Issue during starting up a cluster in jboss-as-7.1.0.Beta1

[rhacker]

Below is the senario

Box-1 with IP 101.101.101.101

host.xml

    <domain-controller>

        <local/>

    </domain-controller>

Box-2 with IP 102.102.102.102

host.xml

    <domain-controller>

        <remote host="101.101.101.101" port="9999"/>

    </domain-controller>

Now when I start my server on box-1 and then try to start the server on Box-2 I get the below error in loop

[Host Controller] 10:18:43,342 ERROR [org.jboss.remoting.remote] (Remoting "endpoint" read-1) JBREM000200: Remote connection failed: javax.security.sasl.SaslException: No more authentication mechanisms to try

[Host Controller] 10:18:43,348 WARN  [org.jboss.as.domain.controller] (Controller Boot Thread) Could not connect to remote domain controller 101.101.101.101:9999

[Host Controller] 10:18:43,463 ERROR [org.jboss.remoting.remote] (Remoting "endpoint" read-1) JBREM000200: Remote connection failed: javax.security.sasl.SaslException: No more authentication mechanisms to try

[Host Controller] 10:18:43,463 WARN  [org.jboss.as.domain.controller] (Controller Boot Thread) Could not connect to remote domain controller 101.101.101.101:9999

Where do I have to give the username and password of the remote box-1 from the node running on box-2

I have tried using below host.xml file after going through the link but it did not helped  http://community.jboss.org/wiki/ManagementAPISecurityHostToDomainControllerSecurity

    <domain-controller>

        <remote host="101.101.101.101" port="9999" userName="host_a" password="my_secret"/>

    </domain-controller>

I have also gone through the bug https://issues.jboss.org/browse/AS7-2426 which does not states how to give the username and password

Am I missing something ?

[rhacker]

can anyone help me in the issue discribed above ?

[sfcoy]

Are these the actual IP addresses? If so, it looks like a recipe for routing problems. Can the two boxes "ping" each other?

[rhacker]

No, these are not the actual IP addresses.

Yes, both the boxes are able to ping and do telnet to each other without any issue.

[rhacker]

Guys, can anyone help with this issue as it seems that starting a cluster in JBoss AS7 is not so easy as it looks or been explained.

Please let me know if I have missed anything from myside? Or is this a Bug?

[wdfink]

Hi Rayan,

this is nothing about cluster it is a domain mode issue.

So I suppose you run the domain- and controller on a different machine, right?

You did not change the authentication, so U use the mgmt-users.properties.

For domain-controller:

add a user (the name must be the name of the host-element of host-contoller) with password.

use bin/add-user.sh script.

for host-controller:

add attribute security-realm="ManagementRealm" to the <remote host=.. > element

add:

<security-realm name="ManagementRealm">
        ...
        <server-identities>
          <secret value="<password base 64>"/>
        </server-identities>

The password that you have given here is for that domain-controller user above and it must be bas64 encoded (find a base64 encoder via google or use 'base64' linux command.

think that's it.

[rhusar]

...or you can use just set of standalone servers by running in HA mode:

./bin/standalone.sh -c standalone-ha.xml

The defaults take care of everything.

[wdfink]

Something to clarify and avoid that we talk about different issues:

The subject is about cluster and the first post is about domain.

These are two different things!

A domain is a administrative collection of JBoss instances that must have a domain-controller and can have a couple of host-controller (if there are different physical boxes). This will be a new feature of AS7.

Each of such controller might have 0..* server instances which handle application requests.

These server instances might act as cluster but there is no must, all can have different autonomic instances.

A cluster is a collection of JBoss instances that deploy the same bunch of applications and have loadbalancing and share the data.

Such cluster can be achieved by having a number of AS7 standalone server where every instance must be administrated seperate as this is for former JBoss versions.

Or by setting up the new domain.