https://docs.oracle.com/middleware/1221/wls/WLACH/taskhelp/domainconfig/EnableTheDomainwideAdministrationPort.html#WLACH01108

 

Before you begin

The administration port accepts only secure, SSL traffic, and all connections via the port require authentication by a server administrator. Because of these features, enabling the administration port imposes the following restrictions on your domain:

  • The Administration Server and all Managed Servers in your domain must be configured with support for the SSL protocol.
  • All servers in the domain, including the Administration Server, enable or disable the administration port at the same time.

Note: The administration port cannot be dynamically enabled on a Managed Server. You must shut down each Managed Server, enable the administration port, then restart.

For more information, see Ensuring the Security of Your Production Environment.

 

WebLogic Server provides the option to enable an SSL administration port for use with all servers in the domain. Using the administration port is strongly recommended. It provides three capabilities:

  • Since communication uses SSL, administration traffic (which includes such things as administrator passwords) is more secure.
  • It enables you to start a server in the STANDBY state. See Understanding Server Life Cycle in Administering Server Startup and Shutdown for Oracle WebLogic Server.
  • It enables you to separate administration traffic from application traffic in your domain.

To enable the administration port for your domain:

  1. If you have not already done so, in the Change Center of the Administration Console, click Lock & Edit (see Use the Change Center).
  2. Shutdown all Managed Servers in the domain. You cannot enable the administration port dynamically on a Managed Server.
  3. Ensure that all servers in the domain are properly configured to use SSL. See Configure two-way SSL.
  4. In the left pane of the Console, under Domain Structure, select the domain name.
  5. Select Configuration > General and select the Enable Administration Port check box to enable the SSL administration port for this domain.
  6. In the Administration Port field, enter the SSL port number that server instances in the domain use as the administration port. You can override an individual server instance's administration port assignment on the Advanced options portion of the Configuration: General page for the server instance.
  7. Click Save.
  8. To activate these changes, in the Change Center of the Administration Console, click Activate Changes.
    Not all changes take effect immediately—some require a restart (see Use the Change Center).

After you finish

Start all Managed Server instances in the domain. You do not need to restart the Administration Server.

After enabling the administration port, all Administration Console traffic must connect via the administration port.

In addition, Managed Servers must connect to the Administration Server through the administration port. You can do this by specifying the following option on the Java command line when starting the Managed Server:

-Dweblogic.management.server=https://hostname:admin_port

In this argument, hostname refers to the address of the Administration Server and admin_port is the administration port that the Administration Server uses. Note that you must specify the https:// prefix, rather than http://.

 

相关文章

Oracle Web Services Manager

发表评论