My Oracle Support Banner

Oracle iPlanet Web Server 7.0 Administration Instance Fails To Start When Using McAfee Host Based Intrusion Software (Doc ID 1348200.1)

Last updated on JULY 31, 2018

Applies to:

Oracle iPlanet Web Server - Version 7.0 and later
Oracle Solaris on SPARC (64-bit)
Oracle Solaris on SPARC (32-bit)

Symptoms

Oracle iPlanet Web Server's Admin Server fails to start with the error reporting as "Unable to find/open the administration server's certificate database". 

The full Admin Server startup sequence reports the following:

# ./startserv
Sun Java System Web Server 7.0U8 B01/20/2010 09:38
info: CORE3016: daemon is running as super-user
info: CORE5076: Using [Java HotSpot(TM) Server VM, Version 1.6.0_17] from [Sun Microsystems Inc.]
info: WEB0100: Loading web module in virtual server [admin-server] at [/admingui]
info: WEB0100: Loading web module in virtual server [admin-server] at [/jmxconnector]
failure: Unable to find/open the administration server's certificate database
warning:  LCM0006: Lifecycle module [AdminLifecycleModule] threw  ServerLifecycleException [com.sun.web.admin.exceptions.AdminException:  Unable to find/open the administration server's certificate database]
failure: CORE5072: An error occured during startup/reconfig
failure: CORE3186: Failed to set configuration
failure: server initialization failed


When enabling finest level logs, the errors reports problems particularly with message "Cannot Construct SUNPKCS11":

fine: AdminServerLifecycleModule: Received STARTUP_EVENT^M
finer: initializeServerLogger: com.sun.web.admin null null^M
finer: Logger init: Name=[com.sun.web.admin], Level=[null], Parent=[], UseParentHandlers=[true], Handlers=[], ResourceBundle=[null]^M
fine: Starting admin instance as a server^M
fine: Lib [libsoftokn3.so] was loaded from [/opt/ws70u8/lib/libsoftokn3.so]^M
fine: Lib [libnssckbi.so] was loaded from [/opt/ws70u8/lib/libnssckbi.so]^M
fine: Cannot construct SunPKCS11: java.lang.ClassNotFoundException: sun.security.pkcs11.SunPKCS11^M
fine: Using native NSS ...^M
fine: NssStore.getKeysAndCertificatesNative ...^M
fine: NssStore.getKeysAndCertificatesNative Done^M
fine: NssStore.keyAlias = Admin-Server-Cert^M
failure: Unable to find/open the administration server's certificate database^M
finest: java.io.IOException: parseAlgParameters failed: PBE AlgorithmParameters not available^M
java.io.IOException: parseAlgParameters failed: PBE AlgorithmParameters not available^M
       at com.sun.net.ssl.internal.pkcs12.PKCS12KeyStore.parseAlgParameters(PKCS12KeyStore.java:527)^M
       at com.sun.net.ssl.internal.pkcs12.PKCS12KeyStore.engineLoad(PKCS12KeyStore.java:1267)^M
       at java.security.KeyStore.load(KeyStore.java:1185)^M
       at com.iplanet.ias.security.NssStore.initStore(NssStore.java:228)^M
       at com.iplanet.ias.security.NssStore.initStores(NssStore.java:164)^M
       at com.iplanet.ias.security.NssStore.<init>(NssStore.java:58)^M
       at com.iplanet.ias.security.NssStore.getInstance(NssStore.java:65)^M
       at com.sun.web.admin.server.AdminServer.initSecurity(AdminServer.java:209)^M
       at com.sun.web.admin.server.AdminServer.initServer(AdminServer.java:136)^M
       at com.sun.web.admin.server.AdminServer.init(AdminServer.java:125)^M
       at com.sun.web.admin.server.AdminServerLifecycleModule.handleEvent(AdminServerLifecycleModule.java:45)^M
       at com.sun.appserv.server.ServerLifecycleModule.postEvent(ServerLifecycleModule.java:168)^M
       at com.sun.appserv.server.ServerLifecycleModule.onStartup(ServerLifecycleModule.java:212)^M
       at com.sun.appserv.server.LifecycleModuleService.onStartup(LifecycleModuleService.java:189)^M
       at com.sun.webserver.init.J2EERunner.confPostInit(J2EERunner.java:288)^M
Caused by: java.security.NoSuchAlgorithmException: PBE AlgorithmParameters not available^M
       at sun.security.jca.GetInstance.getInstance(GetInstance.java:142)^M
       at java.security.Security.getImpl(Security.java:659)^M
       at java.security.AlgorithmParameters.getInstance(AlgorithmParameters.java:113)^M
       at com.sun.net.ssl.internal.pkcs12.PKCS12KeyStore.parseAlgParameters(PKCS12KeyStore.java:523)^M
       ... 14 more^M
^M
warning: LCM0006: Lifecycle module [AdminLifecycleModule] threw ServerLifecycleException [com.sun.web.admin.exceptions.AdminException: Unable to find/open the administration server's certificate database]^M
failure: CORE5072: An error occured during startup/reconfig^M
fine: CORE5072: An error occured during startup/reconfig^M
com.sun.appserv.server.ServerLifecycleException: com.sun.web.admin.exceptions.AdminException: Unable to find/open the administration server's certificate database^M
       at com.sun.web.admin.server.AdminServerLifecycleModule.handleEvent(AdminServerLifecycleModule.java:48)^M
       at com.sun.appserv.server.ServerLifecycleModule.postEvent(ServerLifecycleModule.java:168)^M
       at com.sun.appserv.server.ServerLifecycleModule.onStartup(ServerLifecycleModule.java:212)^M
       at com.sun.appserv.server.LifecycleModuleService.onStartup(LifecycleModuleService.java:189)^M
       at com.sun.webserver.init.J2EERunner.confPostInit(J2EERunner.java:288)^M
Caused by: com.sun.web.admin.exceptions.AdminException: Unable to find/open the administration server's certificate database^M
       at com.sun.web.admin.server.AdminServer.initSecurity(AdminServer.java:219)^M
       at com.sun.web.admin.server.AdminServer.initServer(AdminServer.java:136)^M
       at com.sun.web.admin.server.AdminServer.init(AdminServer.java:125)^M
       at com.sun.web.admin.server.AdminServerLifecycleModule.handleEvent(AdminServerLifecycleModule.java:45)^M
       ... 4 more^M

Another related symptom may be found in the .../logs/errors file on the instance:

[11/Jun/2013:16:11:40] failure ( 1607): CORE4008: Internal error: unable to locate: com/sun/webserver/util/JException
[11/Jun/2013:16:11:40] failure ( 1607): CORE4011: Internal error: Unable to locate class: com/sun/webserver/init/J2EERunner
[11/Jun/2013:16:11:40] failure ( 1607): CORE2253: Error running Init function load-modules: initialization of libj2eeplugin.so failed

 

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Cause
Solution


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.