Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

To run WSO2 products, you start the product server at the command line. You can then run the Management Console

...

to configure and manage the product.

...

...

maxLevel3
minLevel3
Info

The Management Console uses the default HTTP-NIO transport, which is configured in the <CEP_HOME>/repository/conf/tomcat/catalina-server.xml file in the . (<CEP_HOME>/repository/conf/tomcat directory. This transport must be properly configured in this file for the Management Console to be accessible.

...

is the directory where you installed the WSO2 product you want to run.) You must properly configure the HTTP-NIO transport in this file to access the Management Console. For more information on the HTTP-NIO transport, see the related topics section at the bottom of this page.

The following sections describe how to run the product.

Table of Contents
maxLevel3

Starting the server

To start the server, you run the script <CEP_HOME>/bin/wso2server.bat (on Windows) or or <CEP_HOME>/bin/wso2server.sh (on Linux/Solaris/Mac OS) from the bin foldercommand prompt as described below. Alternatively, you can install and run the server as a Windows or Linux service (see the related topics section at the end of this page).

  1. Open a command prompt :by following the instructions below.
    • On Windows, choose : Click Start -> Run, type type cmd at  at the prompt, and then press Enter.
    • On Linux/Solaris, establish a /Mac OS: Establish an SSH connection to the server or , log in to the text Linux console, or open a terminal window.
  2. Execute one of the following commands, where <CEP_HOME> is the directory where you installed the product distribution:
    • To start the server in a typical environment:
      • On Windows:  <CEP_HOME>
      /
      • \bin
      /
      • \wso2server.bat --run
      • On Linux/Solaris/Mac OS:  sh <CEP_HOME>/bin/wso2server.sh

      Info
    • If you want to

      To start the server in the background mode of Linux: sh <CEP_HOME>/bin/wso2server.sh start
      To stop the server running in this mode, you will enter: sh <CEP_HOME>/bin/wso2server.sh stop

    • To provide access to the production environment without allowing any user group (including admin) to log into the

      management console, execute one of the following commands.

      Management Console:

      • On Windows: 
      <PRODUCT
      • <CEP_HOME>\bin\wso2server.bat --run -DworkerNode
      • On Linux/Solaris/Mac OSsh
      <PRODUCT
      • <CEP_HOME>/bin/wso2server.sh -DworkerNode
    • If you want to check any additional options available to be used To check for additional options you can use with the startup commands, type -help after the command, such as:  
      sh <PRODUCT<CEP_HOME>/bin/wso2server.sh -help (see the related topics section at the end of this page).

 

The operation log appears in the command window. When the product server is runninghas successfully started, the log displays the message "WSO2 Carbon started in 'n' seconds"."

 

...

Info

To start and stop the server in the background mode of Linux, run wso2server.sh start and wso2server.sh stop commands.

...

If you are running the CEP on a computing device that does not have a local display such as Amazon AWS EC2 instance. You need to enable headless property by adding the following system property to the start-up script located in below locations:

  • On Windows:  <CEP_HOME>\bin\wso2server.bat 
  • On Linux/Solaris/Mac OS:  sh <CEP_HOME>/bin/wso2server.sh

Code Block
-Djava.awt.headless=true

Accessing the Management Console

Once the server has started, you can run the Management Console by opening typing its URL in a Web browser and typing in the management console's URL. The URL is displayed as the last line . The following sections provide more information about running the Management Console:

Table of Contents
minLevel5

Working with the URL

The URL appears next to “Mgt Console URL” in the start script 's console and loglog that is displayed in the command window. For example:

Image Modified

The URL should be in the following format: https://<Server Host>:9443/carbon

You can use this URL to access the Management Console on this computer from any other computer connected to the Internet or LAN. When accessing the Management Console from the same server where it 's is installed, you can type "localhost" instead of the IP address as follows: https://localhost:9443/carbon.

...

You can change the Management Console URL

...

by modifying the value of the

...

<MgtHostName> property in the <CEP_HOME>/repository/conf/carbon.xml file. When the host is internal or not resolved by a DNS, map the hostname alias to its IP address in the /etc/hosts file of your system, and then enter that alias as the value of the <MgtHostName> property in carbon.xml. For example:

In /etc/hosts:
127.0.0.1       localhost

In carbon.xml:
<MgtHostName>localhost</MgtHostName>
Code Block
languagexml
Signing in

At the sign-in screen, you can sign in to the Management Console

...

using admin

...

 as both the username and password.

...

To view information about a particular page, click the Help link in the top right corner of that page , or click the Docs link to open this documentation for full information on managing the product.

Info

When the Management Console

...

sign-in page appears, the

...

Web browser

...

typically

...

displays an "insecure connection" message, which requires your confirmation before you can continue.

The Management Console is based on the HTTPS protocol, which is a combination of HTTP and SSL protocols. This protocol is generally used to encrypt the traffic from the client to server for security reasons. The certificate it works with is used for encryption only, and does not prove the server identity. Therefore,

...

when you try to access the Management Console, a warning of untrusted connection is usually displayed. To continue working with this certificate, some steps should be taken to "accept" the certificate before access to the site is permitted. If you are using the Mozilla Firefox browser, this usually occurs only on the first access to the server, after which the certificate is stored in the browser database and marked as trusted. With other browsers, the insecure connection warning might be displayed every time you access the server.

This scenario is suitable for testing purposes, or for running the program on the company's internal networks. If you want to make the Management Console available to external users, your organization should obtain a certificate signed by a well-known certificate authority, which verifies that the server actually has the name it is accessed by and that this server actually belongs to the given organization.

Getting help

The tabs and menu items in the navigation pane on the left may vary depending on the features you have installed. To view information about a particular page, click the Help link at the top right corner of that page, or click the Docs link to open the documentation for full information on managing the product.

Configuring the session time-out

If you leave the Management Console unattended

...

for a defined time, its login session will time out. The default timeout value is 15 minutes, but you can change this in the <CEP_HOME>/repository/conf/tomcat/carbon/WEB-INF/web.xml file as follows

...

.

Code Block
languagehtml/xml
<session-config>
   <session-timeout>15</session-timeout>
</session-config>

...

Restricting access to the Management Console and Web applications

You can restrict access to the Management Console of your product by binding the Management Console with selected IP addresses. You can either restrict access to the Management Console only, or you can restrict access to all Web applications in your server as explained below. 

  • To control access only to the Management Console, add the IP addresses to the <CEP_HOME>/repository/conf/tomcat/carbon/META-INF/context.xml file as follows:

    Code Block
    <Valve className="org.apache.catalina.valves.RemoteAddrValve" allow="<IP-address-01>|<IP-address-02>|<IP-address-03>"/>

    The RemoteAddrValve Tomcat valve defined in this file only applies to the Management Console, and thereby all outside requests to the Management Console are blocked. 

  • To control access to all Web applications deployed in your server, add the IP addresses to the <CEP_HOME>/repository/conf/context.xml file as follows.

    Code Block
    <Valve className="org.apache.catalina.valves.RemoteAddrValve" allow="<IP-address-01>|<IP-address-02>|<IP-address-03>"/>

    The RemoteAddrValve Tomcat valve defined in this file applies to each Web application hosted on the WSO2 product server. Therefore, all outside requests to any Web application are blocked.

  • You can also restrict access to particular servlets in a Web application by adding a Remote Address Filter to the <CEP_HOME>/repository/conf/tomcat/web.xml file and by mapping that filter to the servlet URL. In the Remote Address Filter that you add, you can specify the IP addresses that should be allowed to access the servlet. The following example from a web.xml file illustrates how access to the Management Console page (/carbon/admin/login.jsp) is granted only to one IP address.

    Code Block
    <filter>
        <filter-name>Remote Address Filter</filter-name>
        <filter-class>org.apache.catalina.filters.RemoteAddrFilter</filter-class>
            <init-param>
                <param-name>allow</param-name>
                <param-value>127.0.01</param-value>
            </init-param>
    </filter>
    
    <filter-mapping>
        <filter-name>Remote Address Filter</filter-name>
        <url-pattern>/carbon/admin/login.jsp</url-pattern>
    </filter-mapping>
Info

Any configurations (including valves defined in the <CEP_HOME>/repository/conf/tomcat/catalina-server.xml file) apply to all Web applications and are globally available across the server, regardless of the host or cluster. For more information about using remote host filters, see the Apache Tomcat documentation.

Stopping the server

To stop the server, press press Ctrl+C in  in the command window, or click the the Shutdown/Restart link  link in the navigation pane in the Management Console. If you started the server in background mode in Linux, enter the following command instead:

sh <CEP_HOME>/bin/wso2server.sh stop

Excerpt
hiddentrue

 

Related topics

NOTE TO WRITERS: copy this content manually to your change and add relative links to the appropriate pages within your document. If you do not have an HTTP-NIO Transport page in your doc, point to the page in the relevant version of the Carbon docs.

  • HTTP-NIO Transport
  • Installing as a Windows Service
  • Installing as a Linux Service
  • Product Startup Options (NOTE TO WRITERS: Point this link to the page in the Carbon documentation. Make sure you pick the Carbon version that is relevant to the product)