Network Deployment (Distributed operating systems), v8.0 > Scripting the application serving environment (wsadmin)
Restricting remote access using scripting
We can use wsadmin.sh to restrict remote administration so that administrators only manage nodes locally. This prevents the base node from opening remote ports for the administrator. Each administrative connection must occur from the local workstation.
Procedure
- Start wsadmin.sh.
- Restrict remote access.
Run the following set of commands for each server of interest to restrict remote access:
server=AdminConfig.getId('/Server:server1/') AdminTask.setAdminProtocolEnabled(server, '[-conntype SOAP –enable false]') AdminTask.setAdminProtocolEnabled(server, '[-conntype RMI –enable false]') AdminTask.setAdminProtocolEnabled(server, '[-conntype JSR160RMI –enabled false]') AdminTask.setAdminProtocol(server,'[-conntype IPC -mode local]')
- Restart each server.
Use the stopAllServers and startAllServers commands in the AdminServerManagement script library to restart each server configured with local access only:
AdminServerManagement.stopAllServers("myNode") AdminServerManagement.startAllServers("myNode")
Start the wsadmin scripting client using wsadmin.sh
Related
Server administration scripts
wsadmin scripting tool