1. Jboss EAP 6 配置 URI_ENCODING
In order to set UTF-8 for URI encoding you have to edit the JBOSS_HOME/standalone/configuration/standalone.xml file and add a system property named org.apache.catalina.connector.URI_ENCODING,(with value set to UTF-8) to the system-properties element.
Below is the code that needs to be added to the configuration file you use:
Please note that the system-properties node has to be placed directly under the extensions node, in standalone.xml file, or you will get parse errors.
可以到jboss maven仓库下载jbossweb源码(org/jboss/web/jbossweb/),查看org.apache.catalina.connector.Connector的代码(jboss module: org\jboss\as\web\main\jbossweb-vesionxx.jar)
还有一个编码相关参数file.encoding,可以配置在standalone.conf/standalone.conf.bat的JAVA_OPTS中:
set "JAVA_OPTS=%JAVA_OPTS% -Dfile.encoding=UTF-8
2. javax.xml.transform.TransformerConfigurationException: Translet class loaded, but unable to create translet instance
同样的ear包,部署在EAP 6时正常,当部署在wildfly 8时报以上错误,原因是我使用了opensaml,版本与wildfly本身提供的不一致,导致相关的xml jar冲突,改为一致的版本后恢复正常(建议使用jboss自带的包)。
3. Driver's Blob representation is of an unsupported type: oracle.sql.BLOB
删除classpath 中的Oracle驱动包,改为在JBoss module中配置。
4. JBoss EAP 6 as RHEL 7 service
service默认启动超时时间是1min 30s,可在service配置中增加如下配置,延长超时时间:
TimeoutStartSec=10min
更多Service参数请参考systemd.service — Service unit configuration
5. TransactionReaper check timeout for TX
事物超时,在EAP 6 standalone.xml中修改超时时间
6. Ldap配置例子
附:启动ldap时显示日志,执行如下命令:
/usr/local/libexec/slapd -d -1
7. 加密数据库密码
1) Setup a Java Keystore to store key for password encryption
利用java keytool执行以下命令:
keytool -genseckey -alias vault -storetype jceks -keyalg AES -keysize 128 -storepass vault22 -keypass vault22 -validity 730 –keystore EAP_HOME/vault/vault.keystore
2) Initialize the Password Vault and store password in the Password Vault
EAP_HOME/bin/vault.sh --keystore EAP_HOME/vault/vault.keystore --keystore-password vault22 --alias vault --vault-block ds_boms --attribute password --sec-attr test --enc-dir EAP_HOME/vault/ --iteration 120 --salt 1234abcd
3) Configure JBoss EAP 6 to use the Password Vault
登录Jboss CLI执行以下命令:
/core-service=vault:add(vault-options=[("KEYSTORE_URL" => "EAP_HOME/vault/vault.keystore"), ("KEYSTORE_PASSWORD" => "MASK-5dOaAVafCSd"), ("KEYSTORE_ALIAS" => "vault"), ("SALT" => "1234abcd"),("ITERATION_COUNT" => "120"), ("ENC_FILE_DIR" => "EAP_HOME/vault/")])
4) Datasource Definition Using a Password in Masked Form
详细信息请参见:Password Vaults for Sensitive Strings
8, 设置log时区
使用%z,注意一定要放在%d前:
%z{GMT+8}%d{HH:mm:ss,SSS}
9. 配置HTTPS
10. 自动删除JSP编译的类
默认undeploy时会自动删除vfs下的lib,但不会删除work目录下的文件,deploy时JSP不会重新编译。增加系统参数org.jboss.as.web.deployment.DELETE_WORK_DIR_ONCONTEXTDESTROY=true,然后重启Jboss,下次undeploy时就会自动删除了。
11. java.sql.SQLException: javax.resource.ResourceException: IJ000457: Unchecked throwable in managedConnectionReconnected
使用xa datasource,并添加以下参数:
/xa-pool>
12. 删除x-powered-by header
在domain:web中增加jsp-configuration
如使用JSF,在web.xml中增加: