Security WSO2 ESB 4.9.0无法在启用安全vault的情况下启动

Security WSO2 ESB 4.9.0无法在启用安全vault的情况下启动,security,wso2,esb,Security,Wso2,Esb,我正在使用wso2esb 4.9.0,并尝试按照中所述配置security vault以加密密码 我修改(注释掉)了文件secret-conf.properties和指定的secretproviders类中的行。 我允许使用默认值(特别是用于测试的密码和JKS) 我从bin文件夹运行工具ciphertool 密码为cipher-text.properties的密码已加密 配置文件中的引用已使用属性svns:secretarias=“[cipher text.key]”修改 我重新启动了服务器,输

我正在使用wso2esb 4.9.0,并尝试按照中所述配置security vault以加密密码

我修改(注释掉)了文件secret-conf.properties和指定的secretproviders类中的行。 我允许使用默认值(特别是用于测试的密码和JKS)

我从bin文件夹运行工具ciphertool 密码为cipher-text.properties的密码已加密 配置文件中的引用已使用属性svns:secretarias=“[cipher text.key]”修改

我重新启动了服务器,输入了存储/密钥密码,并出现以下错误:

org.h2.jdbc.JdbcSQLException: Wrong user name or password [8004-140]
    at org.h2.message.DbException.getJdbcSQLException(DbException.java:327)
    at org.h2.message.DbException.get(DbException.java:167)
    at org.h2.message.DbException.get(DbException.java:144)
    at org.h2.message.DbException.get(DbException.java:133)
    at org.h2.engine.Engine.validateUserAndPassword(Engine.java:277)
    at org.h2.engine.Engine.getSession(Engine.java:133)
    at org.h2.engine.Session.createSession(Session.java:122)
    at org.h2.engine.SessionRemote.connectEmbeddedOrServer(SessionRemote.java:241)
    at org.h2.engine.SessionRemote.createSession(SessionRemote.java:219)
    at org.h2.jdbc.JdbcConnection.<init>(JdbcConnection.java:111)
    at org.h2.jdbc.JdbcConnection.<init>(JdbcConnection.java:95)
    at org.h2.Driver.connect(Driver.java:73)
    at org.apache.tomcat.jdbc.pool.PooledConnection.connectUsingDriver(PooledConnection.java:278)
    at org.apache.tomcat.jdbc.pool.PooledConnection.connect(PooledConnection.java:182)
    at org.apache.tomcat.jdbc.pool.ConnectionPool.createConnection(ConnectionPool.java:701)
    at org.apache.tomcat.jdbc.pool.ConnectionPool.borrowConnection(ConnectionPool.java:635)
    at org.apache.tomcat.jdbc.pool.ConnectionPool.getConnection(ConnectionPool.java:188)
    at org.apache.tomcat.jdbc.pool.DataSourceProxy.getConnection(DataSourceProxy.java:128)
    at org.wso2.carbon.user.core.claim.dao.ClaimDAO.getDialectCount(ClaimDAO.java:158)
    at org.wso2.carbon.user.core.common.DefaultRealm.populateProfileAndClaimMaps(DefaultRealm.java:429)
    at org.wso2.carbon.user.core.common.DefaultRealm.init(DefaultRealm.java:105)
    at org.wso2.carbon.user.core.common.DefaultRealmService.initializeRealm(DefaultRealmService.java:230)
    at org.wso2.carbon.user.core.common.DefaultRealmService.<init>(DefaultRealmService.java:96)
    at org.wso2.carbon.user.core.common.DefaultRealmService.<init>(DefaultRealmService.java:109)
    at org.wso2.carbon.user.core.internal.Activator.startDeploy(Activator.java:68)
    at org.wso2.carbon.user.core.internal.BundleCheckActivator.start(BundleCheckActivator.java:61)
    at org.eclipse.osgi.framework.internal.core.BundleContextImpl$1.run(BundleContextImpl.java:711)
    at java.security.AccessController.doPrivileged(Native Method)
    at org.eclipse.osgi.framework.internal.core.BundleContextImpl.startActivator(BundleContextImpl.java:702)
    at org.eclipse.osgi.framework.internal.core.BundleContextImpl.start(BundleContextImpl.java:683)
    at org.eclipse.osgi.framework.internal.core.BundleHost.startWorker(BundleHost.java:381)
    at org.eclipse.osgi.framework.internal.core.AbstractBundle.resume(AbstractBundle.java:390)
    at org.eclipse.osgi.framework.internal.core.Framework.resumeBundle(Framework.java:1176)
    at org.eclipse.osgi.framework.internal.core.StartLevelManager.resumeBundles(StartLevelManager.java:559)
    at org.eclipse.osgi.framework.internal.core.StartLevelManager.resumeBundles(StartLevelManager.java:544)
    at org.eclipse.osgi.framework.internal.core.StartLevelManager.incFWSL(StartLevelManager.java:457)
    at org.eclipse.osgi.framework.internal.core.StartLevelManager.doSetStartLevel(StartLevelManager.java:243)
    at org.eclipse.osgi.framework.internal.core.StartLevelManager.dispatchEvent(StartLevelManager.java:438)
    at org.eclipse.osgi.framework.internal.core.StartLevelManager.dispatchEvent(StartLevelManager.java:1)
    at org.eclipse.osgi.framework.eventmgr.EventManager.dispatchEvent(EventManager.java:230)
    at org.eclipse.osgi.framework.eventmgr.EventManager$EventThread.run(EventManager.java:340)
[2016-08-31 12:11:46,829] ERROR - Activator Cannot start User Manager Core bundle
org.wso2.carbon.user.core.UserStoreException: Cannot initialize the realm.
    at org.wso2.carbon.user.core.common.DefaultRealmService.initializeRealm(DefaultRealmService.java:240)
    at org.wso2.carbon.user.core.common.DefaultRealmService.<init>(DefaultRealmService.java:96)
org.h2.jdbc.jdbcsql异常:用户名或密码错误[8004-140]
位于org.h2.message.DbException.getJdbcSQLException(DbException.java:327)
位于org.h2.message.DbException.get(DbException.java:167)
位于org.h2.message.DbException.get(DbException.java:144)
位于org.h2.message.DbException.get(DbException.java:133)
位于org.h2.engine.engine.validateUserAndPassword(engine.java:277)
位于org.h2.engine.engine.getSession(engine.java:133)
位于org.h2.engine.Session.createSession(Session.java:122)
位于org.h2.engine.SessionRemote.connectEmbeddedOrServer(SessionRemote.java:241)
位于org.h2.engine.SessionRemote.createSession(SessionRemote.java:219)
JdbcConnection(JdbcConnection.java:111)
位于org.h2.jdbc.JdbcConnection(JdbcConnection.java:95)
位于org.h2.Driver.connect(Driver.java:73)
位于org.apache.tomcat.jdbc.pool.PooledConnection.connectUsingDriver(PooledConnection.java:278)
位于org.apache.tomcat.jdbc.pool.PooledConnection.connect(PooledConnection.java:182)
位于org.apache.tomcat.jdbc.pool.ConnectionPool.createConnection(ConnectionPool.java:701)
位于org.apache.tomcat.jdbc.pool.ConnectionPool.borrowConnection(ConnectionPool.java:635)
位于org.apache.tomcat.jdbc.pool.ConnectionPool.getConnection(ConnectionPool.java:188)
位于org.apache.tomcat.jdbc.pool.DataSourceProxy.getConnection(DataSourceProxy.java:128)
位于org.wso2.carbon.user.core.claim.dao.ClaimDAO.getDialogCount(ClaimDAO.java:158)
位于org.wso2.carbon.user.core.common.DefaultRealm.populateprofileandclaimaps(DefaultRealm.java:429)
位于org.wso2.carbon.user.core.common.DefaultRealm.init(DefaultRealm.java:105)
位于org.wso2.carbon.user.core.common.DefaultRealmService.initializeRealm(DefaultRealmService.java:230)
位于org.wso2.carbon.user.core.common.DefaultRealmService。(DefaultRealmService.java:96)
位于org.wso2.carbon.user.core.common.DefaultRealmService。(DefaultRealmService.java:109)
在org.wso2.carbon.user.core.internal.Activator.startDeploy(Activator.java:68)上
位于org.wso2.carbon.user.core.internal.BundleCheckActivator.start(BundleCheckActivator.java:61)
位于org.eclipse.osgi.framework.internal.core.BundleContextImpl$1.run(BundleContextImpl.java:711)
位于java.security.AccessController.doPrivileged(本机方法)
位于org.eclipse.osgi.framework.internal.core.BundleContextImpl.startActivator(BundleContextImpl.java:702)
位于org.eclipse.osgi.framework.internal.core.BundleContextImpl.start(BundleContextImpl.java:683)
位于org.eclipse.osgi.framework.internal.core.BundleHost.startWorker(BundleHost.java:381)
位于org.eclipse.osgi.framework.internal.core.AbstractBundle.resume(AbstractBundle.java:390)
位于org.eclipse.osgi.framework.internal.core.framework.resumeBundle(framework.java:1176)
位于org.eclipse.osgi.framework.internal.core.startevelmanager.resumeBundles(startevelmanager.java:559)
位于org.eclipse.osgi.framework.internal.core.startevelmanager.resumeBundles(startevelmanager.java:544)
位于org.eclipse.osgi.framework.internal.core.startevelmanager.incFWSL(startevelmanager.java:457)
位于org.eclipse.osgi.framework.internal.core.startevelmanager.dosetstartevel(startevelmanager.java:243)
位于org.eclipse.osgi.framework.internal.core.startevelmanager.dispatchEvent(startevelmanager.java:438)
位于org.eclipse.osgi.framework.internal.core.startevelmanager.dispatchEvent(startevelmanager.java:1)
位于org.eclipse.osgi.framework.eventmgr.EventManager.dispatchEvent(EventManager.java:230)
位于org.eclipse.osgi.framework.eventmgr.EventManager$EventThread.run(EventManager.java:340)
[2016-08-31 12:11:46829]错误-Activator无法启动User Manager核心捆绑包
org.wso2.carbon.user.core.UserStoreException:无法初始化域。
位于org.wso2.carbon.user.core.common.DefaultRealmService.initializeRealm(DefaultRealmService.java:240)
位于org.wso2.carbon.user.core.common.DefaultRealmService。(DefaultRealmService.java:96)
我检查了两个文件./repository/conf/datasources/master-datasources.xml和./repository/conf/security/cipher-text.properties,密码密钥匹配


你能告诉我我错过了什么吗?

为了做到这一点,你需要执行带有参数-Dconfigure的./cipher-tool.sh(对于linux和windows,它是cipher-tool.bat),该参数将加密cipher-text.properties中的值,使用cipher-tool.properies中提到的xpath将别名添加到每个conf文件中,并创建secret-conf.properties文件。新创建的secret-conf.properties将包含secretRepositories.file.location等的值。

经过几个小时的测试,我终于成功地启动了wso2 esb。我必须更新文件secret-conf.properties file并更改属性
secretRepositories.file.location
,路径必须包括文件夹,即
repository/conf/security/cipher text.properties
,而不仅仅是
cipher text.properties
。Pb已解决