Oracle iPlanet Web Server 7.0 Administration Instance Fails To Start When Using McAfee Host Based Intrusion Software (Doc ID 1348200.1)

Last updated on MARCH 07, 2017

Applies to:

Oracle iPlanet Web Server - Version 7.0 and later
Oracle Solaris on SPARC (64-bit)
Oracle Solaris on SPARC (32-bit)

Symptoms

Oracle iPlanet Web Server's Admin Server fails to start with the error reporting as "Unable to find/open the administration server's certificate database". 

The full Admin Server startup sequence reports the following:

# ./startserv
Sun Java System Web Server 7.0U8 B01/20/2010 09:38
info: CORE3016: daemon is running as super-user
info: CORE5076: Using [Java HotSpot(TM) Server VM, Version 1.6.0_17] from [Sun Microsystems Inc.]
info: WEB0100: Loading web module in virtual server [admin-server] at [/admingui]
info: WEB0100: Loading web module in virtual server [admin-server] at [/jmxconnector]
failure: Unable to find/open the administration server's certificate database
warning:  LCM0006: Lifecycle module [AdminLifecycleModule] threw  ServerLifecycleException [com.sun.web.admin.exceptions.AdminException:  Unable to find/open the administration server's certificate database]
failure: CORE5072: An error occured during startup/reconfig
failure: CORE3186: Failed to set configuration
failure: server initialization failed


When enabling finest level logs, the errors reports problems particularly with message "Cannot Construct SUNPKCS11":

fine: AdminServerLifecycleModule: Received STARTUP_EVENT^M
finer: initializeServerLogger: com.sun.web.admin null null^M
finer: Logger init: Name=[com.sun.web.admin], Level=[null], Parent=[], UseParentHandlers=[true], Handlers=[], ResourceBundle=[null]^M
fine: Starting admin instance as a server^M
fine: Lib [libsoftokn3.so] was loaded from [/opt/ws70u8/lib/libsoftokn3.so]^M
fine: Lib [libnssckbi.so] was loaded from [/opt/ws70u8/lib/libnssckbi.so]^M
fine: Cannot construct SunPKCS11: java.lang.ClassNotFoundException: sun.security.pkcs11.SunPKCS11^M
fine: Using native NSS ...^M
fine: NssStore.getKeysAndCertificatesNative ...^M
fine: NssStore.getKeysAndCertificatesNative Done^M
fine: NssStore.keyAlias = Admin-Server-Cert^M
failure: Unable to find/open the administration server's certificate database^M
finest: java.io.IOException: parseAlgParameters failed: PBE AlgorithmParameters not available^M
java.io.IOException: parseAlgParameters failed: PBE AlgorithmParameters not available^M
       at com.sun.net.ssl.internal.pkcs12.PKCS12KeyStore.parseAlgParameters(PKCS12KeyStore.java:527)^M
       at com.sun.net.ssl.internal.pkcs12.PKCS12KeyStore.engineLoad(PKCS12KeyStore.java:1267)^M
       at java.security.KeyStore.load(KeyStore.java:1185)^M
       at com.iplanet.ias.security.NssStore.initStore(NssStore.java:228)^M
       at com.iplanet.ias.security.NssStore.initStores(NssStore.java:164)^M
       at com.iplanet.ias.security.NssStore.<init>(NssStore.java:58)^M
       at com.iplanet.ias.security.NssStore.getInstance(NssStore.java:65)^M
       at com.sun.web.admin.server.AdminServer.initSecurity(AdminServer.java:209)^M
       at com.sun.web.admin.server.AdminServer.initServer(AdminServer.java:136)^M
       at com.sun.web.admin.server.AdminServer.init(AdminServer.java:125)^M
       at com.sun.web.admin.server.AdminServerLifecycleModule.handleEvent(AdminServerLifecycleModule.java:45)^M
       at com.sun.appserv.server.ServerLifecycleModule.postEvent(ServerLifecycleModule.java:168)^M
       at com.sun.appserv.server.ServerLifecycleModule.onStartup(ServerLifecycleModule.java:212)^M
       at com.sun.appserv.server.LifecycleModuleService.onStartup(LifecycleModuleService.java:189)^M
       at com.sun.webserver.init.J2EERunner.confPostInit(J2EERunner.java:288)^M
Caused by: java.security.NoSuchAlgorithmException: PBE AlgorithmParameters not available^M
       at sun.security.jca.GetInstance.getInstance(GetInstance.java:142)^M
       at java.security.Security.getImpl(Security.java:659)^M
       at java.security.AlgorithmParameters.getInstance(AlgorithmParameters.java:113)^M
       at com.sun.net.ssl.internal.pkcs12.PKCS12KeyStore.parseAlgParameters(PKCS12KeyStore.java:523)^M
       ... 14 more^M
^M
warning: LCM0006: Lifecycle module [AdminLifecycleModule] threw ServerLifecycleException [com.sun.web.admin.exceptions.AdminException: Unable to find/open the administration server's certificate database]^M
failure: CORE5072: An error occured during startup/reconfig^M
fine: CORE5072: An error occured during startup/reconfig^M
com.sun.appserv.server.ServerLifecycleException: com.sun.web.admin.exceptions.AdminException: Unable to find/open the administration server's certificate database^M
       at com.sun.web.admin.server.AdminServerLifecycleModule.handleEvent(AdminServerLifecycleModule.java:48)^M
       at com.sun.appserv.server.ServerLifecycleModule.postEvent(ServerLifecycleModule.java:168)^M
       at com.sun.appserv.server.ServerLifecycleModule.onStartup(ServerLifecycleModule.java:212)^M
       at com.sun.appserv.server.LifecycleModuleService.onStartup(LifecycleModuleService.java:189)^M
       at com.sun.webserver.init.J2EERunner.confPostInit(J2EERunner.java:288)^M
Caused by: com.sun.web.admin.exceptions.AdminException: Unable to find/open the administration server's certificate database^M
       at com.sun.web.admin.server.AdminServer.initSecurity(AdminServer.java:219)^M
       at com.sun.web.admin.server.AdminServer.initServer(AdminServer.java:136)^M
       at com.sun.web.admin.server.AdminServer.init(AdminServer.java:125)^M
       at com.sun.web.admin.server.AdminServerLifecycleModule.handleEvent(AdminServerLifecycleModule.java:45)^M
       ... 4 more^M

Another related symptom may be found in the .../logs/errors file on the instance:

 

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms