What is a GlassFish master password anyway?
August 2, 2007 § 2 Comments
If you came here looking for the default password for the GlassFish admin console, it’s “adminadmin” (although with GlassFish 3 and above the introduction of a default anonymous user now means you should no longer be prompted for user/password). If the master password is what you’re looking for, then read on.
With GlassFish v2 (SJS Application Server 9.1) soon to be released in final version, people are starting to move from the development phase to the production planning phase. This means that they are often moving from the “developer” profile to the “cluster” or “enterprise” profiles. One of the questions I often hear is “what is a master password anyway”? Here are a few hints gathered from talking to customers experiencing the use of a more secure and clustered environments (thanks to Sreeni and Kedar for some of these):
What is an Domain? What is a cluster? What is an Domain Admin Server (DAS)? What is a Node Agent (NA)? What is a repository?
These links explain it in best detail:
“Enterprise Server Concepts” and “Concept of a GlassFish Domain …”.
See also this picture.
What is a master password?
First you shouldn’t need it in the “developer” profile. Otherwise, straight from the documentation: “The master password (MP) is an overall shared password. It is never used for authentication and is never transmitted over the network.”. The master password is also the password for the secure keystore (NSS in the case of an “Enterprise” profile, KJS otherwise).
What is the default master password?
“changeit” (not “adminadmin”)
What is the “default” profile?
$INSTALL-DIR/config/asadminenv.conf contains the default profile used during installation (the one used by the “asadmin create-domain” command).
One can upgrade from a “developer” to a “cluster” profile on the fly. Can I move back to a “developer” profile?
It’s not supported but the only file touched during the upgrade is
domain.xml, so restoring the original file should work.
Why would I need an “Enterprise” profile rather than the “Cluster” profile?
The “Enterprise” profile is when you need HADB (the distributed Highly-Available DataBase) and/or an NSS keystore.
Is it necessary to start the node before starting the domain ?
No, but whenever the Node Agent (NA) is started for the first time, it tries to bind with Domain Admin Server (DAS). The usual sequence is to start DAS and then NA. If the DAS is not running at the time node agent is started, it knows that it is yet to bind with DAS and it does so whenever the DAS comes up later.