025, 1:54:28 PM Central European Summer Time> <Info> <WebLogicServer> <BEA-000377> <Starting WebLogic Server with Java HotSpot(TM) 64-Bit Server VM Version 21.0.5+9-LTS-239 from Oracle Corporation.> 
<Oct 5, 2025, 1:54:29 PM Central European Summer Time> <Info> <Security> <BEA-090065> <Getting boot identity from user.> 
Enter username to boot WebLogic server:weblogic    
Enter password to boot WebLogic server:
<Oct 5, 2025, 1:54:40 PM Central European Summer Time> <Warning> <Security> <BEA-090960> <The server's SSL configuration is not available. There will potentially be SSL handshake failures.> 
<Oct 5, 2025, 1:54:40 PM Central European Summer Time> <Warning> <Security> <BEA-090924> <JSSE has been selected by default, since the SSLMBean is not available.> 
<Oct 5, 2025, 1:54:40 PM Central European Summer Time> <Info> <Security> <BEA-090908> <Using the default WebLogic SSL Wildcard Hostname Verifier implementation.> 
<Oct 5, 2025, 1:54:41 PM Central European Summer Time> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the pkcs12 keystore file /app/domains/dave_domain/security/DemoTrust.p12.> 
<Oct 5, 2025, 1:54:41 PM Central European Summer Time> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the jks keystore file /home/app/weblogic/wlserver/server/lib/DemoTrust.jks.> 
<Oct 5, 2025, 1:54:41 PM Central European Summer Time> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the jks keystore file /usr/lib/jvm/jdk-21.0.5-oracle-x64/lib/security/cacerts.> 
<Oct 5, 2025, 1:54:41 PM Central European Summer Time> <Info> <Management> <BEA-141107> <Version: WebLogic Server 14.1.2.0.0  Tue Nov 26 02:40:45 GMT 2024 2171472> 
<Oct 5, 2025, 1:54:41 PM Central European Summer Time> <Info> <Management> <BEA-141340> <Server starting with ProductionModeEnabled=false> 
<Oct 5, 2025, 1:54:41 PM Central European Summer Time> <Info> <Management> <BEA-141341> <Server starting with SecureModeEnabled=false> 
<Oct 5, 2025, 1:54:42 PM Central European Summer Time> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to STARTING.> 
<Oct 5, 2025, 1:54:42 PM Central European Summer Time> <Info> <WorkManager> <BEA-002900> <Initializing self-tuning thread pool.> 
<Oct 5, 2025, 1:54:42,345 PM Central European Summer Time> <Notice> <Security> <BEA-090171> <Loading the identity certificate and private key stored under the alias DemoIdentity from the pkcs12 keystore file /app/domains/dave_domain/security/DemoIdentity.p12.> 
<Oct 5, 2025, 1:54:42,371 PM Central European Summer Time> <Notice> <LoggingService> <BEA-320400> <The log file /home/app/domains/dave_domain/servers/dave-managed/logs/dave-managed.log will be rotated. Reopen the log file if tailing has stopped. This can happen on some platforms, such as Windows.> 
<Oct 5, 2025, 1:54:42,371 PM Central European Summer Time> <Notice> <LoggingService> <BEA-320401> <The log file has been rotated to /home/app/domains/dave_domain/servers/dave-managed/logs/dave-managed.log00001. Log messages will continue to be logged in /home/app/domains/dave_domain/servers/dave-managed/logs/dave-managed.log.> 
<Oct 5, 2025, 1:54:42,380 PM Central European Summer Time> <Notice> <Log Management> <BEA-170019> <The server log file weblogic.logging.FileStreamHandler instance=303355457
Current log file=/home/app/domains/dave_domain/servers/dave-managed/logs/dave-managed.log
Rotation dir=/home/app/domains/dave_domain/servers/dave-managed/logs
 is opened. All server side log events will be written to this file.> 
<Oct 5, 2025, 1:54:42,410 PM Central European Summer Time> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the pkcs12 keystore file /app/domains/dave_domain/security/DemoTrust.p12.> 
<Oct 5, 2025, 1:54:42,447 PM Central European Summer Time> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the jks keystore file /home/app/weblogic/wlserver/server/lib/DemoTrust.jks.> 
<Oct 5, 2025, 1:54:42,448 PM Central European Summer Time> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the jks keystore file /usr/lib/jvm/jdk-21.0.5-oracle-x64/lib/security/cacerts.> 
<Oct 5, 2025, 1:54:42,465 PM Central European Summer Time> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the pkcs12 keystore file /app/domains/dave_domain/security/DemoTrust.p12.> 
<Oct 5, 2025, 1:54:42,495 PM Central European Summer Time> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the jks keystore file /home/app/weblogic/wlserver/server/lib/DemoTrust.jks.> 
<Oct 5, 2025, 1:54:42,501 PM Central European Summer Time> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the jks keystore file /usr/lib/jvm/jdk-21.0.5-oracle-x64/lib/security/cacerts.> 
<Oct 5, 2025, 1:54:44,453 PM Central European Summer Time> <Notice> <Security> <BEA-090946> <Security pre-initializing using security realm: myrealm> 
<Oct 5, 2025, 1:54:44,753 PM Central European Summer Time> <Notice> <Security> <BEA-090947> <Security post-initializing using security realm: myrealm> 
<Oct 5, 2025, 1:54:46,072 PM Central European Summer Time> <Notice> <Security> <BEA-090082> <Security initialized using administrative security realm: myrealm> 
<Oct 5, 2025, 1:54:46,213 PM Central European Summer Time> <Notice> <JMX> <BEA-149512> <JMX Connector Server started at service:jmx:iiop://localhost:9200/jndi/weblogic.management.mbeanservers.runtime.> 
<Oct 5, 2025, 1:54:48,057 PM Central European Summer Time> <Warning> <Server> <BEA-002611> <The hostname "localhost", maps to multiple IP addresses: 127.0.0.1, 0:0:0:0:0:0:0:1.> 
<Oct 5, 2025, 1:54:48,057 PM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "dave-managed-admin" is now listening on 127.0.0.1:9200 for protocols admin, ldaps, https.> 
<Oct 5, 2025, 1:54:48,079 PM Central European Summer Time> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to STANDBY.> 
<Oct 5, 2025, 1:54:48,079 PM Central European Summer Time> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to STARTING.> 
<Oct 5, 2025, 1:54:48,124 PM Central European Summer Time> <Notice> <Log Management> <BEA-170036> <The Logging monitoring service timer has started to check for logged message counts every 30 seconds.> 
<Oct 5, 2025, 1:54:48,274 PM Central European Summer Time> <Notice> <Log Management> <BEA-170027> <The server has successfully established a connection with the Domain level Diagnostic Service.> 
<Oct 5, 2025, 1:54:48,394 PM Central European Summer Time> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to ADMIN.> 
<Oct 5, 2025, 1:54:48,459 PM Central European Summer Time> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to RESUMING.> 
<Oct 5, 2025, 1:54:48,522 PM Central European Summer Time> <Warning> <Server> <BEA-002611> <The hostname "dave", maps to multiple IP addresses: 192.168.0.115, 192.168.122.1, 192.168.49.1, 172.17.0.1, fe80:0:0:0:b1c0:455e:93e9:1ac4%2, 2a02:8308:a:5b00:0:0:0:bd2e, 2a02:8308:a:5b00:7090:cdc2:f15e:f0f0.> 
<Oct 5, 2025, 1:54:48,524 PM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "Default[2]" is now listening on 2a02:8308:a:5b00:7090:cdc2:f15e:f0f0%enp0s31f6:9001 for protocols iiop, t3, ldap, snmp, http.> 
<Oct 5, 2025, 1:54:48,525 PM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "Default[7]" is now listening on 127.0.0.1:9001 for protocols iiop, t3, ldap, snmp, http.> 
<Oct 5, 2025, 1:54:48,526 PM Central European Summer Time> <Notice> <WebLogicServer> <BEA-000332> <Started the WebLogic Server Managed Server "dave-managed" for domain "dave_domain" running in development mode.> 
<Oct 5, 2025, 1:54:48,525 PM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "Default[4]" is now listening on 192.168.49.1:9001 for protocols iiop, t3, ldap, snmp, http.> 
<Oct 5, 2025, 1:54:48,529 PM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "Default[6]" is now listening on 0:0:0:0:0:0:0:1%lo:9001 for protocols iiop, t3, ldap, snmp, http.> 
<Oct 5, 2025, 1:54:48,532 PM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "Default[1]" is now listening on 2a02:8308:a:5b00:0:0:0:bd2e%enp0s31f6:9001 for protocols iiop, t3, ldap, snmp, http.> 
<Oct 5, 2025, 1:54:48,533 PM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "Default" is now listening on 192.168.0.115:9001 for protocols iiop, t3, ldap, snmp, http.> 
<Oct 5, 2025, 1:54:48,537 PM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "Default[3]" is now listening on 172.17.0.1:9001 for protocols iiop, t3, ldap, snmp, http.> 
<Oct 5, 2025, 1:54:48,538 PM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "Default[5]" is now listening on 192.168.122.1:9001 for protocols iiop, t3, ldap, snmp, http.> 
<Oct 5, 2025, 1:54:48,640 PM Central European Summer Time> <Notice> <WebLogicServer> <BEA-000360> <The server started in RUNNING mode.> 
<Oct 5, 2025, 1:54:48,653 PM Central European Summer Time> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to RUNNING.> 



Runtime monitoring in Remote Console

config.xml with managed server

<server>
    <name>AdminServer</name>
    <ssl>
      <name>AdminServer</name>
    </ssl>
    <listen-address></listen-address>
    <network-access-point>
      <name>Admin</name>
      <protocol>admin</protocol>
      <listen-address>localhost</listen-address>
      <listen-port>9002</listen-port>
      <hostname-verification-ignored>true</hostname-verification-ignored>
    </network-access-point>
    <web-service>
      <name>AdminServer</name>
      <web-service-persistence>
        <name>AdminServer</name>
        <web-service-logical-store>
          <name>WseeStore</name>
          <persistence-strategy>LOCAL_ACCESS_ONLY</persistence-strategy>
          <request-buffering-queue-jndi-name>weblogic.wsee.BufferedRequestQueue</request-buffering-queue-jndi-name>
          <response-buffering-queue-jndi-name>weblogic.wsee.BufferedResponseQueue</response-buffering-queue-jndi-name>
        </web-service-logical-store>
      </web-service-persistence>
    </web-service>
  </server>
  <server>
    <name>dave-managed</name>
    <ssl>
      <enabled>false</enabled>
    </ssl>
    <listen-port>9001</listen-port>
    <listen-address xsi:nil="true"></listen-address>
    <network-access-point>
      <name>dave-managed-admin</name>
      <protocol>admin</protocol>
      <listen-address>localhost</listen-address>
      <listen-port>9200</listen-port>
    </network-access-point>
  </server>

Create domain on Weblogic 14.1.2 with Oracle JDK 21

HOWTO


GitHub


Check current version 

dave@dave:~$ cd /app/weblogic/wlserver/server/lib
dave@dave:/app/weblogic/wlserver/server/lib$ java -cp weblogic.jar weblogic.version

WebLogic Server 14.1.1.0.0  Thu Mar 26 03:15:09 GMT 2020 2000885

Use 'weblogic.version -verbose' to get subsystem information

Use 'weblogic.utils.Versions' to get version information for all modules


Instal Oracle JDK 21 

Verify that a certified JDK already exists on your system; the installer requires a certified JDK. See Oracle Fusion Middleware Supported System Configurations. To download the JDK, see About JDK Requirements for an Oracle Fusion Middleware Installation.


dave@dave:~$ java -version
java version "21.0.5" 2024-10-15 LTS
Java(TM) SE Runtime Environment (build 21.0.5+9-LTS-239)
Java HotSpot(TM) 64-Bit Server VM (build 21.0.5+9-LTS-239, mixed mode, sharing)

Install Weblogic 14.1.2



Unzip 
$ unzip -l  ~/Downloads/V1045131-01.zip 
Archive:  /home/dave/Downloads/V1045131-01.zip
  Length      Date    Time    Name
---------  ---------- -----   ----
686826498  12-05-2024 23:27   fmw_14.1.2.0.0_wls.jar
---------                     -------
686826498                     1 file

Install
dave@dave:/app$ java -jar fmw_14.1.2.0.0_wls.jar

            
Launcher log file is /tmp/OraInstall2025-10-05_09-05-18AM/launcher2025-10-05_09-05-18AM.log.
Extracting the installer . . . . . . Done
Checking if CPU speed is above 300 MHz.   Actual 2599.988 MHz    Passed
Checking monitor: must be configured to display at least 256 colors.   Actual 16777216    Passed
Checking swap space: must be greater than 512 MB.   Actual 8191 MB    Passed
Checking temp space: must be greater than 300 MB.   Actual 7234 MB    Passed
Preparing to launch the Oracle Universal Installer from /tmp/OraInstall2025-10-05_09-05-18AM
Log: /tmp/OraInstall2025-10-05_09-05-18AM/install2025-10-05_09-05-18AM.log
Logs successfully copied to /home/dave/oraInventory/logs.







Start admin server



dave@dave:/app/domains/dave_domain$ ./startWebLogic.sh 
.
.
JAVA Memory arguments: -Xms256m -Xmx512m -XX:CompileThreshold=8000
.
CLASSPATH=/home/app/weblogic/wlserver/../oracle_common/modules/com.oracle.webservices.wls.wls-jaxrpc.jar::/home/app/weblogic/wlserver/server/lib/weblogic.jar:/home/app/weblogic/wlserver/../oracle_common/modules/thirdparty/ant-contrib-1.0b3.jar:/home/app/weblogic/wlserver/modules/features/oracle.wls.common.nodemanager.jar::/home/app/weblogic/wlserver/common/derby/lib/derbynet.jar:/home/app/weblogic/wlserver/common/derby/lib/derbytools.jar:/home/app/weblogic/wlserver/common/derby/lib/derbyclient.jar:/home/app/weblogic/wlserver/common/derby/lib/derby.jar:/home/app/weblogic/wlserver/common/derby/lib/derbyshared.jar:/home/app/weblogic/wlserver/common/derby/lib/derbyoptionaltools.jar
.
PATH=/app/domains/dave_domain/bin:/home/app/weblogic/wlserver/server/bin:/home/app/weblogic/wlserver/../oracle_common/modules/thirdparty/org.apache.ant/apache-ant/bin:/usr/lib/jvm/jdk-21.0.5-oracle-x64/bin:/usr/lib/jvm/jdk-21.0.5-oracle-x64/bin:/app/weblogic/oracle_common/modules/thirdparty/apache-maven_bundle/3.6.1.0.0/apache-maven-3.6.1//bin:/app/weblogic/wit/imagetool/bin:/app/weblogic-deploy/bin/:/usr/java/jdk-21/bin:/opt/google:/opt/jmc/jmc-8.3.1_linux-x64/JDK_Mission_Control:/app/weblogic/oracle_common/modules/thirdparty/apache-maven_bundle/3.6.1.0.0/apache-maven-3.6.1//bin:/app/weblogic/wit/imagetool/bin:/app/weblogic-deploy/bin/:/home/dave/.local/bin:/home/dave/bin:/usr/local/bin:/usr/local/sbin:/usr/bin:/usr/sbin:/var/lib/snapd/snap/bin
.
***************************************************
*  To start WebLogic Server, use a username and   *
*  password assigned to an admin-level user.  For *
*  server administration, use the WebLogic Server *
*  console at http://hostname:port/console        *
***************************************************
Starting WLS with line:
/usr/lib/jvm/jdk-21.0.5-oracle-x64/bin/java -server   -Xms256m -Xmx512m -XX:CompileThreshold=8000 -cp /home/app/weblogic/wlserver/server/lib/weblogic-launcher.jar -Dlaunch.use.env.classpath=true -Dweblogic.Name=AdminServer -Djava.security.policy=/home/app/weblogic/wlserver/server/lib/weblogic.policy  -Djava.system.class.loader=com.oracle.classloader.weblogic.LaunchClassLoader  -javaagent:/home/app/weblogic/wlserver/server/lib/debugpatch-agent.jar -da -Dwls.home=/home/app/weblogic/wlserver/server -Dweblogic.home=/home/app/weblogic/wlserver/server      weblogic.Server
[0.016s][warning][cds] Archived non-system classes are disabled because the java.system.class.loader property is specified (value = "com.oracle.classloader.weblogic.LaunchClassLoader"). To use archived non-system classes, this property must not be set
<Oct 5, 2025, 9:13:26 AM Central European Summer Time> <Info> <Default> <BEA-000000> <JceConfig is unknown> 
<Oct 5, 2025, 9:13:26 AM Central European Summer Time> <Info> <Default> <BEA-000000> <FIPS compliant operation not available for configuration type OTHER> 
<Oct 5, 2025, 9:13:26 AM Central European Summer Time> <Info> <Default> <BEA-000000> <JceConfig is in non-FIPS mode> 
<Oct 5, 2025, 9:13:27 AM Central European Summer Time> <Info> <WebLogicServer> <BEA-000377> <Starting WebLogic Server with Java HotSpot(TM) 64-Bit Server VM Version 21.0.5+9-LTS-239 from Oracle Corporation.> 
<Oct 5, 2025, 9:13:27 AM Central European Summer Time> <Info> <Management> <BEA-141107> <Version: WebLogic Server 14.1.2.0.0  Tue Nov 26 02:40:45 GMT 2024 2171472> 
<Oct 5, 2025, 9:13:28 AM Central European Summer Time> <Info> <Management> <BEA-141340> <Server starting with ProductionModeEnabled=false> 
<Oct 5, 2025, 9:13:28 AM Central European Summer Time> <Info> <Management> <BEA-141341> <Server starting with SecureModeEnabled=false> 
<Oct 5, 2025, 9:13:28 AM Central European Summer Time> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to STARTING.> 
<Oct 5, 2025, 9:13:28 AM Central European Summer Time> <Info> <WorkManager> <BEA-002900> <Initializing self-tuning thread pool.> 
<Oct 5, 2025, 9:13:28,654 AM Central European Summer Time> <Notice> <Log Management> <BEA-170019> <The server log file weblogic.logging.FileStreamHandler instance=1415466851
Current log file=/home/app/domains/dave_domain/servers/AdminServer/logs/AdminServer.log
Rotation dir=/home/app/domains/dave_domain/servers/AdminServer/logs
 is opened. All server side log events will be written to this file.> 
<Oct 5, 2025, 9:13:28,783 AM Central European Summer Time> <Notice> <Security> <BEA-090946> <Security pre-initializing using security realm: myrealm> 
<Oct 5, 2025, 9:13:29,295 AM Central European Summer Time> <Notice> <Security> <BEA-090947> <Security post-initializing using security realm: myrealm> 
<Oct 5, 2025, 9:13:29,985 AM Central European Summer Time> <Notice> <Security> <BEA-090082> <Security initialized using administrative security realm: myrealm> 
<Oct 5, 2025, 9:13:30,235 AM Central European Summer Time> <Notice> <JMX> <BEA-149512> <JMX Connector Server started at service:jmx:iiop://192.168.0.115:9002/jndi/weblogic.management.mbeanservers.runtime.> 
<Oct 5, 2025, 9:13:30,544 AM Central European Summer Time> <Notice> <JMX> <BEA-149512> <JMX Connector Server started at service:jmx:iiop://192.168.0.115:9002/jndi/weblogic.management.mbeanservers.domainruntime.> 
<Oct 5, 2025, 9:13:30,696 AM Central European Summer Time> <Notice> <JMX> <BEA-149512> <JMX Connector Server started at service:jmx:iiop://192.168.0.115:9002/jndi/weblogic.management.mbeanservers.edit.> 
<Oct 5, 2025, 9:13:32,359 AM Central European Summer Time> <Notice> <Security> <BEA-090171> <Loading the identity certificate and private key stored under the alias DemoIdentity from the pkcs12 keystore file /app/domains/dave_domain/security/DemoIdentity.p12.> 
<Oct 5, 2025, 9:13:32,463 AM Central European Summer Time> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the pkcs12 keystore file /app/domains/dave_domain/security/DemoTrust.p12.> 
<Oct 5, 2025, 9:13:32,484 AM Central European Summer Time> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the jks keystore file /home/app/weblogic/wlserver/server/lib/DemoTrust.jks.> 
<Oct 5, 2025, 9:13:32,486 AM Central European Summer Time> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the jks keystore file /usr/lib/jvm/jdk-21.0.5-oracle-x64/lib/security/cacerts.> 
<Oct 5, 2025, 9:13:32,498 AM Central European Summer Time> <Warning> <Server> <BEA-002611> <The hostname "dave", maps to multiple IP addresses: 192.168.0.115, 192.168.122.1, 192.168.49.1, 172.17.0.1, fe80:0:0:0:b1c0:455e:93e9:1ac4%2, 2a02:8308:a:5b00:0:0:0:bd2e, 2a02:8308:a:5b00:7090:cdc2:f15e:f0f0.> 
<Oct 5, 2025, 9:13:32,501 AM Central European Summer Time> <Warning> <Server> <BEA-002611> <The hostname "localhost", maps to multiple IP addresses: 127.0.0.1, 0:0:0:0:0:0:0:1.> 
<Oct 5, 2025, 9:13:32,502 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "DefaultAdministration" is now listening on 192.168.0.115:9002 for protocols admin, ldaps, https.> 
<Oct 5, 2025, 9:13:32,504 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "DefaultAdministration[1]" is now listening on 2a02:8308:a:5b00:0:0:0:bd2e%enp0s31f6:9002 for protocols admin, ldaps, https.> 
<Oct 5, 2025, 9:13:32,505 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "DefaultAdministration[2]" is now listening on 2a02:8308:a:5b00:7090:cdc2:f15e:f0f0%enp0s31f6:9002 for protocols admin, ldaps, https.> 
<Oct 5, 2025, 9:13:32,505 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "DefaultAdministration[3]" is now listening on 172.17.0.1:9002 for protocols admin, ldaps, https.> 
<Oct 5, 2025, 9:13:32,506 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "DefaultAdministration[4]" is now listening on 192.168.49.1:9002 for protocols admin, ldaps, https.> 
<Oct 5, 2025, 9:13:32,507 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "DefaultAdministration[5]" is now listening on 192.168.122.1:9002 for protocols admin, ldaps, https.> 
<Oct 5, 2025, 9:13:32,508 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "DefaultAdministration[6]" is now listening on 0:0:0:0:0:0:0:1%lo:9002 for protocols admin, ldaps, https.> 
<Oct 5, 2025, 9:13:32,508 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "DefaultAdministration[7]" is now listening on 127.0.0.1:9002 for protocols admin, ldaps, https.> 
<Oct 5, 2025, 9:13:32,526 AM Central European Summer Time> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to STANDBY.> 
<Oct 5, 2025, 9:13:32,527 AM Central European Summer Time> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to STARTING.> 
<Oct 5, 2025, 9:13:32,585 AM Central European Summer Time> <Notice> <Log Management> <BEA-170036> <The Logging monitoring service timer has started to check for logged message counts every 30 seconds.> 
<Oct 5, 2025, 9:13:34,817 AM Central European Summer Time> <Notice> <Log Management> <BEA-170027> <The server has successfully established a connection with the Domain level Diagnostic Service.> 
<Oct 5, 2025, 9:13:34,894 AM Central European Summer Time> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to ADMIN.> 
Oct 05, 2025 9:13:34 AM weblogic.wsee.jaxws.provider.state.persistence.LogicalStoreStateManagerProvider <init>
INFO: Constructing LogicalStoreStateManagerProvider@1716684370, providerName=WseeStore, storeName=WseeStore]
Oct 05, 2025 9:13:34 AM weblogic.wsee.runtime.JMSStoreRoutableIDMapper$LogicalStoreInfo <init>
INFO: Constructing LogicalStoreInfo@966438498 [name=WseeStore]
Oct 05, 2025 9:13:34 AM weblogic.wsee.runtime.JMSStoreRoutableIDMapper registerForJMSDestinationAvailability
INFO: pname=null JMSDestinationAvailabilityHelper register for weblogic.wsee.BufferedRequestQueue:weblogic.wsee.BufferedRequestQueue
Oct 05, 2025 9:13:34 AM weblogic.wsee.runtime.JMSStoreRoutableIDMapper registerForJMSDestinationAvailability
INFO: pname=null JMSDestinationAvailabilityHelper register for weblogic.wsee.BufferedResponseQueue:weblogic.wsee.BufferedResponseQueue
<Oct 5, 2025, 9:13:34,967 AM Central European Summer Time> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to RESUMING.> 
<Oct 5, 2025, 9:13:35,031 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "DefaultSecure[2]" is now listening on 2a02:8308:a:5b00:7090:cdc2:f15e:f0f0%enp0s31f6:7002 for protocols iiops, t3s, ldaps, https.> 
<Oct 5, 2025, 9:13:35,032 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "Default[2]" is now listening on 2a02:8308:a:5b00:7090:cdc2:f15e:f0f0%enp0s31f6:7001 for protocols iiop, t3, ldap, snmp, http.> 
<Oct 5, 2025, 9:13:35,033 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "DefaultSecure[7]" is now listening on 127.0.0.1:7002 for protocols iiops, t3s, ldaps, https.> 
<Oct 5, 2025, 9:13:35,033 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "Default[7]" is now listening on 127.0.0.1:7001 for protocols iiop, t3, ldap, snmp, http.> 
<Oct 5, 2025, 9:13:35,034 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "Default[1]" is now listening on 2a02:8308:a:5b00:0:0:0:bd2e%enp0s31f6:7001 for protocols iiop, t3, ldap, snmp, http.> 
<Oct 5, 2025, 9:13:35,035 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "DefaultSecure[1]" is now listening on 2a02:8308:a:5b00:0:0:0:bd2e%enp0s31f6:7002 for protocols iiops, t3s, ldaps, https.> 
<Oct 5, 2025, 9:13:35,035 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "DefaultSecure[5]" is now listening on 192.168.122.1:7002 for protocols iiops, t3s, ldaps, https.> 
<Oct 5, 2025, 9:13:35,036 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "DefaultSecure" is now listening on 192.168.0.115:7002 for protocols iiops, t3s, ldaps, https.> 
<Oct 5, 2025, 9:13:35,037 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "Default" is now listening on 192.168.0.115:7001 for protocols iiop, t3, ldap, snmp, http.> 
<Oct 5, 2025, 9:13:35,037 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "DefaultSecure[6]" is now listening on 0:0:0:0:0:0:0:1%lo:7002 for protocols iiops, t3s, ldaps, https.> 
<Oct 5, 2025, 9:13:35,037 AM Central European Summer Time> <Notice> <WebLogicServer> <BEA-000331> <Started the WebLogic Server Administration Server "AdminServer" for domain "dave_domain" running in development mode.> 
<Oct 5, 2025, 9:13:35,038 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "Default[4]" is now listening on 192.168.49.1:7001 for protocols iiop, t3, ldap, snmp, http.> 
<Oct 5, 2025, 9:13:35,039 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "Default[6]" is now listening on 0:0:0:0:0:0:0:1%lo:7001 for protocols iiop, t3, ldap, snmp, http.> 
<Oct 5, 2025, 9:13:35,039 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "DefaultSecure[4]" is now listening on 192.168.49.1:7002 for protocols iiops, t3s, ldaps, https.> 
<Oct 5, 2025, 9:13:35,040 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "Default[3]" is now listening on 172.17.0.1:7001 for protocols iiop, t3, ldap, snmp, http.> 
<Oct 5, 2025, 9:13:35,041 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "DefaultSecure[3]" is now listening on 172.17.0.1:7002 for protocols iiops, t3s, ldaps, https.> 
<Oct 5, 2025, 9:13:35,043 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "Default[5]" is now listening on 192.168.122.1:7001 for protocols iiop, t3, ldap, snmp, http.> 
<Oct 5, 2025, 9:13:35,118 AM Central European Summer Time> <Notice> <WebLogicServer> <BEA-000360> <The server started in RUNNING mode.> 
<Oct 5, 2025, 9:13:35,130 AM Central European Summer Time> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to RUNNING.> 
Oct 05, 2025 9:13:35 AM weblogic.wsee.runtime.JMSStoreRoutableIDMapper getDDMemberInfosFromDestinationChange
INFO: add PhysicalStoreInfo PhysicalStoreInfo [_physStoreName=WseeJaxwsFileStore, _serverName=AdminServer]
Oct 05, 2025 9:13:35 AM weblogic.wsee.runtime.JMSStoreRoutableIDMapper getDDMemberInfosFromDestinationChange
INFO: add PhysicalStoreInfo PhysicalStoreInfo [_physStoreName=WseeJaxwsFileStore, _serverName=AdminServer]
Oct 05, 2025 9:13:35 AM weblogic.wsee.runtime.JMSStoreRoutableIDMapper onDestinationsAvailable
INFO: Destination Available processing logicalStore: WseeStore for PhysicalStoreInfo [_physStoreName=WseeJaxwsFileStore, _serverName=AdminServer]
Oct 05, 2025 9:13:35 AM weblogic.wsee.runtime.JMSStoreRoutableIDMapper onDestinationsAvailable
INFO: Destination Available processing logicalStore: WseeStore for PhysicalStoreInfo [_physStoreName=WseeJaxwsFileStore, _serverName=AdminServer]
Oct 05, 2025 9:13:35 AM weblogic.wsee.runtime.JMSStoreRoutableIDMapper$LogicalStoreInfo addPhysicalStore
INFO: Added physical store for server AdminServer PhysicalStore='WseeJaxwsFileStore' Current physical store count: 1
Oct 05, 2025 9:13:35 AM weblogic.wsee.runtime.JMSStoreRoutableIDMapper notifyServerSetListeners
INFO: 2 can not find  ServerSetListener




Config.xml


dave@dave:/app$ cat  /app/domains/dave_domain/config/config.xml 
<?xml version="1.0" encoding="UTF-8"?>
<domain xsi:schemaLocation="http://xmlns.oracle.com/weblogic/security/wls http://xmlns.oracle.com/weblogic/security/wls/1.0/wls.xsd http://xmlns.oracle.com/weblogic/domain http://xmlns.oracle.com/weblogic/1.0/domain.xsd http://xmlns.oracle.com/weblogic/security http://xmlns.oracle.com/weblogic/1.0/security.xsd http://xmlns.oracle.com/weblogic/security/xacml http://xmlns.oracle.com/weblogic/security/xacml/1.0/xacml.xsd" xmlns="http://xmlns.oracle.com/weblogic/domain" xmlns:sec="http://xmlns.oracle.com/weblogic/security" xmlns:wls="http://xmlns.oracle.com/weblogic/security/wls" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
  <name>dave_domain</name>
  <domain-version>14.1.2.0.0</domain-version>
  <security-configuration xmlns:xacml="http://xmlns.oracle.com/weblogic/security/xacml" xmlns:pas="http://xmlns.oracle.com/weblogic/security/providers/passwordvalidator">
    <name>dave_domain</name>
    <realm>
      <sec:authentication-provider xsi:type="wls:default-authenticatorType">
        <sec:name>DefaultAuthenticator</sec:name>
      </sec:authentication-provider>
      <sec:authentication-provider xsi:type="wls:default-identity-asserterType">
        <sec:name>DefaultIdentityAsserter</sec:name>
        <sec:active-type>AuthenticatedUser</sec:active-type>
        <sec:active-type>weblogic-jwt-token</sec:active-type>
      </sec:authentication-provider>
      <sec:role-mapper xsi:type="xacml:xacml-role-mapperType">
        <sec:name>XACMLRoleMapper</sec:name>
      </sec:role-mapper>
      <sec:authorizer xsi:type="xacml:xacml-authorizerType">
        <sec:name>XACMLAuthorizer</sec:name>
      </sec:authorizer>
      <sec:adjudicator xsi:type="wls:default-adjudicatorType">
        <sec:name>DefaultAdjudicator</sec:name>
      </sec:adjudicator>
      <sec:credential-mapper xsi:type="wls:default-credential-mapperType">
        <sec:name>DefaultCredentialMapper</sec:name>
      </sec:credential-mapper>
      <sec:cert-path-provider xsi:type="wls:web-logic-cert-path-providerType">
        <sec:name>WebLogicCertPathProvider</sec:name>
      </sec:cert-path-provider>
      <sec:cert-path-builder>WebLogicCertPathProvider</sec:cert-path-builder>
      <sec:name>myrealm</sec:name>
      <sec:password-validator xsi:type="pas:system-password-validatorType">
        <sec:name>SystemPasswordValidator</sec:name>
        <pas:min-password-length>8</pas:min-password-length>
        <pas:min-numeric-or-special-characters>1</pas:min-numeric-or-special-characters>
      </sec:password-validator>
    </realm>
    <default-realm>myrealm</default-realm>
    <credential-encrypted>{AES256}wLRjNyZr9HwkpIvZnt7prR1F0F58X1w55Rt0o2cUG1TsYT/fB5G3umETxFA8Ha30NEvPnXmPhKzVp7xAYVmfNe6jg4gGugEmZqQ7uvi2xR0BbXo60GxPSRkuVCCvHCa+</credential-encrypted>
    <node-manager-username>weblogic</node-manager-username>
    <node-manager-password-encrypted>{AES256}4uKCZCiWlVnsqKKDIE0PuTPZ3AaqVPaW5D8mJFw2zzw=</node-manager-password-encrypted>
  </security-configuration>
  <server>
    <name>AdminServer</name>
    <ssl>
      <name>AdminServer</name>
    </ssl>
    <listen-address/>
    <web-service>
      <name>AdminServer</name>
      <web-service-persistence>
        <name>AdminServer</name>
        <web-service-logical-store>
          <name>WseeStore</name>
          <persistence-strategy>LOCAL_ACCESS_ONLY</persistence-strategy>
          <request-buffering-queue-jndi-name>weblogic.wsee.BufferedRequestQueue</request-buffering-queue-jndi-name>
          <response-buffering-queue-jndi-name>weblogic.wsee.BufferedResponseQueue</response-buffering-queue-jndi-name>
        </web-service-logical-store>
      </web-service-persistence>
    </web-service>
  </server>
  <embedded-ldap>
    <name>dave_domain</name>
    <credential-encrypted>{AES256}DEcZ24F0BPrv+9aNTYyBzUj2M0VZ7cMcL0ifWbTli8/0XHtLR4NNVmfFTxlejbEO</credential-encrypted>
  </embedded-ldap>
  <administration-port-enabled>true</administration-port-enabled>
  <configuration-version>14.1.2.0.0</configuration-version>
  <app-deployment>
    <name>state-management-provider-memory-rar</name>
    <target>AdminServer</target>
    <module-type>rar</module-type>
    <source-path>/home/app/weblogic/oracle_common/modules/com.oracle.state-management.state-management-provider-memory-rar-impl.rar</source-path>
    <staging-mode>nostage</staging-mode>
  </app-deployment>
  <jms-server>
    <name>WseeJaxwsJmsServer</name>
    <target>AdminServer</target>
    <persistent-store>WseeJaxwsFileStore</persistent-store>
  </jms-server>
  <jms-server>
    <name>WseeJmsServer</name>
    <target>AdminServer</target>
    <persistent-store>WseeFileStore</persistent-store>
  </jms-server>
  <jms-server>
    <name>WseeSoapjmsJmsServer</name>
    <target>AdminServer</target>
    <persistent-store>WseeSoapjmsFileStore</persistent-store>
  </jms-server>
  <self-tuning>
    <work-manager>
      <name>weblogic.wsee.jaxws.mdb.DispatchPolicy</name>
      <target>AdminServer</target>
    </work-manager>
    <work-manager>
      <name>weblogic.wsee.mdb.DispatchPolicy</name>
      <target>AdminServer</target>
    </work-manager>
  </self-tuning>
  <file-store>
    <name>WseeJaxwsFileStore</name>
    <directory>WseeJaxwsFileStore</directory>
    <target>AdminServer</target>
  </file-store>
  <file-store>
    <name>WseeFileStore</name>
    <directory>WseeFileStore</directory>
    <target>AdminServer</target>
  </file-store>
  <file-store>
    <name>WseeSoapjmsFileStore</name>
    <directory>WseeSoapjmsFileStore</directory>
    <target>AdminServer</target>
  </file-store>
  <jms-system-resource>
    <name>WseeJaxwsJmsModule</name>
    <target>AdminServer</target>
    <sub-deployment>
      <name>WseeJaxwsJmsServerSub</name>
      <target>WseeJaxwsJmsServer</target>
    </sub-deployment>
    <descriptor-file-name>jms/wseejaxwsjmsmodule-jms.xml</descriptor-file-name>
  </jms-system-resource>
  <jms-system-resource>
    <name>WseeJmsModule</name>
    <target>AdminServer</target>
    <sub-deployment>
      <name>BEA_JMS_MODULE_SUBDEPLOYMENT_WSEEJMSServer</name>
      <target>WseeJmsServer</target>
    </sub-deployment>
    <descriptor-file-name>jms/wseejmsmodule-jms.xml</descriptor-file-name>
  </jms-system-resource>
  <jms-system-resource>
    <name>WseeSoapjmsJmsModule</name>
    <target>AdminServer</target>
    <sub-deployment>
      <name>WseeSoapjmsJmsServerSub</name>
      <target>WseeSoapjmsJmsServer</target>
    </sub-deployment>
    <descriptor-file-name>jms/wseesoapjmsmodule-jms.xml</descriptor-file-name>
  </jms-system-resource>
  <admin-server-name>AdminServer</admin-server-name>
  <saf-agent>
    <name>ReliableWseeJaxwsSAFAgent</name>
    <target>AdminServer</target>
    <store>WseeJaxwsFileStore</store>
  </saf-agent>
  <saf-agent>
    <name>ReliableWseeSAFAgent</name>
    <target>AdminServer</target>
    <store>WseeFileStore</store>
  </saf-agent>
  <ssl-enabled>true</ssl-enabled>
</domain>

Keystores - PKCS12 or JKS


 For PKCS12 keystores, keytool does not support different keystore and key passwords.
 Secure domain - use SSL Keystores Obtain properly signed certificate via CSR 

JKS

keytool -genkeypair -alias server_cert -keyalg RSA -sigalg SHA384withRSA -keysize 3072 -validity 365 -dname "CN=server.avitek.com,OU=Support,O=Avitek,L=Bangalore,ST=Karnataka,C=IN" -storetype JKS -storepass Welcome1 -keypass Welcome1 -keystore identity.jks

keytool -export -alias server_cert -file root.cer -keystore identity.jks -storepass Welcome1

keytool -import -v -noprompt -trustcacerts -alias root.cert -file root.cer -storetype JKS -keystore trust.jks -storepass Welcome1

PKCS12

keytool -genkeypair -alias server_cert -keyalg RSA -sigalg SHA384withRSA -keysize 3072 -validity 365 -dname "CN=server.avitek.com,OU=Support,O=Avitek,L=Bangalore,ST=Karnataka,C=KA" -storepass Welcome1 -keypass Welcome1 -keystore identity.p12

keytool -export -alias server_cert -file root.cer -keystore identity.p12 -storepass Welcome1

keytool -import -v -noprompt -trustcacerts -alias root.cert -file root.cer -keystore trust.p12 -storepass Welcome1

CA truststore

DemoTrustKeyStorePassPhrase

dave@dave:/app/weblogic$ keytool -list -keystore ./wlserver/server/lib/DemoTrust.jks
Enter keystore password:  

*****************  WARNING WARNING WARNING  *****************
* The integrity of the information stored in your keystore  *
* has NOT been verified!  In order to verify its integrity, *
* you must provide your keystore password.                  *
*****************  WARNING WARNING WARNING  *****************

Keystore type: JKS
Keystore provider: SUN

Your keystore contains 1 entry

wlscertgenca, Dec 2, 2012, trustedCertEntry, 
Certificate fingerprint (SHA-256): 57:10:7C:2C:B3:07:B9:8B:F8:FD:EB:69:99:36:53:03:7A:E1:E7:CB:D3:7A:E7:CF:30:F3:B3:ED:F3:42:0A:D7

DemoIdentity

DOMAIN_HOME/security/DemoCerts.props 



dave@dave:/app/weblogic$ find /app/domains/dave_domain/ -name DemoIdentity.p12 
/app/domains/dave_domain/security/DemoIdentity.p12
dave@dave:/app/weblogic$ keytool -list -keystore /app/domains/dave_domain/security/DemoIdentity.p12
Enter keystore password:  

*****************  WARNING WARNING WARNING  *****************
* The integrity of the information stored in your keystore  *
* has NOT been verified!  In order to verify its integrity, *
* you must provide your keystore password.                  *
*****************  WARNING WARNING WARNING  *****************

Keystore type: PKCS12
Keystore provider: SUN

Your keystore contains 1 entry

demoidentity, Oct 5, 2025, PrivateKeyEntry, 
Certificate chain length: 0

Demo keystore passwords
dave@dave:/app/weblogic$ find /app/domains/dave_domain/ -name DemoCerts.props 
/app/domains/dave_domain/security/DemoCerts.props
dave@dave:/app/weblogic$ cat /app/domains/dave_domain/security/DemoCerts.props
#WebLogic User Configuration File; 2
#Sun Oct 05 09:10:56 CEST 2025
weblogic.security.DemoCACertificate=/app/domains/dave_domain/security/democacert.der
weblogic.security.DemoCAPrivateKey=/app/domains/dave_domain/security/democakey.der
weblogic.security.DemoCAPrivateKeyPassPhrase={AES256}ElpnZY1KC6DxJmXy8hPfnOr5rOh90wycyg+6HTTfRsUI2uIb6kN9xi3uBK4sUNIthKhrRa9namNKw7VkXB3U2Q\=\=
weblogic.security.DemoIdentityKeyStore=/app/domains/dave_domain/security/DemoIdentity.p12
weblogic.security.DemoIdentityKeyStoreAlias=DemoIdentity
weblogic.security.DemoIdentityKeyStorePassPhrase={AES256}IT7turw8Kw4BXgQhGuCWuNVPqIoIiF12XI/diC6BDO92Yl0OESNs/ptJnNK3vumyixx7U3C9Lz0n1B5TF3K8rw\=\=
weblogic.security.DemoIdentityKeyStoreType=pkcs12
weblogic.security.DemoIdentityPrivateKeyPassPhrase={AES256}gOybATaMsEKFwffWsu9F5ALMrldWt+O0MEd0peGxiBTOI5r3mIzyn8UU0DF9nxBtQa+t2JwwxJpbgfEXBSoYvg\=\=
weblogic.security.DemoTrustKeyStore=/app/domains/dave_domain/security/DemoTrust.p12
weblogic.security.DemoTrustKeyStorePassPhrase={AES256}EJ0dKjKO2dq3Pei1y0AbCoRuNHfKX26IDLZjcI4DsqXSu/zwSCjFYFKXvdJleRtH
weblogic.security.DemoTrustKeyStoreType=pkcs12

Open console https://dave:9002/console 









 Download remote console

Download RPM  file 


dave@dave:/app$ sudo dnf install weblogic-remote-console-2.4.17-linux.rpm
Updating and loading repositories:
 RPM Fusion for Fedora 41 - Nonfree - Updates                                                                                                                                                                                                                                         100% |   6.9 KiB/s |   8.4 KiB |  00m01s
 RPM Fusion for Fedora 41 - Nonfree - Steam                                                                                                                                                                                                                                           100% |   7.4 KiB/s |   8.3 KiB |  00m01s
 Fedora 41 - x86_64                                                                                                                                                                                                                                                                   100% |  25.3 KiB/s |  26.4 KiB |  00m01s
 RPM Fusion for Fedora 41 - Free - Updates                                                                                                                                                                                                                                            100% |   9.0 KiB/s |   8.3 KiB |  00m01s
 RPM Fusion for Fedora 41 - Nonfree - NVIDIA Driver                                                                                                                                                                                                                                   100% |  10.2 KiB/s |   8.6 KiB |  00m01s
 Hashicorp Stable - x86_64                                                                                                                                                                                                                                                            100% |   2.1 KiB/s |   1.5 KiB |  00m01s
 Google Cloud SDK                                                                                                                                                                                                                                                                     100% |   2.0 KiB/s |   1.4 KiB |  00m01s
 Kubernetes                                                                                                                                                                                                                                                                           100% |   2.6 KiB/s |   1.8 KiB |  00m01s
 google-chrome                                                                                                                                                                                                                                                                        100% |   2.1 KiB/s |   1.3 KiB |  00m01s
 Visual Studio Code                                                                                                                                                                                                                                                                   100% |   3.0 KiB/s |   1.5 KiB |  00m01s
 Fedora 41 - x86_64 - Updates                                                                                                                                                                                                                                                         100% |  11.1 KiB/s |   8.7 KiB |  00m01s
 Copr repo for PyCharm owned by phracek                                                                                                                                                                                                                                               100% |   4.4 KiB/s |   2.1 KiB |  00m00s
Repositories loaded.
Package                                                                                                        Arch                   Version                                                                                                        Repository                                                           Size
Installing:
 weblogic-remote-console                                                                                       x86_64                 2.4.17-1                                                                                                       @commandline                                                    453.6 MiB

Transaction Summary:
 Installing:         1 package

Total size of inbound packages is 180 MiB. Need to download 0 B.
After this operation, 454 MiB extra will be used (install 454 MiB, remove 0 B).
Is this ok [y/N]: y
Running transaction
[1/3] Verify package files                                                                                                                                                                                                                                                            100% |   1.0   B/s |   1.0   B |  00m01s
[2/3] Prepare transaction                                                                                                                                                                                                                                                             100% |   2.0   B/s |   1.0   B |  00m00s
[3/3] Installing weblogic-remote-console-0:2.4.17-1.x86_64                                                                                                                                                                                                                            100% |  27.6 MiB/s | 453.6 MiB |  00m16s
>>> Running %post scriptlet: weblogic-remote-console-0:2.4.17-1.x86_64                                                                                                                                                                                                                                                        
>>> Finished %post scriptlet: weblogic-remote-console-0:2.4.17-1.x86_64                                                                                                                                                                                                                                                       
>>> Scriptlet output:                                                                                                                                                                                                                                                                                                         
>>> update-alternatives is /sbin/update-alternatives                                                                                                                                                                                                                                                                          
>>>                                                                                                                                                                                                                                                                                                                           
Warning: skipped OpenPGP checks for 1 package from repository: @commandline
Complete!



Depending on setup use default 7001 port or Admin channel port 9002


Connected to Admin Console 






Configure admin channel

 





<Oct 5, 2025, 10:35:37,609 AM Central European Summer Time> <Notice> <Security> <BEA-090171> <Loading the identity certificate and private key stored under the alias DemoIdentity from the pkcs12 keystore file /app/domains/dave_domain/security/DemoIdentity.p12.> 
<Oct 5, 2025, 10:35:37,650 AM Central European Summer Time> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the pkcs12 keystore file /app/domains/dave_domain/security/DemoTrust.p12.> 
<Oct 5, 2025, 10:35:37,663 AM Central European Summer Time> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the jks keystore file /home/app/weblogic/wlserver/server/lib/DemoTrust.jks.> 
<Oct 5, 2025, 10:35:37,664 AM Central European Summer Time> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the jks keystore file /usr/lib/jvm/jdk-21.0.5-oracle-x64/lib/security/cacerts.> 
<Oct 5, 2025, 10:35:37,671 AM Central European Summer Time> <Notice> <Server> <BEA-002613> <Channel "Admin" is now listening on 127.0.0.1:9002 for protocols admin, ldaps, https.> 

config.xml with separately configured admin channel

<server>
    <name>AdminServer</name>
    <ssl>
      <name>AdminServer</name>
    </ssl>
    <listen-address></listen-address>
    <network-access-point>
      <name>Admin</name>
      <protocol>admin</protocol>
      <listen-address>localhost</listen-address>
      <listen-port>9002</listen-port>
      <hostname-verification-ignored>true</hostname-verification-ignored>
    </network-access-point>
    <web-service>
      <name>AdminServer</name>
      <web-service-persistence>
        <name>AdminServer</name>
        <web-service-logical-store>
          <name>WseeStore</name>
          <persistence-strategy>LOCAL_ACCESS_ONLY</persistence-strategy>
          <request-buffering-queue-jndi-name>weblogic.wsee.BufferedRequestQueue</request-buffering-queue-jndi-name>
          <response-buffering-queue-jndi-name>weblogic.wsee.BufferedResponseQueue</response-buffering-queue-jndi-name>
        </web-service-logical-store>
      </web-service-persistence>
    </web-service>
  </server>
  <embedded-ldap>
    <name>dave_domain</name>
    <credential-encrypted>{AES256}DEcZ24F0BPrv+9aNTYyBzUj2M0VZ7cMcL0ifWbTli8/0XHtLR4NNVmfFTxlejbEO</credential-encrypted>
  </embedded-ldap>
  <administration-port-enabled>false</administration-port-enabled>
  <configuration-version>14.1.2.0.0</configuration-version>

Sunday, August 3, 2025

OCP k8s CRC local monitoring

 HOWTO



Add memory 


$ crc stop
INFO Stopping kubelet and all containers...       
INFO Stopping the instance, this may take a few minutes... 
Stopped the instance
dave@fedora:~/Downloads$ crc config set memory 14336
Changes to configuration property 'memory' are only applied when the CRC instance is started.
If you already have a running CRC instance, then for this configuration change to take effect, stop the CRC instance with 'crc stop' and restart it with 'crc start'.
dave@fedora:~/Downloads$  crc config set enable-cluster-monitoring true
Successfully configured enable-cluster-monitoring to true
dave@fedora:~/Downloads$ crc start

Monitoring 


dave@fedora:~/Downloads$ oc config use-context crc-admin
Switched to context "crc-admin".
dave@fedora:~/Downloads$ oc whoami
kubeadmin
dave@fedora:~/Downloads$ oc get clusterversion version -ojsonpath='{range .spec.overrides[*]}{.name}{"\n"}{end}' | nl -v -2
    -2    cluster-monitoring-operator
    -1    monitoring
     0    cloud-credential-operator
     1    cloud-credential
     2    cluster-autoscaler-operator
     3    cluster-autoscaler
     4    cluster-cloud-controller-manager-operator
     5    cloud-controller-manager
dave@fedora:~/Downloads$ crc config set enable-cluster-monitoring true
Successfully configured enable-cluster-monitoring to true




Pod YAML

kind: Pod
apiVersion: v1
metadata:
  name: demo
  namespace: demo
  uid: 6be00704-f3ca-4d4b-9af6-f6bee0494ba1
  resourceVersion: '37632'
  creationTimestamp: '2025-08-03T09:24:59Z'
  labels:
    run: demo
  annotations:
    k8s.ovn.org/pod-networks: '{"default":{"ip_addresses":["10.217.0.66/23"],"mac_address":"0a:58:0a:d9:00:42","gateway_ips":["10.217.0.1"],"routes":[{"dest":"10.217.0.0/22","nextHop":"10.217.0.1"},{"dest":"10.217.4.0/23","nextHop":"10.217.0.1"},{"dest":"169.254.0.5/32","nextHop":"10.217.0.1"},{"dest":"100.64.0.0/16","nextHop":"10.217.0.1"}],"ip_address":"10.217.0.66/23","gateway_ip":"10.217.0.1","role":"primary"}}'
    k8s.v1.cni.cncf.io/network-status: |-
      [{
          "name": "ovn-kubernetes",
          "interface": "eth0",
          "ips": [
              "10.217.0.66"
          ],
          "mac": "0a:58:0a:d9:00:42",
          "default": true,
          "dns": {}
      }]
    openshift.io/scc: anyuid
  managedFields:
    - manager: crc
      operation: Update
      apiVersion: v1
      time: '2025-08-03T09:24:59Z'
      fieldsType: FieldsV1
      fieldsV1:
        'f:metadata':
          'f:annotations':
            'f:k8s.ovn.org/pod-networks': {}
      subresource: status
    - manager: kubectl-run
      operation: Update
      apiVersion: v1
      time: '2025-08-03T09:24:59Z'
      fieldsType: FieldsV1
      fieldsV1:
        'f:metadata':
          'f:labels':
            .: {}
            'f:run': {}
        'f:spec':
          'f:containers':
            'k:{"name":"demo"}':
              .: {}
              'f:command': {}
              'f:image': {}
              'f:imagePullPolicy': {}
              'f:name': {}
              'f:resources': {}
              'f:terminationMessagePath': {}
              'f:terminationMessagePolicy': {}
          'f:dnsPolicy': {}
          'f:enableServiceLinks': {}
          'f:restartPolicy': {}
          'f:schedulerName': {}
          'f:securityContext': {}
          'f:terminationGracePeriodSeconds': {}
    - manager: multus-daemon
      operation: Update
      apiVersion: v1
      time: '2025-08-03T09:24:59Z'
      fieldsType: FieldsV1
      fieldsV1:
        'f:metadata':
          'f:annotations':
            'f:k8s.v1.cni.cncf.io/network-status': {}
      subresource: status
    - manager: kubelet
      operation: Update
      apiVersion: v1
      time: '2025-08-03T09:55:05Z'
      fieldsType: FieldsV1
      fieldsV1:
        'f:status':
          'f:conditions':
            'k:{"type":"ContainersReady"}':
              .: {}
              'f:lastProbeTime': {}
              'f:lastTransitionTime': {}
              'f:status': {}
              'f:type': {}
            'k:{"type":"Initialized"}':
              .: {}
              'f:lastProbeTime': {}
              'f:lastTransitionTime': {}
              'f:status': {}
              'f:type': {}
            'k:{"type":"PodReadyToStartContainers"}':
              .: {}
              'f:lastProbeTime': {}
              'f:lastTransitionTime': {}
              'f:status': {}
              'f:type': {}
            'k:{"type":"Ready"}':
              .: {}
              'f:lastProbeTime': {}
              'f:lastTransitionTime': {}
              'f:status': {}
              'f:type': {}
          'f:containerStatuses': {}
          'f:hostIP': {}
          'f:hostIPs': {}
          'f:phase': {}
          'f:podIP': {}
          'f:podIPs':
            .: {}
            'k:{"ip":"10.217.0.66"}':
              .: {}
              'f:ip': {}
          'f:startTime': {}
      subresource: status
spec:
  restartPolicy: Always
  serviceAccountName: default
  imagePullSecrets:
    - name: default-dockercfg-p7cfm
  priority: 0
  schedulerName: default-scheduler
  enableServiceLinks: true
  terminationGracePeriodSeconds: 30
  preemptionPolicy: PreemptLowerPriority
  nodeName: crc
  securityContext:
    seLinuxOptions:
      level: 's0:c26,c0'
  containers:
    - resources: {}
      terminationMessagePath: /dev/termination-log
      name: demo
      command:
        - sleep
        - 600s
      securityContext:
        capabilities:
          drop:
            - MKNOD
      imagePullPolicy: Always
      volumeMounts:
        - name: kube-api-access-z7xrc
          readOnly: true
          mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      terminationMessagePolicy: File
      image: 'image-registry.openshift-image-registry.svc:5000/demo/ubi8@sha256:0686ee6a1b9f7a4eb706b3562e50bbf55b929a573f6055a1128052b4b2266a2c'
  serviceAccount: default
  volumes:
    - name: kube-api-access-z7xrc
      projected:
        sources:
          - serviceAccountToken:
              expirationSeconds: 3607
              path: token
          - configMap:
              name: kube-root-ca.crt
              items:
                - key: ca.crt
                  path: ca.crt
          - downwardAPI:
              items:
                - path: namespace
                  fieldRef:
                    apiVersion: v1
                    fieldPath: metadata.namespace
          - configMap:
              name: openshift-service-ca.crt
              items:
                - key: service-ca.crt
                  path: service-ca.crt
        defaultMode: 420
  dnsPolicy: ClusterFirst
  tolerations:
    - key: node.kubernetes.io/not-ready
      operator: Exists
      effect: NoExecute
      tolerationSeconds: 300
    - key: node.kubernetes.io/unreachable
      operator: Exists
      effect: NoExecute
      tolerationSeconds: 300
status:
  containerStatuses:
    - restartCount: 3
      started: true
      ready: true
      name: demo
      state:
        running:
          startedAt: '2025-08-03T09:55:04Z'
      volumeMounts:
        - name: kube-api-access-z7xrc
          mountPath: /var/run/secrets/kubernetes.io/serviceaccount
          readOnly: true
          recursiveReadOnly: Disabled
      imageID: 'image-registry.openshift-image-registry.svc:5000/demo/ubi8@sha256:0686ee6a1b9f7a4eb706b3562e50bbf55b929a573f6055a1128052b4b2266a2c'
      image: 'image-registry.openshift-image-registry.svc:5000/demo/ubi8@sha256:0686ee6a1b9f7a4eb706b3562e50bbf55b929a573f6055a1128052b4b2266a2c'
      lastState:
        terminated:
          exitCode: 0
          reason: Completed
          startedAt: '2025-08-03T09:45:03Z'
          finishedAt: '2025-08-03T09:55:03Z'
          containerID: 'cri-o://fe191488478ade4fb4fbd6f045f4896cdd3128a02cd23c9163dea85039de6efc'
      containerID: 'cri-o://f9351ee373330f42397d46be58820ae2d34616afcddf9be923e30bbd906b5238'
  qosClass: BestEffort
  hostIPs:
    - ip: 192.168.126.11
  podIPs:
    - ip: 10.217.0.66
  podIP: 10.217.0.66
  hostIP: 192.168.126.11
  startTime: '2025-08-03T09:24:59Z'
  conditions:
    - type: PodReadyToStartContainers
      status: 'True'
      lastProbeTime: null
      lastTransitionTime: '2025-08-03T09:25:03Z'
    - type: Initialized
      status: 'True'
      lastProbeTime: null
      lastTransitionTime: '2025-08-03T09:24:59Z'
    - type: Ready
      status: 'True'
      lastProbeTime: null
      lastTransitionTime: '2025-08-03T09:55:05Z'
    - type: ContainersReady
      status: 'True'
      lastProbeTime: null
      lastTransitionTime: '2025-08-03T09:55:05Z'
    - type: PodScheduled
      status: 'True'
      lastProbeTime: null
      lastTransitionTime: '2025-08-03T09:24:59Z'
  phase: Running



Deploying a sample application into OCP CRC local with odo

HOWTO

See also


 Prerequisites


Installing odo



dave@fedora:~/Downloads$ curl -L https://developers.redhat.com/content-gateway/rest/mirror/pub/openshift-v4/clients/odo/v3.16.1/odo-linux-amd64 -o odo -o odo
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
100 90.1M  100 90.1M    0     0  4255k      0  0:00:21  0:00:21 --:--:-- 4785k
dave@fedora:~/Downloads$ curl -L https://developers.redhat.com/content-gateway/rest/mirror/pub/openshift-v4/clients/odo/v3.16.1/odo-linux-amd64.sha256 -o odo.sha256
echo "$(<odo.sha256)  odo" | shasum -a 256 --check
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100    64  100    64    0     0    181      0 --:--:-- --:--:-- --:--:--   181
bash: shasum: command not found...
Install package 'perl-Digest-SHA' to provide command 'shasum'? [N/y] y


 * Waiting in queue... 
 * Loading list of packages.... 
The following packages have to be installed:
 perl-Digest-SHA-1:6.04-513.fc42.x86_64    Perl extension for SHA-1/224/256/384/512
Proceed with changes? [N/y] y


 * Waiting in queue... 
 * Waiting for authentication... 
 * Waiting in queue... 
 * Downloading packages... 
 * Requesting data... 
 * Testing changes... 
 * Installing packages... 
shasum: standard input: no properly formatted SHA checksum lines found

dave@fedora:~/Downloads$ curl -L https://developers.redhat.com/content-gateway/rest/mirror/pub/openshift-v4/clients/odo/v3.16.1/odo-linux-amd64.sha256 -o odo.sha256
echo "$(<odo.sha256)  odo" | shasum -a 256 --check
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100    64  100    64    0     0    385      0 --:--:-- --:--:-- --:--:--   385
odo: OK
dave@fedora:~/Downloads$ sudo install -o root -g root -m 0755 odo /usr/local/bin/odo
[sudo] password for dave: 

dave@fedora:~/Downloads$  odo login -u developer -p developer
Connecting to the OpenShift cluster

Login successful.

You don't have any projects. You can try to create a new project, by running

    odo create project <projectname>

dave@fedora:~/Downloads$ odo create project sample-app
 ✓  Creating the project "sample-app" [80ms]
 ✓  Project "sample-app" is ready for use
 ✓  New project created and now using project: sample-app
dave@fedora:~/Downloads$ mkdir sample-app
dave@fedora:~/Downloads$ cd sample-app
dave@fedora:~/Downloads/sample-app$ git clone https://github.com/openshift/nodejs-ex
Cloning into 'nodejs-ex'...
remote: Enumerating objects: 836, done.
remote: Counting objects: 100% (1/1), done.
remote: Total 836 (delta 0), reused 0 (delta 0), pack-reused 835 (from 2)
Receiving objects: 100% (836/836), 773.00 KiB | 908.00 KiB/s, done.
Resolving deltas: 100% (321/321), done.
dave@fedora:~/Downloads/sample-app$ cd nodejs-ex