Hi Team,

Iam new to JBOSS . Iam facing an error with JBOSS when I try to connect to it using cli . Any help is really appreciated.
below is the error
[sam@samserver jboss]$ cd $JBOSS_HOME/bin
[sams@samserver bin]$ sh ./jboss-cli.sh --connect controller=samserver

org.jboss.as.cli.CliInitializationException: Failed to connect to the controller
        at org.jboss.as.cli.impl.CliLauncher.initCommandContext(CliLauncher.java:299)
        at org.jboss.as.cli.impl.CliLauncher.main(CliLauncher.java:277)
        at org.jboss.as.cli.CommandLineMain.main(CommandLineMain.java:45)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
        at java.lang.reflect.Method.invoke(Method.java:497)
        at org.jboss.modules.Module.run(Module.java:312)
        at org.jboss.modules.Main.main(Main.java:473)
Caused by: org.jboss.as.cli.CommandLineException: The controller is not available at samserver:9999
        at org.jboss.as.cli.impl.CommandContextImpl.tryConnection(CommandContextImpl.java:1057)
        at org.jboss.as.cli.impl.CommandContextImpl.connectController(CommandContextImpl.java:887)
        at org.jboss.as.cli.impl.CommandContextImpl.connectController(CommandContextImpl.java:863)
        at …

The web application in my organizations uses Apache web server that load balance across Application servers (Tomcat instance). There are two Apache (Web server) instances that route the traffic to 4 Application server instance.

The HTTPS traffic coming to the application terminates at the Web server layer, and then communication between Web server and App server is over HTTP. My assumption is that Web server and App-server communicates over HTTP and not over HTTPS.

However lately in a discussion with my IS team I came to know that Web server communication to App server over HTTP is not considered secure, and Web server should instead communicate to App server over HTTPS.

I would like to know your views on how generally this works in your organization?

I have a Java servlet installed on an IBMi.  OS is at 7.3.  I am using the integrated application server.
My servlet needs an external jar file.  On Tomcat on Windows, I put the jar in the /bin directory.  
Where to I put it in the 400?

Hello all
I have an application server and and a database.
The application runs a report by reading the data from the SQL DB server.
The report to be completely generated is taking around 20 mins.
We doubled the hardware  resources on both servers. But the process is still taking the same exact amount to finish.
The network utilization between the two servers is not fully utilized during the process.

1- that means the bottleneck for this is not HW over utilization.
2- what else could it be? Any ideas where to look?

hi guys

The environment I'm working in has around 150+ servers. Our team have to apply patches and keep these servers updated on a regular basis which they haven't done as yet. Now, the issue we have is that these servers are not just owned by the infrastructure and security teams, as that would be easy to manage. But the business analysts, business intelligence and applications teams own a good percentage of these too.

I need to put strategies in place so that my team, infrastructure&security, ensures that when these updates are applied that the impact is minimised and that we don't suddenly have updates which affect the applications sitting on those servers and firefighting errors.

One of my ideas was to ensure that there is a testing environment. But if I did, would I then liaise with the development teams to replicate everything that is on the production environment onto their testing too and regularly? So that when they make changes to development, they do the same onto testing?

What is the approach you have found works best?

Thanks for helping
Yash

Audit has raised to harden middlewares & CIS doesn't have many (other than Tomcat)
while we have the following (refer to attached Excel for details) :
Jas service
WSO2 AM
WSO2 IS
WSO2 ESB
Front-end
Redis
RabbitMQ
Marathon
etcd

Can point me to among the better sites for hardenings of above & ideally scripts that could be readily run.

Also, whereabout can we obtain patches for the above opensource middlewares?
ContainerMiddlewares.xlsx

Hi,

I am trying startup jboss-cli.sh, however, i keep getting the following errors.

the domain controller service is up without issues, I can login http://<dc_ip>:9990

JBOSS: EAP 6.4 update 21

======================================
[jboss@domainController bin]$ ./jboss-cli.sh
Exception in thread "Thread-2" java.lang.RuntimeException: broken pipe
      at org.jboss.aesh.console.reader.ConsoleInputSession$2.run(ConsoleInputSession.java:95)
You are disconnected at the moment. Type 'connect' to connect to the server or 'help' for the list of supported commands.
[disconnected /]
[jboss@domainController bin]$
====================================

anyone can help? much appreciated

My colleague got the attached error last month back when trying
to download Sparc Solaris 10 patchset : what's the reason?

Didn't try to download the patch for Solaris x86.  Does the support
contract we have with Oracle makes any difference if it's Sparc or x86?
Or the patch is simply old & has been superseded with a new one?
cantdwnldSolarisPatch.png

Hi EE

I'd like to configure SSL for JBoss EAP 6.4 in domain mode.

1 domain controller (three server groups), 1 slave node (with three servers)

I need to configure SSL for all services
** domain Admin console access via https
** each server access via https.

Thanks

https://www.michalsons.com/blog/what-is-a-national-critical-information-infrastructure/17701
https://publicwiki-01.fraunhofer.de/CIPedia/index.php/Critical_Information_Infrastructure

I have to draft a guideline for systems that interface with a CII system & need inputs:
currently, the interfaces concerned are limited to 3 types only:

1. files transfer
============
I can only think that the generally practices ie:
 a) encryption of data in transit (eg: using sftp instead of ftp/mapping a drive or NFS)
 b) encryption of data at rest if it's sensitive (tampered with)

2. API
=====
how do we secure these (in particular APIs using microServices)??
I've heard of API needs to be certified so before requesting for it, need to be certain
else applications developers may question its relevance/usefulness

3. DBLink
========
Those sqlconnect  esp Oracle links to extract / update data.
Will need to define if the non-CII system is
   a) updating into CII, will have to be extra stringent but how?
   b) extracting from CII, just encrypting the sql calls
 

Oracle databases, weblogic are involved in the critical systems
while the less-critical systems may be Windows, Linux on
various apps (including mobile apps).

Editing thread to add Oracle as it relates to DBLink.