Re: Deplyoing the component in security enabledsmartfrog Daemon

The steps should be:

=============================
  * ant initCA : creates a new Certificate Authority for siging jars and
generating the credentials ---> Only once!

  * mkdir  signedLib

  *  ant signJars :signs the jar files and populates the dist/signedLib
dir. Only once (and copy jars to all daemons).

  *  ant newDaemon : creates new host credentials This will generate the

host credentials in
 <smartfrog-installation-dir>/dist/private/hostxxx> directory.

  *  Rename the generated directory
   /opt/iexpress/smartfrog/private/hostxxx to
   /opt/iexpress/smartfrog/private/host1.

  *  ant newDaemon : creates 2nd new host credentials This will generate
the
host credentials in
 <smartfrog-installation-dir>/dist/private/hostxxx> directory.
  *  copy the generated directory to 2nd machine:
   /opt/iexpress/smartfrog/private/hostxxx to
   <2nd host>/opt/iexpress/smartfrog/private/host1.
  *  copy the dist/signedLib  directory to 2nd machine in dist/signedLib

  * start Daemon 2
  * start Daemon 1
  * deploy application.


NOTE: I forgot to mention that if you don't use dynamic classloading you
need to have all the jar files signed by the same certificate authority.

- Daemon credentials = daemon identity and each host has a unique one
signed by the same CA.
- Signed jars = all signed by the same CA that signed the daemons
identity. Same jars for all the daemons or jar in only one place and
classes downloaded dynamically in the other participating daemons.

Regards,

Julio

=======================

> -----Original Message-----
> From: Shrishailappa Awanty, Ambika (STSD)
> Sent: 05 September 2006 14:47
> To: Guijarro, Julio
> Cc: 'smartfrog-developer-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org'; Gururaja, Grandhi
(STSD)
> Subject: RE: [Smartfrog-developer] Deplyoing the component in security
> enabledsmartfrog Daemon
> 
> Hi Julio,
> 	I have create different certificates on each system before.
> 	Now as you said now I have created only one cirtificate and
copied
> to other machine.
> 	When I run sfDaemon in secure mode on other machine its giving
> following error.
> ===================================
> Exception in thread "main" java.lang.ExceptionInInitializerError
at
>
org.smartfrog.sfcore.componentdescription.ComponentDescriptionImpl.getCl
as
> sComponentDescription(ComponentDescriptionImpl.java:1055)
> at
>
org.smartfrog.sfcore.componentdescription.ComponentDescriptionImpl.getCl
as
> sComponentDescription(ComponentDescriptionImpl.java:1033)
>         at
org.smartfrog.sfcore.logging.LogImpl.<init>(LogImpl.java:154)
>         at
> org.smartfrog.sfcore.logging.LogFactory.getLog(LogFactory.java:66)
>         at
>
org.smartfrog.sfcore.logging.LogFactory.sfGetProcessLog(LogFactory.java:
13
> 6)
>         at org.smartfrog.SFSystem.sfLog(SFSystem.java:530)
>         at org.smartfrog.SFSystem.execute(SFSystem.java:324)
>         at org.smartfrog.SFSystem.main(SFSystem.java:309)
> Caused by: java.security.AccessControlException: access denied
> (java.util.PropertyPermission org.smartfrog.Reference.initCap read)
> ==============================
> 
> 	Please can you send me the list of steps to be executed in other
> machine where I didn't created any new cirtificates.
> 
> Thanks and Regards,
> Ambika
> 
> -----Original Message-----
> From: Guijarro, Julio
> Sent: Tuesday, September 05, 2006 6:53 PM
> To: Shrishailappa Awanty, Ambika (STSD)
> Cc: 'smartfrog-developer-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org'
> Subject: RE: [Smartfrog-developer] Deplyoing the component in security
> enabledsmartfrog Daemon
> 
> Hi Ambika,
> 
> Are you running iniCA in both machines? If you do that, then you are
> creating to different Certifacate Authorities or two domains. All the
> daemons have to share the same CA if they are part of the same domain.
> 
> What you need to do is to create only one CA in one of the machines,
run
> "ant newDaemon" twice and copy one of the private/hostxxx to the other
> machine with dir name private/host1.
> 
> Then it should work. Let me know if you are already doing this and it
is
> still not working for you.
> 
> Julio
> 
> > -----Original Message-----
> > From: Shrishailappa Awanty, Ambika (STSD)
> > Sent: 05 September 2006 14:08
> > To: Guijarro, Julio
> > Cc: 'smartfrog-developer-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org'
> > Subject: RE: [Smartfrog-developer] Deplyoing the component in
security
> > enabledsmartfrog Daemon
> >
> > Hi Julio,
> > 	I have created the certificates for both the daemons using the
> > following steps.
> > =============================
> >     * ant initCA : creates a new Certificate Authority for siging
jars
> > and generating the credentials
> >     * mkdir  signedLib
> >     *  ant signJars :signs the jar files and populates the
> > dist/signedLib dir.
> >     *  ant newDaemon : creates new host credentials This will
generate
> > the host credentials in
> > <smartfrog-installation-dir>/dist/private/hostxxx
> > directory.
> >     *  Rename the generated directory
> > 	/opt/iexpress/smartfrog/private/hostxxx to
> > /opt/iexpress/smartfrog/private/host1.
> > =======================
> >
> > 		Then I started the daemons in security mode.
> >
> > Thanks and Regards,
> > Ambika
> >
> > -----Original Message-----
> > From: Guijarro, Julio
> > Sent: Tuesday, September 05, 2006 6:36 PM
> > To: Shrishailappa Awanty, Ambika (STSD)
> > Cc: smartfrog-developer-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org
> > Subject: RE: [Smartfrog-developer] Deplyoing the component in
security
> > enabledsmartfrog Daemon
> >
> > Hi Ambika,
> >
> > Did you create a set of certificates for the two daemons or are you
> > using the dummy ones?
> >
> > Did you start each daemon with its own certificate?
> >
> > Julio
> >
> > > -----Original Message-----
> > > From: smartfrog-developer-bounces-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org
> > > [mailto:smartfrog- developer-bounces-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org] On
> > > Behalf Of Shrishailappa Awanty, Ambika (STSD)
> > > Sent: 05 September 2006 13:24
> > > Cc: smartfrog-developer-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org
> > > Subject: [Smartfrog-developer] Deplyoing the component in security
> > > enabledsmartfrog Daemon
> > >
> > > Hi ,
> > > 	I am trying to deploy the counter example on two different
> > > nodes(HUPX) where I have started samrtfrog daemon in security
> > > enabled mode. But its failing to depoly the counter example on
> different node.
> > > I am getting following error.
> > >
> > >
> > > # ./smartfrog -a
> > >
counterEx1:DEPLOY:org/smartfrog/examples/functions/function.sf::imp:
> > > -e SmartFrog 3.08.004
> > > (C) Copyright 1998-2005 Hewlett-Packard Development Company, LP
> > >  - FAILED when trying DEPLOY of 'counterEx1',
> > > [org/smartfrog/examples/functions/function.sf],  host:imp
> > >     Result:
> > >       * Exception: 'SmartFrogException:: Unable to connect to
> > > sfDaemon
> > > on: imp/15.106.122.89.
> > > Reason: sfDaemon may not be authenticated properly
> > >          cause: java.rmi.ConnectIOException: Exception creating
> > > connection to: 15.106.122.89; nested exception is:
> > >         javax.net.ssl.SSLPeerUnverifiedException: peer not
> > > authenticated'
> > >       * Command line SFACT:
> > >
'counterEx1:DEPLOY:org/smartfrog/examples/functions/function.sf::imp:'
> > >       * To String: ' name:counterEx1,  type:DEPLOY,
> > > url:org/smartfrog/examples/functions/function.sf,  host:imp,
> > > resultType:FAILED,  resultExceptionMessage:Unable to connect to
> > > sfDaemon
> > > on: imp/15.106.122.89.
> > > Reason: sfDaemon may not be authenticated properly'
> > >
> > > 	Please any one can help me solve this problem?
> > >
> > > Thanks and Regards,
> > > Ambika
> > >
> > >
--------------------------------------------------------------------
> > > --
> > > --- Using Tomcat but need to do more? Need to support web
services,
> > > security?
> > > Get stuff done quickly with pre-integrated technology to make your
> > > job easier Download IBM WebSphere Application Server v.1.0.1 based
> > > on Apache Geronimo
> > >
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=12
> > > 16
> > > 42 _______________________________________________
> > > Smartfrog-developer mailing list
> > > Smartfrog-developer-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org
> > > https://lists.sourceforge.net/lists/listinfo/smartfrog-developer

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642