It's not a straight forward thing to do, but here is how I do it:
1. Identify the plugin server configuration file. It will contain the
<plugin> entry for "ARSYS.ARF.WEBSERVICE":
<plugin>
<name>ARSYS.ARF.WEBSERVICE</name>
<pathelement
type="location">/path/to/ARSystem/pluginsvr/websvcjava75.jar</pathelement>
<classname>com.bmc.arsys.ws.plugin.WSPlugin</classname>
</plugin>
2. Identify the port that the plugin server listens on (defined in the
pluginsvr_config.xml):
<pluginsvr_config>
<port>4052</port>
...
3. Find the process that the port is bound to:
[user@server ~]$ lsof -u user |grep LISTEN |grep 4052
java 14599 user 11u IPv4 0x60084001480 0t0 TCP
server:4052 (LISTEN)
You now have several pieces of information:
1. The installation path for the correct plugin server
2. The configuration file for the correct plugin server
3. The PID of the currently running plugin server
With this information you can identify the correct entry in armonitor.conf
that you need to modify to add the java keystore parameters.
This is a little off topic, but I have simplified the process by adding
markers for each of the java processes. This makes identifying each
process easy:
[user@server ~]$ ps -fu user |grep java |grep -v grep
user 14606 13861 0 Oct 01 ? 2:15 java
-Dpname=PluginSvrAtrium -server -Xms128m -Xmx512m -XX:PermSize=32m -XX:Max
user 14610 13861 0 Oct 01 ? 1:16
/path/to/remedy/apps/java/jre/bin/java -Dpname=License -server -Xms32m
-Xmx64m
user 14600 13861 0 Oct 01 ? 193:57
/path/to/remedy/apps/java/jre/bin/java -Dpname=Email -Xms350m -Xmx512m
-Djava.
user 14605 13861 0 Oct 01 ? 3:12 java -Dpname=PluginSvrNE
-server -Xms128m -Xmx512m -XX:PermSize=32m -XX:MaxPerm
user 14599 13861 0 Oct 01 ? 4:02 ./java
-Dpname=PluginSvrMain -server -Xms128m -Xmx512m -XX:PermSize=32m -XX:Max
user 14608 13861 0 Oct 01 ? 2:35
/path/to/remedy/apps/java/jre/bin/java -Dpname=Flashboards -server -Xms32M
-Xm
I added a -Dpname parameter to each of the java processes. The -D
parameter let's you add arbitrary command line parameters to the java
processes. Now, if I want to identify the email engine, I can find the PID
like this:
[user@server ~]$ ps -fu user |grep Email |grep -v grep
user 14600 13861 0 Oct 01 ? 194:08
/path/to/remedy/apps/java/jre/bin/java -Dpname=Email -Xms350m -Xmx512m
-Djava.
Axton Grams
On Tue, Oct 2, 2012 at 11:06 AM, Barber, Sue <[email protected]> wrote:
> **
>
> Hi Axton,****
>
> ** **
>
> In speaking to my network administrator, he said that they did note the
> certs were not current and he updated them based on what he believed the
> proper location was, but there are multiple other javas on the machine.
> Can you tell me how to determine which location we would need to ensure the
> certification is updated?****
>
> ** **
>
> Thank you, Sue****
>
> ** **
>
> *From:* Action Request System discussion list(ARSList) [mailto:
> [email protected]] *On Behalf Of *Axton
> *Sent:* Tuesday, October 02, 2012 10:04 AM
> *To:* [email protected]
> *Subject:* Re: URI not found - https****
>
> ** **
>
> ** Based on the stack trace, your JVM needs the certificates in the
> certification path. If you are calling out to a web service, then this
> applies to the JVM that the Java based plugin server uses. Get public
> parts of the certificates from the Root CA to the end node and create a
> java keystore that contains the certificates and change the JVM
> configuration to use that keystore:****
>
>
> http://www.sslshopper.com/article-most-common-java-keytool-keystore-commands.html
> ****
>
> ** **
>
> The second part of the issue seems to be that the url is not valid; hence
> the URI not found error. As Frederick suggested, check the URI in a
> browser.****
>
> ** **
>
> Axton Grams****
>
> On Tue, Oct 2, 2012 at 8:54 AM, Grooms, Frederick W <
> [email protected]> wrote:****
>
> Sue,
> What happens when you try to open that same https WSDL url on a browser on
> your machine?
>
> Fred****
>
>
> -----Original Message-----
> From: Action Request System discussion list(ARSList) [mailto:
> [email protected]] On Behalf Of Barber, Sue
> Sent: Tuesday, October 02, 2012 8:48 AM
> To: [email protected]
> Subject: URI not found - https
>
> **
> Happy October!
>
> We are attempting to load a WSDL as a set fields action in a filter. It
> works if we use an http, but we get the following error as a https entry.
> I have reviewed previous posts on the issue and have found nothing that has
> fixed our issue, so I thought I would ask again if anyone has been able to
> resolve this issue or at least point me in the right direction.
>
> ARS Server is:
> 7.6.03 Build 001
> Linux OS
> Oracle DB 11.2
>
>
> ERROR: URI not found https://xxxxxxxxxxxxxxx.svc?wsdl
>
> Additional Details:
> sun.security.validator.ValidatorException: PKIX path building failed:
> sun.security.provider.certpath.SunCertPathBuilderException: unable to find
> valid certification path to requested target
> com.bmc.arsys.ws.util.ARWSException: URI not found
> https://arscomp.dev.mitre.org/ArsToCompucom.svc?wsdl
> at
> com.bmc.arsys.ws.util.WsdlUtil.validateWSDL(WsdlUtil.java:176)
> at
> com.bmc.arsys.ws.util.WsdlUtil.newDocument(WsdlUtil.java:219)
>
>
> Thanks in advance, Sue Barber****
>
>
> _______________________________________________________________________________
> UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
> attend wwrug12 www.wwrug12.com ARSList: "Where the Answers Are"****
>
> ** **
>
> _attend WWRUG12 www.wwrug.com ARSlist: "Where the Answers Are"_ ****
> _attend WWRUG12 www.wwrug.com ARSlist: "Where the Answers Are"_
>
_______________________________________________________________________________
UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
attend wwrug12 www.wwrug12.com ARSList: "Where the Answers Are"
