My Oracle Support Banner

Exalogic Virtual: Changing OVM Manager "admin" User Password Using Exapasswd Failing With "Admin server needs to be restarted due to non-dynamic changes" Java Runtime Error (Doc ID 2571501.1)

Last updated on AUGUST 20, 2019

Applies to:

Oracle Exalogic Elastic Cloud Software - Version 2.0.6.2.0 and later
Linux x86-64
Oracle Virtual Server x86-64

Symptoms

In Exalogic Virtual racks, Exapasswd fails to update the password for OVM Manager "admin" user with following "Admin server needs to be restarted due to non-dynamic changes" Java Runtime Error.

[root@cn01 ecu]# exapasswd --ovm-admin --debug
Additional information can be found in the log file /var/log/exapasswd-19xxxx-09xx03.log
Exapasswd 1.0.4 (build 12626)
-------------------------------------------------
Setting passwords for the following components:
DEBUG: Loading JSON file /var/tmp/exalogic/ecu/elcontrol.json
 OVMM admin user (1 targets)
-------------------------------------------------
Continue? [y/n] y
-------------------------------------------------
After setting passwords, they will be synchronised with Ops Center
Checking connection to Ops Center <IP ADD> (<HOSTNAME>)
DEBUG: Trying passwordless SSH for root@<IP ADD>:22
DEBUG: ssh -oStrictHostKeyChecking=no -oCheckHostIP=no -oNumberOfPasswordPrompts=0 -oLogLevel=INFO -p 22 -l root <IP ADD> help
DEBUG: RET: 0
DEBUG: Passwordless SSH succeded
root@<IP ADD> authentication successful
-------------------------------------------------
Setting OVMM admin user password for 1 targets:
  <IP ADD> (
<HOSTNAME>)
-------------------------------------------------
Continue? [y/n] y
Connecting to OVMM Control VM first
DEBUG: Getting existing password from JSON config
DEBUG: Trying passwordless SSH for root@<IP ADD>:22
DEBUG: ssh -oStrictHostKeyChecking=no -oCheckHostIP=no -oNumberOfPasswordPrompts=0 -oLogLevel=INFO -p 22 -l root <IP ADD> help
DEBUG: RET: 0
DEBUG: Passwordless SSH succeded
root@<IP ADD> authentication successful
Successfully connected to all targets. Continuing...
New password (minimum 8 chars. with one numeric/special char.) for OVMM admin user:
Retype the password:
Setting passwords for OVMM admin user targets...
DEBUG: -------------------------------------------------
DEBUG: OVMM admin user
DEBUG: (1 out of 1)
DEBUG: <IP ADD> (
<HOSTNAME>)
DEBUG: -------------------------------------------------
Setting password (minimum 8 chars. with one numeric/special char.) for <IP ADD>
Please enter current WLS password for OVMM administrator:
Please enter current password for OVMM administrator:
DEBUG: Found password in the cache for root@<IP ADD>:22
DEBUG: STDIN: welcome1
DEBUG: END STDIN
DEBUG: expect /exalogic-lctools/lib/exatools/Exapasswd/lib/utils2/ssh.exp 900 root <IP ADD> 22 "su - oracle -c 'cd /u01/app/oracle/ovm-manager-3/bin; ./ovm_admin --lockusers 2000'"
DEBUG: RET: 0, OUTPUT: Oracle VM Manager Release 3.4.4 Admin tool

tput: No value for $TERM and no -T specified
tput: No value for $TERM and no -T specified
tput: No value for $TERM and no -T specified
tput: No value for $TERM and no -T specified
tput: No value for $TERM and no -T specified
tput: No value for $TERM and no -T specified
tput: No value for $TERM and no -T specified
tput: No value for $TERM and no -T specified

Initializing WebLogic Scripting Tool (WLST) ...

Welcome to WebLogic Server Administration Scripting Shell

Type help() for help on available commands

2019-07-24 09:28:46,795 [main] INFO  ovm.wlst.commands - Connecting using URL t3://localhost:7001

Location changed to edit tree. This is a writable tree with
DomainMBean as the root. To make changes you will need to start
an edit session via startEdit().

For more help, use help('edit')


Starting an edit session ...
Started edit session, please be sure to save and activate your
changes once you are done.
2019-07-24 09:28:47,892 [main] INFO  ovm.wlst.domainbuilder.Domain - Set lockout threshold to 2000 tries
Saving all your changes ...
Saved all your changes successfully.
Activating all your changes, this may take a while ...
The edit lock associated with this edit session is released
once the activation is completed.
Activation completed
DEBUG: END OUTPUT
DEBUG: Found password in the cache for root@<IP ADD>:22
DEBUG: expect /exalogic-lctools/lib/exatools/Exapasswd/lib/expect/ovm_admin.exp <IP ADD> root admin
DEBUG: RET: 1, OUTPUT: Location changed to serverRuntime tree. This is a read-only tree with DomainMBean as the root.

For more help, use help('domainConfig')


Problem invoking WLST - Traceback (innermost last):
 File "/u01/app/oracle/ovm-manager-3/ovm_wlst/jython/ovm/admin/changeuserpw.py", line 9, in ?
 File "/u01/app/oracle/Middleware/oracle_common/common/wlst/modules/ovm/wlst/commands.py", line 300, in changeUserPassword
 File "/u01/app/oracle/Middleware/oracle_common/common/wlst/modules/ovm/wlst/domainbuilder.py", line 566, in changeUserPassword
java.lang.RuntimeException: Runtime Exception while calling invoke. Invoking management operations on Realm, UserLockoutManager and Security Provider MBeans via the Domain Runtime MBeanServer is illegal when the Admin server needs to be restarted due to non-dynamic changes.
       at weblogic.utils.StackTraceDisabled.unknownMethod()

java.lang.RuntimeException: java.lang.RuntimeException: Runtime Exception while calling invoke. Invoking management operations on Realm, UserLockoutManager and Security Provider MBeans via the Domain Runtime MBeanServer is illegal when the Admin server needs to be restarted due to non-dynamic changes.

Connection to <IP ADD> closed.
DEBUG: END OUTPUT
ERROR: Location changed to serverRuntime tree. This is a read-only tree with DomainMBean as the root.
For more help, use help('domainConfig')


Problem invoking WLST - Traceback (innermost last):
 File "/u01/app/oracle/ovm-manager-3/ovm_wlst/jython/ovm/admin/changeuserpw.py", line 9, in ?
 File "/u01/app/oracle/Middleware/oracle_common/common/wlst/modules/ovm/wlst/commands.py", line 300, in changeUserPassword
 File "/u01/app/oracle/Middleware/oracle_common/common/wlst/modules/ovm/wlst/domainbuilder.py", line 566, in changeUserPassword
java.lang.RuntimeException: Runtime Exception while calling invoke. Invoking management operations on Realm, UserLockoutManager and Security Provider MBeans via the Domain Runtime MBeanServer is illegal when the Admin server needs to be restarted due to non-dynamic changes.
       at weblogic.utils.StackTraceDisabled.unknownMethod()

java.lang.RuntimeException: java.lang.RuntimeException: Runtime Exception while calling invoke. Invoking management operations on Realm, UserLockoutManager and Security Provider MBeans via the Domain Runtime MBeanServer is illegal when the Admin server needs to be restarted due to non-dynamic changes.

Connection to <IP ADD> closed. (host: <IP ADD>, command: "ovm_admin.exp", returncode: 1)
Error while setting password for <IP ADD>.
Continuing to the next target...
DEBUG: -------------------------------------------------
DEBUG: -------------------------------------------------
OVMM admin user
0 out of 1 finished successfully
-------------------------------------------------
-------------------------------------------------
SUMMARY
-------------------------------------------------
ERROR: 1 out of 1 component types failed.
-------------------------------------------------

Changes

 Non dynamic changes on OVM Manager Weblogic Domain.

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Changes
Cause
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.