Skip to main content

Glassfish: Is it simply broken?

19 replies [Last post]
janpla
Offline
Joined: 2010-08-25
Points: 0

The problems I have with Glasfish are seriously hampering my efforts to make any progress with my projects. Is this product really ready to serious production?

I have in the past month or so been completely stuck in the same, few problems, and what makes it triply frustrating is that nobody seems able to give me any sort of indication about what to do, how to debug, trace or otherwise troubleshoot it. There is nothing in the server.log, and there seems to be no logic to what the cause may be. I have tried everything, reinstalling, changing to a newer and bigger machine, installing the commercial version - sometimes it seems to help, but it soon degrades and becomes useless again. This is what happens:

1. I install Glassfish, log on to the admin console, set the admin password. Everything is fine.

2. I enable secure admin by issuing 'asadmin enable-secure-admin'

3. I shut down the domain

4. I start up the domain

5. I connect to the admin console in the browser

The first time I do this on any machine, I am asked to accept a new certificate in step 5, or sometimes in step 3. If I then restart the domain, step 5 is likely to hang for a longish time, then I get a message saying 'The connection was interrupted while the page was loading.' or sometimes 'The connection to the server was reset while the page was loading.' When the latter occurs, I also get a handful of messages in the server.log saying:

[#|2011-12-08T11:12:04.008+0000|WARNING|oracle-glassfish3.1.1|com.sun.grizzly.config.GrizzlyServiceListener|_ThreadID=13;_ThreadName=Thread-2;|GRIZZLY0023: Interrupting idle Thread: admin-thread-pool-4848(4).|#]

After a few restarts, the situation gets so bad that not only can I get no contact with the admin console, but even after I remove the installed software and reinstall, it no longer works. Can anybody even begin to imagine what this is about? I certainly can't.

So, does anybody actually work seriously with Glassfish? And if so, how? Is it only possible to use it by developing locally on the server and deploying by hand, totally disabling secure admin?

I'm sorry for blowing off like this - I know that this is an open forum, and nobody is beholden to me, but I have even tried subitting a service request to Oracle through Metalink - no response so far, apparently it has not even been looked at by anybody in the organisation. So please, if you happen to have any shred of insight into this, or any idea about how one might wring more information, like traces or log messages, out of the server, do let me know.

Reply viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.
oleksiys
Offline
Joined: 2006-01-25
Points: 0

Can I ask you to try the latest 3.1.2 promoted build [1]?
We've reworked port-unification mechanism a bit, and if your issue is
related to port-unification, it might have been fixed.

http://dlc.sun.com.edgesuite.net/glassfish/3.1.2/promoted/glassfish-3.1....

Thanks.

WBR,
Alexey.

On 12/08/2011 12:29 PM, forums@java.net wrote:
> The problems I have with Glasfish are seriously hampering my efforts
> to make
> any progress with my projects. Is this product really ready to serious
> production?
>
> I have in the past month or so been completely stuck in the same, few
> problems, and what makes it triply frustrating is that nobody seems
> able to
> give me any sort of indication about what to do, how to debug, trace or
> otherwise troubleshoot it. There is nothing in the server.log, and there
> seems to be no logic to what the cause may be. I have tried everything,
> reinstalling, changing to a newer and bigger machine, installing the
> commercial version - sometimes it seems to help, but it soon degrades and
> becomes useless again. This is what happens:
>
> 1. I install Glassfish, log on to the admin console, set the admin
> password.
> Everything is fine.
>
> 2. I enable secure admin by issuing 'asadmin enable-secure-admin'
>
> 3. I shut down the domain
>
> 4. I start up the domain
>
> 5. I connect to the admin console in the browser
>
> The first time I do this on any machine, I am asked to accept a new
> certificate in step 5, or sometimes in step 3. If I then restart the
> domain,
> step 5 is likely to hang for a longish time, then I get a message
> saying 'The
> connection was interrupted while the page was loading.' or sometimes 'The
> connection to the server was reset while the page was loading.' When the
> latter occurs, I also get a handful of messages in the server.log saying:
>
> [#|2011-12-08T11:12:04.008+0000|WARNING|oracle-glassfish3.1.1|com.sun.grizzly.config.GrizzlyServiceListener|_ThreadID=13;_ThreadName=Thread-2;|GRIZZLY0023:
>
> Interrupting idle Thread: admin-thread-pool-4848(4).|#]
> After a few restarts, the situation gets so bad that not only can I
> get no
> contact with the admin console, but even after I remove the installed
> software and reinstall, it no longer works. Can anybody even begin to
> imagine
> what this is about? I certainly can't.
>
> So, does anybody actually work seriously with Glassfish? And if so,
> how? Is
> it only possible to use it by developing locally on the server and
> deploying
> by hand, totally disabling secure admin?
>
> I'm sorry for blowing off like this - I know that this is an open
> forum, and
> nobody is beholden to me, but I have even tried subitting a service
> request
> to Oracle through Metalink - no response so far, apparently it has not
> even
> been looked at by anybody in the organisation. So please, if you
> happen to
> have any shred of insight into this, or any idea about how one might
> wring
> more information, like traces or log messages, out of the server, do
> let me
> know.
>
>
> --
>
> [Message sent by forum member 'janpla']
>
> View Post: http://forums.java.net/node/871913
>
>

janpla
Offline
Joined: 2010-08-25
Points: 0

I get the same message with the newer build:

The connection was interrupted

The connection to hag:4848 was interrupted while the page was loading.
oleksiys
Offline
Joined: 2006-01-25
Points: 0

As I understand you're getting this message after ~15mins waiting for
the page to be loaded?

Can you pls. start GF, try to load admin web console in a browser and
take a threads dump after let's say 5 mins (using jstack)?

Thanks.

WBR,
Alexey.

On 12/08/2011 04:50 PM, forums@java.net wrote:
> I get the same message with the newer build:
>
> The connection was interrupted The connection to hag:4848 was interrupted
> while the page was loading.
>
> --
>
> [Message sent by forum member 'janpla']
>
> View Post: http://forums.java.net/node/871913
>
>

janpla
Offline
Joined: 2010-08-25
Points: 0

I don't wait for 15 minutes - should I?

I have now unpacked the zip file, started the domain, set the password and enabled secure admin; when I try to connect, I quickly get the message: "The connection was interrupted".

...

I have attached the 5 minute thread dump, and waited for 15 minutes before trying to connect - it isn't happening:

The connection to crepe:4848 was interrupted while the page was loading.
tmueller
Offline
Joined: 2005-10-31
Points: 0

You might want to check that you are using a supported JVM. You have to have update 22 or later of 1.6. Earlier versions have an SSL bug that prevent secure admin from working properly.

Tom

janpla
Offline
Joined: 2010-08-25
Points: 0

This is what the java has to say - I assume this is update 26?

# java -version
java version "1.6.0_26"
Java(TM) SE Runtime Environment (build 1.6.0_26-b03)
Java HotSpot(TM) 64-Bit Server VM (build 20.1-b02, mixed mode)
oleksiys
Offline
Joined: 2006-01-25
Points: 0

Sorry, I wasn't specific, I meant message like:

"GRIZZLY0023: Interrupting idle Thread: admin-thread-pool-4848(4)"

Alexey.

janpla
Offline
Joined: 2010-08-25
Points: 0

I'm not sure how long that actually takes - thinking back it does seem to be something like that.

oleksiys
Offline
Joined: 2006-01-25
Points: 0

Can you pls. do one experiment?

0) unpack latest promoted glassfish 3.1.2 zip
1) copy attached jar file into GF3.1.2/glassfish/modules folder
2) start GF 3.1.2 normally
3) add system property:
asadmin create-system-properties
javax.net.debug=ssl,handshake,plaintext
4) enable secure admin
5) stop GF 3.1.2
6) start GF 3.1.2 using:
java -jar GF3.1.2/glassfish/modules/glassfish.jar > output.dump
7) try to access the admin gui from browser, wait a bit...
8) stop the server (CTRL+C in the terminal)
9) send us output.dump file (it should be pretty big w/ SSL dump) + all
kind of exceptions you may see in the console or server.log.

Thanks.

WBR,
Alexey.

On 12/09/2011 02:04 PM, forums@java.net wrote:
> I'm not sure how long that actually takes - thinking back it does seem
> to be
> something like that.
>
>
> --
>
> [Message sent by forum member 'janpla']
>
> View Post: http://forums.java.net/node/871913
>
>

janpla
Offline
Joined: 2010-08-25
Points: 0

I think it is already the latest promoted:

-rw-r--r-- 1 root root  87537720 Dec  8 14:58 glassfish-3.1.2-b13.zip

I ran it as you said; as I followed the output, I could see that it kept saying

javax.net.ssl.SSLHandshakeException: Client requested protocol SSLv3 not enabled or not supported|#]

- so is that the problem, then? How/where do I enable this?

oleksiys
Offline
Joined: 2006-01-25
Points: 0

That's interesting.
Can you pls. file an issue? I'll check it asap.

Thanks.

WBR,
Alexey.

On 12/12/2011 04:59 PM, forums@java.net wrote:
> I think it is already the latest promoted:
>
> -rw-r--r-- 1 root root 87537720 Dec 8 14:58 glassfish-3.1.2-b13.zip
> I ran it as you said; as I followed the output, I could see that it kept
> saying
>
> javax.net.ssl.SSLHandshakeException: Client requested protocol SSLv3 not
> enabled or not supported|#]
> - so is that the problem, then? How/where do I enable this?
>
> I have tried a few times to attach the output file (output.txt), but I
> get a
> validation error.
>
>
> --
>
> [Message sent by forum member 'janpla']
>
> View Post: http://forums.java.net/node/871913
>
>

janpla
Offline
Joined: 2010-08-25
Points: 0

I raised the following issue:

http://java.net/jira/browse/GLASSFISH-17984

janpla
Offline
Joined: 2010-08-25
Points: 0

Oh blast; I got the sytem information wrong when I raised the isue - I looked at the wrong machine. It should have been "Debian Linux 6, kernel 2.6.26-2-686, java 1.6.0_29", and of course, now I can't edit the thing. Sory. Sorry, sorry, sorry.

rlubke
Offline
Joined: 2003-08-21
Points: 0

SSLv3 support is disabled by default.

Assuming you've enabled secure admin, run:

asadmin set
configs.config.server-config.network-config.protocols.protocol.sec-admin-listener.ssl.ssl3-enabled=true

then restart the domain. You should be able to connect once it's back
up and running.

Looking into the history as to why it's disabled by default.

On 12/12/11 8:17 AM, Oleksiy Stashok wrote:
> That's interesting.
> Can you pls. file an issue? I'll check it asap.
>
> Thanks.
>
> WBR,
> Alexey.
>
> On 12/12/2011 04:59 PM, forums@java.net wrote:
>> I think it is already the latest promoted:
>>
>> -rw-r--r-- 1 root root 87537720 Dec 8 14:58 glassfish-3.1.2-b13.zip
>> I ran it as you said; as I followed the output, I could see that it kept
>> saying
>>
>> javax.net.ssl.SSLHandshakeException: Client requested protocol SSLv3 not
>> enabled or not supported|#]
>> - so is that the problem, then? How/where do I enable this?
>>
>> I have tried a few times to attach the output file (output.txt), but
>> I get a
>> validation error.
>>
>>
>> --
>>
>> [Message sent by forum member 'janpla']
>>
>> View Post: http://forums.java.net/node/871913
>>
>>
>

janpla
Offline
Joined: 2010-08-25
Points: 0

That seems to have done the trick!

Assuming you've enabled secure admin, run:

asadmin set
configs.config.server-config.network-config.protocols.protocol.sec-admin-listener.ssl.ssl3-enabled=true

then restart the domain. You should be able to connect once it's back
up and running.

I can now access the admin console and deploy from NetBeans. Now, the only problem I have is that it appears to be necessary to undeploy the application first; perhaps NetBeans doesn't know about redeploy? But that is a small thing. It seems to be working, any way - I'll start whining again if it stops behaving.

Thanks to everybody for helping!

rlubke
Offline
Joined: 2003-08-21
Points: 0

The next promoted build for 3.1.2 (b14) should have SSLv3 enabled by
default.

On 12/12/11 12:03 PM, Ryan Lubke wrote:
> SSLv3 support is disabled by default.
>
> Assuming you've enabled secure admin, run:
>
> asadmin set
> configs.config.server-config.network-config.protocols.protocol.sec-admin-listener.ssl.ssl3-enabled=true
>
> then restart the domain. You should be able to connect once it's back
> up and running.
>
> Looking into the history as to why it's disabled by default.
>
>
> On 12/12/11 8:17 AM, Oleksiy Stashok wrote:
>> That's interesting.
>> Can you pls. file an issue? I'll check it asap.
>>
>> Thanks.
>>
>> WBR,
>> Alexey.
>>
>> On 12/12/2011 04:59 PM, forums@java.net wrote:
>>> I think it is already the latest promoted:
>>>
>>> -rw-r--r-- 1 root root 87537720 Dec 8 14:58 glassfish-3.1.2-b13.zip
>>> I ran it as you said; as I followed the output, I could see that it
>>> kept
>>> saying
>>>
>>> javax.net.ssl.SSLHandshakeException: Client requested protocol SSLv3
>>> not
>>> enabled or not supported|#]
>>> - so is that the problem, then? How/where do I enable this?
>>>
>>> I have tried a few times to attach the output file (output.txt), but
>>> I get a
>>> validation error.
>>>
>>>
>>> --
>>>
>>> [Message sent by forum member 'janpla']
>>>
>>> View Post: http://forums.java.net/node/871913
>>>
>>>
>>
>

janpla
Offline
Joined: 2010-08-25
Points: 0

Hi Alexey,

I'll try version 3.1.2, if I can download it, it seems to stall after a very short while.

janpla
Offline
Joined: 2010-08-25
Points: 0

I will keep trying, but it has stalled or simply disconnected several times now. Is there another place where I could download this version?

ljnelson
Offline
Joined: 2003-08-04
Points: 0

On Thu, Dec 8, 2011 at 10:16 AM, wrote:

> I will keep trying, but it has stalled or simply disconnected several times
> now. Is there another place where I could download this version?
>

I have been burned by this as well. Use wget or curl from the command
line; those seem to work for some reason. Downloading promoted builds
(maybe other kinds too, not sure) via the browser has been problematic for
months. Sometimes it works, but most times it stalls out. wget seems to
work all the time.

Shrug.

Best,
Laird

--
http://about.me/lairdnelson