亚洲a在线视频,天堂精品在线视频,国产乱子伦精品

Puppet的server端与agent端的通信建立

Fri, 16 Dec 2016 09:09:00 GMT

puppet 的安装与配置�Q�请看上一��文章�?br />�q�里默认你已�l�把它安装好了�?br />
惌��两台(或N�?机器�怺�通信�Q�先要设�|�它们之间的Host文�g�?br />每一台机器分别执行如下命�?

sudo vi /etc/hosts

把要�怺�通信的所有机器的IP �?别名��d��q�来。比如先以server端�ؓ�?

127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4
::1 localhost localhost.localdomain localhost6 localhost6.localdomain6
10.23.10.237 puppet-server.noah.blogjava.net
#上面可能是打开�q�个文�g里默认的�Q�不用管�Q�直接在下面加agent的ip��可以了,有多��加多少�?/span>
10.52.27.71 agent001.noah-test.net
10.52.27.72 agent002.noah-test.net
10.52.27.73 agent003.noah-test.net

接下来把上面的都复制�Q�然后，分别考到其它的机器里面�?br />
接下来回到agent端，配置puppet 的配�|�文�Ӟ��执行如下命��o

sudo vi /etc/puppetlabs/puppet/puppet.conf

在打开的文仉��面填写如下信�?br />

[main]
#�q�个certname��是上面host里面的名�?/span>
certname = agent001.noah-test.net
#server ��是puppet的server的地址
server = puppet-server.noah.blogjava.net
environment = production
runinterval = 1h

然后在agent端，执行如下命��o�Q�向server端申误��?br />

sudo /opt/puppetlabs/bin/puppet agent --test

然后�Q�会出现�q�样的信�?/span>
Info: Creating a new SSL key for agent01.noah-test
Info: Caching certificate for ca
Info: csr_attributes file loading from /etc/puppetlabs/puppet/csr_attributes.yaml
Exiting; no certificate found and waitforcert is disabled

证明�Q�申��h��功，�{�待server端同意。这时可以�{到server端，执行如下命��o查看如些机器要申误��?

sudo /opt/puppetlabs/bin/puppet cert list --all

�q�里会显�C�出所有申误��的和正在�{�待审批的agent的certname 的名字。审扚w��过的前面有�?#8220;+”�?br />接下来执行如下命令进行单独审�?br />

sudo /opt/puppetlabs/bin/puppet cert sign agent001.noah-test.net

也可以直接在sgin 后面�?"--all",�q�行全部审批�?br />
审批完成后，再回到agent端，执行同样的命�?br />

sudo /opt/puppetlabs/bin/puppet agent --test

如下昄��的全是类似如下绿色的信息�Q�证明它们之间的通信已经建立成功

Info: Using configured environment 'production'

Info: Retrieving pluginfacts

Info: Retrieving plugin

Info: Caching catalog for agent001.noah-test.net

Info: Applying configuration version '1481877703'

问题汇总：

cloud@cdt-dev-cafews-yabinx:/etc/puppetlabs/puppet> sudo puppet agent -t

Warning: Setting 'pluginsync' is deprecated.

(at /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/defaults.rb:1713:in `block in ')

Warning: Unable to fetch my node definition, but the agent run will continue:

Warning: getaddrinfo: Name or service not known

Info: Retrieving pluginfacts

Error: /File[/var/lib/puppet/facts.d]: Failed to generate additional resources using 'eval_generate': getaddrinfo: Name or service not known

Error: /File[/var/lib/puppet/facts.d]: Could not evaluate: Could not retrieve file metadata for puppet:///pluginfacts: getaddrinfo: Name or service not known

Info: Retrieving plugin

Error: /File[/var/lib/puppet/lib]: Failed to generate additional resources using 'eval_generate': getaddrinfo: Name or service not known

Error: /File[/var/lib/puppet/lib]: Could not evaluate: Could not retrieve file metadata for puppet:///plugins: getaddrinfo: Name or service not known

Info: Loading facts

Error: Could not retrieve catalog from remote server: getaddrinfo: Name or service not known

Warning: Not using cache on failed catalog

Error: Could not retrieve catalog; skipping run

Error: Could not send report: getaddrinfo: Name or service not known

用的命��o不对�Q�改用这�?/span>

sudo /opt/puppetlabs/bin/puppet agent --test

sudo/opt/puppetlabs/bin/puppet agent --test

Warning: Unable to fetch my node definition, but the agent run will continue:

Warning: Server hostname 'cdt-dev-cafews-yabinx' did not match server certificate; expected one of cdt-dev-cafews-yabinx.emea1.cis.trcloud, DNS:puppet, DNS:cdt-dev-cafews-yabinx.emea1.cis.trcloud

Info: Retrieving pluginfacts

Error: /File[/opt/puppetlabs/puppet/cache/facts.d]: Failed to generate additional resources using 'eval_generate': Server hostname 'cdt-dev-cafews-yabinx' did not match server certificate; expected one of cdt-dev-cafews-yabinx.emea1.cis.trcloud, DNS:puppet, DNS:cdt-dev-cafews-yabinx.emea1.cis.trcloud

Error: /File[/opt/puppetlabs/puppet/cache/facts.d]: Could not evaluate: Could not retrieve file metadata for puppet:///pluginfacts: Server hostname 'cdt-dev-cafews-yabinx' did not match server certificate; expected one of cdt-dev-cafews-yabinx.emea1.cis.trcloud, DNS:puppet, DNS:cdt-dev-cafews-yabinx.emea1.cis.trcloud

Info: Retrieving plugin

Error: /File[/opt/puppetlabs/puppet/cache/lib]: Failed to generate additional resources using 'eval_generate': Server hostname 'cdt-dev-cafews-yabinx' did not match server certificate; expected one of cdt-dev-cafews-yabinx.emea1.cis.trcloud, DNS:puppet, DNS:cdt-dev-cafews-yabinx.emea1.cis.trcloud

Error: /File[/opt/puppetlabs/puppet/cache/lib]: Could not evaluate: Could not retrieve file metadata for puppet:///plugins: Server hostname 'cdt-dev-cafews-yabinx' did not match server certificate; expected one of cdt-dev-cafews-yabinx.emea1.cis.trcloud, DNS:puppet, DNS:cdt-dev-cafews-yabinx.emea1.cis.trcloud

Error: Could not retrieve catalog from remote server: Server hostname 'cdt-dev-cafews-yabinx' did not match server certificate; expected one of cdt-dev-cafews-yabinx.emea1.cis.trcloud, DNS:puppet, DNS:cdt-dev-cafews-yabinx.emea1.cis.trcloud

Warning: Not using cache on failed catalog

Error: Could not retrieve catalog; skipping run

Error: Could not send report: Server hostname 'cdt-dev-cafews-yabinx' did not match server certificate; expected one of cdt-dev-cafews-yabinx.emea1.cis.trcloud, DNS:puppet, DNS:cdt-dev-cafews-yabinx.emea1.cis.trcloud

其实它已�l�告诉你了，改一�?etc/hosts���可以了�Q�改成下面的其中一�?/span>

expected one of cdt-dev-cafews-yabinx.emea1.cis.trcloud, DNS:puppet, DNS:cdt-dev-cafews-yabinx.emea1.cis.trcloud

sudo /opt/puppetlabs/bin/puppet agent --test

Warning: Unable to fetch my node definition, but the agent run will continue:

Warning: SSL_connect returned=1 errno=0 state=error: certificate verify failed: [unable to get local issuer certificate for /CN=cdt-dev-cafews-yabinx2.emea1.cis.trcloud]

Info: Retrieving pluginfacts

Error: /File[/opt/puppetlabs/puppet/cache/facts.d]: Failed to generate additional resources using 'eval_generate': SSL_connect returned=1 errno=0 state=error: certificate verify failed: [unable to get local issuer certificate for /CN=cdt-dev-cafews-yabinx2.emea1.cis.trcloud]

Error: /File[/opt/puppetlabs/puppet/cache/facts.d]: Could not evaluate: Could not retrieve file metadata for puppet:///pluginfacts: SSL_connect returned=1 errno=0 state=error: certificate verify failed: [unable to get local issuer certificate for /CN=cdt-dev-cafews-yabinx2.emea1.cis.trcloud]

Info: Retrieving plugin

Error: /File[/opt/puppetlabs/puppet/cache/lib]: Failed to generate additional resources using 'eval_generate': SSL_connect returned=1 errno=0 state=error: certificate verify failed: [unable to get local issuer certificate for /CN=cdt-dev-cafews-yabinx2.emea1.cis.trcloud]

Error: /File[/opt/puppetlabs/puppet/cache/lib]: Could not evaluate: Could not retrieve file metadata for puppet:///plugins: SSL_connect returned=1 errno=0 state=error: certificate verify failed: [unable to get local issuer certificate for /CN=cdt-dev-cafews-yabinx2.emea1.cis.trcloud]

Error: Could not retrieve catalog from remote server: SSL_connect returned=1 errno=0 state=error: certificate verify failed: [unable to get local issuer certificate for /CN=cdt-dev-cafews-yabinx2.emea1.cis.trcloud]

Warning: Not using cache on failed catalog

Error: Could not retrieve catalog; skipping run

Error: Could not send report: SSL_connect returned=1 errno=0 state=error: certificate verify failed: [unable to get local issuer certificate for /CN=cdt-dev-cafews-yabinx2.emea1.cis.trcloud]

一般这�U�情况就是由于某�U�原因没有认证没有成功，但它又不会重新认证了�Q�所以就报这个错误，解决办法是到�q�个目录�?etc/puppetlabs/puppet�Q�把生成的ssl文�g夹给删除�Q�让它重新生成一�ơkey。如果生成一�ơ还没有成功的话�Q�你要看一下是不是其它地方的问题，然后�Q�要重新重复上面的步骤，重新生成密钥�?/span>

眼镜�?/a> 2016-12-16 17:09 发表评论

Puppet的安装与配置

Thu, 15 Dec 2016 09:04:00 GMT

在安装之前，先简单说一下Puppet的构成。Puppet分�ؓ两部分，一部分叫Puppet Server 也叫 Puppet Master�Q?新版本好像开始叫Server了。另一部分�Q�叫Agent。�ؓ什么叫做一部分�Q�而不叫一个，道理很简单，��是可以有多台。好了费话不多说正式开�?br />先确定一下自��q��pȝ��版本�Q�可以通过执行下面的命令查看：

cat /etc/redhat-release

如果是Enterprise Linux 7��执行这�?br />

sudo rpm -Uvh https://yum.puppetlabs.com/puppetlabs-release-pc1-el-7.noarch.rpm

Enterprise Linux 6

sudo rpm -Uvh https://yum.puppetlabs.com/puppetlabs-release-pc1-el-6.noarch.rpm

Ubuntu 16.04 Xenial Xerus

wget https://apt.puppetlabs.com/puppetlabs-release-pc1-xenial.deb
sudo dpkg -i puppetlabs-release-pc1-xenial.deb
sudo apt update

Ubuntu 15.10 Wily Werewolf

wget https://apt.puppetlabs.com/puppetlabs-release-pc1-wily.deb
sudo dpkg -i puppetlabs-release-pc1-wily.deb
sudo apt update

Ubuntu 14.04 Trusty Tahr

wget https://apt.puppetlabs.com/puppetlabs-release-pc1-trusty.deb
sudo dpkg -i puppetlabs-release-pc1-trusty.deb
sudo apt-get update

Ubuntu 12.04 Precise Pangolin

wget https://apt.puppetlabs.com/puppetlabs-release-pc1-precise.deb
sudo dpkg -i puppetlabs-release-pc1-precise.deb
sudo apt-get update

Debian 8 Jessie

wget https://apt.puppetlabs.com/puppetlabs-release-pc1-jessie.deb
sudo dpkg -i puppetlabs-release-pc1-jessie.deb
sudo apt-get update

Debian 7 Wheezy

wget https://apt.puppetlabs.com/puppetlabs-release-pc1-wheezy.deb
sudo dpkg -i puppetlabs-release-pc1-wheezy.deb
sudo apt-get update

如果遇到�q�个错误�Q�应该是你的rpm没有讄��代理�Q�请看文章结��N��误汇�?br />curl: (7) couldn't connect to host

接下来用YUM安装

sudo yum install puppetserver

�?br />

apt-get install puppetserver

遇到�q�个错误是YUM没有讄��代理�Q�文章结��N��题汇�?

28, 'connect() timed out!'

接下来就可以正常启动�?br />
sudo service puppetserver start

可以通过如下命��o查看是否启动成功
sudo service puppetserver status

默认它会分配2G内存�Q�需要调整的话，可以在这�?br />
/etc/sysconfig/puppetserver -- RedHeat
/etc/default/puppetserver  -- Debian


接下来在另外一台器上安装agent
用相同的�Ҏ(gu��)��先下载资源包�Q�sudo rpm xxxx,�{?�?br />然后�Q�安装agent
sudo yum install puppet
通过如下命��o启动agent
sudo service puppet start
通过如下命��o查看是否启动成功
service puppet status

https://yum.puppetlabs.com/puppetlabs-release-pc1-el-6.noarch.rpm

Retrieving https://yum.puppetlabs.com/puppetlabs-release-pc1-el-6.noarch.rpm

curl: (7) couldn't connect to host

error: skipping https://yum.puppetlabs.com/puppetlabs-release-pc1-el-6.noarch.rpm - transfer failed

sudo rpm -Uvh --httpproxy http://webproxy.lon.corp.services --httpport 80 https://yum.puppetlabs.com/puppetlabs-release-pc1-el-6.noarch.rpm

在安装过�E�中�Q�如果Yum不能下蝲的话�Q�可能没有设�|�代理，

执行 sudo vi /etc/yum.conf 然后加上代理

proxy=http://xxxxxxxxxx:80

puppet 默认使用8140�Q�查看��端口占用情况
sudo netstat -nlatp | grep 8140

眼镜�?/a> 2016-12-15 17:04 发表评论

Mon, 18 Jul 2016 09:18:00 GMT

之前写了一��关于�?a href="http://www.aygfsteel.com/Noah/articles/404846.html" target="_blank">用Mockito�l�过DAO层直接去��试Service�?/a>》，不太全面�Q�这�ơ对之前的做了点补充
有的时候这个方法的�q�回值是通过参数�q�回的。比如类��g��q�样�Q?br />

public void test(Map map){
//do something
map.put("response","success");
}

�q�个时候需要这样��用：

when( myMock.someMethod( any( Map.class ) ) ).thenAnswer( ( new Answer() {
    @Override
    public Void answer( InvocationOnMock invocation )
            throws Throwable {
        Object[] args = invocation.getArguments();
        Map arg1 = (Map)args[0];
        arg1.put("response", "failed");
        return null;
    }
} ) );

�q�有一�U�用法，�q�回参数值做为函数返回�?br />

mockito 1.9.5之后�Q�提供一个方便的�Ҏ(gu��)��来实现这个需要，在这之前可以使用一个匿名函数来�q�回一个answer来实现�?/div>

when(myMock.myFunction(anyString())).then(returnsFirstArg());

其中returnsFirstArg()是org.mockito.AdditionalAnswers中的一个静态方法�?/span>
在这个类中还有其他的一些类似方�?/span>
returnsSecondArg()

returnsLastArg()

ReturnsArgumentAt(int position)

眼镜�?/a> 2016-07-18 17:18 发表评论

JSF学习日志

Wed, 26 Nov 2014 05:38:00 GMT

1.Bean中这样写�Q�页面上直接调用

@Named("bean1") // or @ManagedBean(name="bean1") or 不指定名字，默认Bean的名�Q�sampleBean
@SessionScoped
public class SampleBean {
    public int getLuckyNumber() {  }
    public void setLuckyNumber(int value) {  }
    public String login() {
    if () return "success"; else return "error";
    }
}

��面�q�样写，直接调相应的�Ҏ(gu��)��

2.��链�?br />

<h:link outcome="#{custVM.gotoDetail}" includeViewParams="true" target="_blank">
      <f:param name="scmNo" value="#{warr.project_no}"/>
      <f:param name="custNo" value="#{warr.cust_no}"/>
      <f:param name="custName" value="#{warr.cust_name}"/>
<h:outputText value="#{warr.accrued_amt}">
           <f:convertNumber currencySymbol="$" type="currency" />
      h:outputText>
h:link>

在目标页面写下面�q�个�Q�这样就可以传过来了

<f:metadata>
     <f:viewParam name="scmNo" value="#{custVM.scmNo}" />
     <f:viewParam name="custNo" value="#{custVM.custNo}" />
     <f:viewParam name="custName" value="#{custVM.custName}" />
f:metadata>

3.下拉菜单写法�Q?br />

private List monthItems; //它有自己的SelectItem �c�，用来存键值对�?/span>

    @PostConstruct
    public void init() {
        Calendar now = Calendar.getInstance();
        date = now.getTime();
        monthItems = new ArrayList();
        try {
            List monthList = amoritizateService.getMonthList();
            for(Date month:monthList){
                monthItems.add(new SelectItem(month, DateUtil.format(month, "yyyy - MM")));
            }
        } catch (Exception e) {
            LOG.error("ERROR!",e);
        }

    }

��面可以直接�q�样写：

<p:selectOneMenu value="#{amoritizateVM.date}" converter="monthItemConverter" style="width:145px">
<f:selectItems value="#{amoritizateVM.monthItems}">f:selectItems>
p:selectOneMenu>

�q�里面用��C��另外一个知识点Converter,用来转换�c�d��Q�比如这里是用来Date和String的互转，所以要写上�q�个�c?br />

/**
只要实现它的接口�Q�它会自动完成�{换，�q�是很方便的
*/
@FacesConverter("monthItemConverter")
public class MonthItemConverter implements Converter {

    private static final Logger LOG = LoggerFactory.getLogger(MonthItemConverter.class);

    @Override
    public Object getAsObject(FacesContext arg0, UIComponent arg1, String arg2) {
        return DateUtil.parseDate(arg2);
    }

    @Override
    public String getAsString(FacesContext arg0, UIComponent arg1, Object arg2) {
        return DateUtil.format((Date)arg2);
    }

}

4.表单提交的话�Q�用�q�个

<p:commandButton value="Query" update="dataForm"/>

�q�里面的update要对应这个页面里的form的id

<h:form id="dataForm">

眼镜�?/a> 2014-11-26 13:38 发表评论

mod_jk(Apache+mod_jk+tomcat)配置全攻略[转]

Fri, 01 Nov 2013 10:04:00 GMT

摘要: 首先虽然�q�个mod_jk已经�q�时�Q�但�q�是攑և�来大家一起学习一下，文章主要分三部分内容�Q? 1.�W�一部分�Q�说明主要配�|�过�E?2.�W�二部分�Q�脓(chu��ng)出我的httpd.conf文�g 3.�W�三部分�Q�对mod_jk代码讲解(来源癑ֺ�) �W�一部分�Q�配�|?1. 准备环境�Q?操作�pȝ��Q�windows7 httpd-2.2.21-win32-x86-no_ssl.msi apache-to... 阅读全文

眼镜�?/a> 2013-11-01 18:04 发表评论

Apache转发��h��到Glassfish

Fri, 01 Nov 2013 09:52:00 GMT

服务器的架设中，很多时候处于安全和性能上的一些需要，会用Apache来处理前端的一些请求，比如囄��了一些东�ѝ��也��Z��安全考虑�Q�只允许用户可以讉K��到Apache�Q�所有有兛_��态交互的讉K��数据库的东西都在另外一台或几台服务上，�q�台服务器只有Apache可以讉K��Q�用��h��不能讉K��到的�?br />所以这里就来说一下，�q�样的一个网�l�结构，应该怎么实现�E�序的正常处理�?br />
首先下蝲mod_jk.so�Q?br />windows:http://archive.apache.org/dist/tomcat/tomcat-connectors/jk/binaries/win32/
Linux:http://archive.apache.org/dist/tomcat/tomcat-connectors/jk/binaries/linux/jk-1.2.21/
下蝲后，如果名字不一��P��要改成和�q�个名字一��L��Q�然后放�|�在apache的modules目录�?br />然后在apache的conf目录新徏一个workers.properties文�g�Q�内容如下：

# Define 1 real worker using ajp13
worker.list=worker1
# Set properties for worker1 (ajp13)
worker.worker1.type=ajp13
worker.worker1.host=127.0.0.1
# 好多人都�?080端口
# 但如果用了的话，��׃��被apache占用�Q?br /># �q�样��无法直接访问Glassfish�?br />worker.worker1.port=9090
worker.worker1.lbfactor=1
worker.worker1.cachesize=128
worker.worker1.cache_timeout=600
worker.worker1.socket_keepalive=1
#worker.worker1.reclycle_timeout=300

需要注意的是，host和port。host��是GlassFish所在主机的ip�Q�端口就是GlassFish打开jk支持的Network Listener所监听的端口。GlassFish如何打开jk支持下文会讲�q��?br />然后修改apache的httpd.conf文�g�Q�加入一些jk相关的配�|�：

<IfModule !mod_jk>
LoadModule jk_module "modules/mod_jk.so"
IfModule>

# Where to find workers.properties
JkWorkersFile conf/workers.properties
# Where to put jk logs
JkLogFile logs/mod_jk.log
# Set the jk log level [debug/error/info]
JkLogLevel info
# Select the log format
JkLogStampFormat "[%a %b %d %H:%M:%S %Y] "
# JkOptions indicate to send SSL KEY SIZE,
JkOptions +ForwardKeySize +ForwardURICompat -ForwardDirectories
# JkRequestLogFormat set the request format
JkRequestLogFormat "%w %V %T"
JkShmFile logs/mod_jk.shm

JkMount /*.jsp worker1
JkMount /*.action worker1
JkMount /*.do worker1

下面配置GlassFish v3�Q?/p>

通过��览器进入GlassFish v3的admin console�Q�展开configuration->network config->network listeners�Q�页面会列出现有的所有监听的端口。例如默认的http-listener1监听8080�Q�http-listener2监听8181�Q�admin-listener监听4848�?br />刚才说了��Z��不媄�?Glassfish的单独访问，�q�里我们不用8080�Q�我们可以新��Z��个Listener,除了端口以外其它都一�?如图
然后建成功后�Q�点击进入，��N��上 JK Listener�?br />
�q�样以来�Q�所有有兛_��态解析的一些请求就会�{�l�Glassfish处理了�?br />

眼镜�?/a> 2013-11-01 17:52 发表评论

JBOSS性能优化

Mon, 13 Dec 2010 01:15:00 GMT

一.调整JBOSS最大连接数.

配置deploy/jboss-web.deployer/server.xml文�g .
                port="8080"
         address="0.0.0.0"
         maxThreads="1600"
         minSpareThreads="100"
         maxSpareThreads="250"
         emptySessionPath="false"
         enableLookups="false"
         redirectPort="8443"
         acceptCount="800"
         connectionTimeout="20000"
         disableUploadTimeout="true"
         URIEncoding="UTF-8"
         />
maxThreads�Q�表�C�最多同时处理的�q�接数。应该将�U�程敎ͼ�最大线�E�数�Q�设�|�比最大预期负载（同时�q�发的点击）�?font face="Times New Roman">25%�Q�经验规则）�?br /> acceptCount�Q�当同时�q�接的�h数达到maxThreads�Ӟ��q�可以接收排队的�q�接�?/p>

minSpareThread�Q�指“启动以后�Q��L��保持该数量的�U�程�I�闲�{�待”�Q�设�|�比预期负蝲�?font face="Times New Roman">25%�?/font>

maxSpareThread�Q�指“如果��过�?/font>minSpareThread�Q�然后��L��保持该数量的�U�程�I�闲�{�待”�Q�设�|�比预期负蝲�?font face="Times New Roman">25%�?/font>

其中主要修改两个参数maxThreads和acceptCount倹{��增加maxThreads�Q�减��acceptCount值有利羃短系�l�的响应旉��。但是maxThreads和acceptCount的��d��最高��g��能超�q?000�Q�而且maxThreads�q�大会增加CPU和内存消耗，故低配置用户可通过降低maxThreads�q�同时增大acceptCount值来保证�pȝ��的稳定�?/p>

下表�|�列��Z��在不同�ƈ发情况下jboss参数与�ƈ发在�U�的一般关�p�R�?br />

�q�发�?/p>	服务器内�?/p>	jboss参数
		maxThreads	acceptCount
50以下	2G	256	800
50-300	4G	600	1024
300-800	8G	1024	1528
800-1000	8G	1024	2048
1000-1200	12G	1526	2048
1200-1500	16G	2048	2048

�?调整 jvm参数

A�Q�JVM启动参数共分��Z��c�：
        其一是标准参敎ͼ�-�Q�，所有的JVM实现都必��d��现这些参数的功能�Q�而且向后兼容�Q?br />         其二是非标准参数�Q?X�Q�，指的是JVM底层的一些配�|�参敎ͼ��q�些参数在一般开发中默认卛_��Q�不需要�Q何配�|�。但是在生��环境中，�q�不保证所有jvm实现都满��I��所以�ؓ了提高性能�Q�往往需要调整这些参敎ͼ�以求�pȝ��辑ֈ�最��x��能。另外这些参��C��保证向后兼容�Q�也��x��?#8220;如有变更�Q�恕不在后箋版本的JDK通知”�Q�这是官�|�上的原话）�Q?br />         其三是非Stable参数�Q?XX�Q�，�q�类参数在jvm中是不稳定的�Q�不适合日常使用的，后箋也是可能会在没有通知的情况下��q��接取消了�Q�需要慎重��用�?br /> B�Q��?strong>JVM 内存又可分�ؓ三个主要的域 �Q?br />         新域、旧域以及永久域。JVM生成的所有新对象攑֜�新域中。一旦对象经历了一定数量的垃圾攉��循环后，便进入旧域。而在�怹�域中是用来存储JVM自己的反��对象的�Q�如class和method对象�Q�而且GC(Garbage Collection)不会在主�E�序�q�行期对�怹�域进行清理。其中新域和旧域属于堆，�怹�域是一个独立域�q�且不认为是堆的一部分�?br /> C�Q�各主要参数的作用如�?/strong> �Q?br />         -Xms�Q�设�|�jvm内存的初始大��?br />         -Xmx�Q�设�|�jvm内存的最大�?br />         -Xmn�Q�设�|�新域的大小�Q�这个似乎只�?jdk1.4来说是有效的�Q�后来就废弃了）
        -Xss�Q�设�|�每个线�E�的堆栈大小(也就是说,在相同物理内存下�Q�减��这个��D��生成更多的线�E?
        -XX�Q�NewRatio :讄��新域与旧域之比，�?XX�Q�NewRatio = 4��p��C�新域与旧域之比�?�Q?
        -XX:NewSize�Q�设�|�新域的初始�?br />         -XX:MaxNewSize �Q�设�|�新域的最大�?br />         -XX:PermSize�Q�设�|�永久域的初始�?br />         -XX:MaxPermSize�Q�设�|�永久域的最大�?br />         -XX:SurvivorRatio=n:讄��新域中Eden��Z��两个Survivor区的比倹{��（Eden��Z��要是用来存放新生的对象，而两�?Survivor区则用来存放每次垃圾回收后存�z�M��来的对象�Q?br /> D�Q�常见的错误 �Q?br />         java.lang.OutOfMemoryError�怿�很多开发�h员都用到�q�，�q�个主要��是JVM参数没有配好引�v的，但是�q�种错误又分两种�Q�java.lang.OutOfMemoryError: Java heap space和java.lang.OutOfMemoryError: PermGen space�Q�其中前者是有关堆内存的内存溢出�Q�可以同�q�配�|?Xms�?Xmx参数来设�|�，而后者是有关�怹�域的内存溢出�Q�可以通过配置 -XX:MaxPermSize来设�|��?br />

下面是个例子,��h��据实际情况进行修�?修改run.conf文�g中的如下内容�Q?/font>
JAVA_OPTS="-Xms256m -Xmx2048m -XX:NewSize=256m -XX:MaxNewSize=512m -XX:PermSize=128m -XX:MaxPermSize=256m -XX:+UseConcMarkSweepGC -XX:+CMSPermGenSweepingEnabled -XX:+CMSClassUnloadingEnabled -Djboss.platform.mbeanserver"

眼镜�?/a> 2010-12-13 09:15 发表评论

log4j详细配置

Wed, 18 Aug 2010 01:34:00 GMT

log4j.rootLogger=DEBUG,CONSOLE

#打印到控制台

log4j.appender.CONSOLE=org.apache.log4j.ConsoleAppender

log4j.appender.CONSOLE.Threshold=DEBUG

log4j.appender.CONSOLE.Target=System.out

#log4j.appender.CONSOLE.Encoding=GBK

log4j.appender.CONSOLE.layout=org.apache.log4j.PatternLayout

log4j.appender.CONSOLE.layout.ConversionPattern=[log] %d - %c -%-4r [%t] %-5p %c %x - %m%n

#log4j.appender.CONSOLE.layout.ConversionPattern=[start]%d{DATE}[DATE]%n%p[PRIORITY]%n%x[NDC]%n%t[THREAD] n%c[CATEGORY]%n%m[MESSAGE]%n%n

#

##打印到单一文�g

#log4j.appender.FILE=org.apache.log4j.FileAppender

#log4j.appender.FILE.File=info/info.log

#log4j.appender.FILE.Threshold=DEBUG

#log4j.appender.FILE.Append=false

##log4j.appender.FILE.Encoding=GBK

#log4j.appender.FILE.layout=org.apache.log4j.PatternLayout

#log4j.appender.FILE.layout.ConversionPattern=[log] %d - %c -%-4r [%t] %-5p %c %x - %m%n

## Use this layout for LogFactor 5 analysis

#

#

log4j.appender.ROLLING_FILE=org.apache.log4j.RollingFileAppender

log4j.appender.ROLLING_FILE.Threshold=INFO

log4j.appender.ROLLING_FILE.File=info/info

log4j.appender.ROLLING_FILE.Append=true

##log4j.appender.CONSOLE_FILE.Encoding=GBK

log4j.appender.ROLLING_FILE.MaxFileSize=3072KB

log4j.appender.ROLLING_FILE.MaxBackupIndex=10000000

log4j.appender.ROLLING_FILE.layout=org.apache.log4j.PatternLayout

log4j.appender.ROLLING_FILE.layout.ConversionPattern=[log]  %d   -  %c  -%-4r   [%t] %-5p %c %x - %m%n

## 每天生成一个文�?br />
#log4j.appender.Daily=org.apache.log4j.DailyRollingFileAppender

#log4j.appender.Daily.Threshold=DEBUG

#log4j.appender.Daily.File=daily/log

##log4j.appender.A1.Encoding=GBK

#log4j.appender.Daily.DatePattern='.'yyyy-MM-dd

#log4j.appender.Daily.layout=org.apache.log4j.PatternLayout

#log4j.appender.Daily.layout.ConversionPattern=[log]  %d   -  %c  -%-4r   [%t] %-5p %c %x - %m%n

#通过socket发�?br />
##log4j.appender.SOCKET=org.apache.log4j.RollingFileAppender

##log4j.appender.SOCKET.RemoteHost=localhost

##log4j.appender.SOCKET.Port=5001

##log4j.appender.SOCKET.LocationInfo=true

# Set up for Log Facter 5

##log4j.appender.SOCKET.layout=org.apache.log4j.PatternLayout

##log4j.appender.SOCET.layout.ConversionPattern=[start]%d{DATE}[DATE]%n%p[PRIORITY]% n%x[NDC]%n%t[THREAD]%n%c[CATEGORY]%n%m[MESSAGE]%n%n

# Log Factor 5 Appender

##log4j.appender.LF5_APPENDER=org.apache.log4j.lf5.LF5Appender

##log4j.appender.LF5_APPENDER.MaxNumberOfRecords=2000

#  通过mail发�?br />
##log4j.appender.MAIL=org.apache.log4j.net.SMTPAppender

##log4j.appender.MAIL.Threshold=FATAL

##log4j.appender.MAIL.BufferSize=10

##log4j.appender.MAIL.From=web@www.wuset.com

##log4j.appender.MAIL.SMTPHost=www.wusetu.com

##log4j.appender.MAIL.Subject=Log4J Message

##log4j.appender.MAIL.To=web@www.wusetu.com

##log4j.appender.MAIL.layout=org.apache.log4j.PatternLayout

##log4j.appender.MAIL.layout.ConversionPattern=[log] %d - %c -%-4r [%t] %-5p %c %x - %m%n

#   存储到数据库

##log4j.appender.DATABASE=org.apache.log4j.jdbc.JDBCAppender

##log4j.appender.DATABASE.URL=jdbc:mysql://localhost:3306/test

##log4j.appender.DATABASE.driver=com.mysql.jdbc.Driver

##log4j.appender.DATABASE.user=root

##log4j.appender.DATABASE.password=

##log4j.appender.DATABASE.sql=INSERT INTO LOG4J (Message) VALUES ([log] %d - %c -%-4r [%t] %-5p %c %x - %m%n')

##log4j.appender.DATABASE.layout=org.apache.log4j.PatternLayout

##log4j.appender.DATABASE.layout.ConversionPattern=[log]  %d     -   %c  -%-4r  [%t]  %-5p %c %x - %m%n

# IM账号

##log4j.appender.im = net.cybercorlin.util.logger.appender.IMAppender

##log4j.appender.im.host = mail.cybercorlin.net

##log4j.appender.im.username = username

##log4j.appender.im.password = password

##log4j.appender.im.recipient = corlin@cybercorlin.net

##log4j.appender.im.layout=org.apache.log4j.PatternLayout

##log4j.appender.im.layout.ConversionPattern   =[log]   %d   -   %c   -%-4r   [%t]   %-5p   %c   %x   - %m%n

眼镜�?/a> 2010-08-18 09:34 发表评论

Sun, 12 Jul 2009 05:19:00 GMT

一句话也不用多��_��

1#讄��囄��库中�Q�上传图片的大小�Q�单位是Bit
2ig.image.max.size=10240000
3#允许囄��上传的类�?br /> 4ig.image.extensions=.bmp,.gif,.jpeg,.jpg,.png,.tif,.tiff
5
6#讄��文档库中�Q�上传文件的大小�Q�单位是Bit
7dl.file.max.size=3072000
8
9#允许文档上传的类�?br /> 10dl.file.extensions=.bmp,.css,.doc,.dot,.gif,.gz,.htm,.html,.jpg,.js,.odb,.odf,.odg,.odp,.ods,.odt,.pdf,.png,.ppt,.rtf,.swf,.sxc,.sxi,.sxw,.tar,.tiff,.tgz,.txt,.vsd,.xls,.xml,.zip
11
12#��d��相关�Q�这个可以在企业��理里设�|�）
13company.security.auth.type=screenName
14company.security.auto.login=false
15company.security.send.password=false
16company.security.strangers=false
17open.id.auth.enabled=false
18
19#是否出现用户首次登陆的协议页�?br /> 20terms.of.use.required=true
21
22#默认用户布局
23#可以自己讄��上面要放的Portlet�?br /> 24default.user.layout.name=Home
25default.user.layout.template.id=3_columns
26default.user.layout.column-1=
27default.user.layout.column-2=
28default.user.layout.column-3=
29default.user.layout.column-4=
30
31#讄��默认的用��h��?br /> 32layout.default.template.id=2_columns_ii
33
34#Session控制
35session.timeout=30
36session.timeout.warning=1
37session.timeout.auto.extend=false
38
39#隐藏没权限的Portlet
40layout.show.portlet.access.denied=false
41#隐藏不活动的Portlet
42layout.show.portlet.inactive=false
43#讄��用户是否可以增加Portlet
44layout.add.portlets=true
45#讄��是否昄��最大化图标
46layout.guest.show.max.icon=true
47#讄��是否昄��最��化图标
48layout.guest.show.min.icon=false
49
50#权限讄��的读取�\�?br /> 51resource.actions.configs=resource-actions/default.xml
52
53#讄��默认的用户头�?br /> 54image.default.user.female.portrait=com/liferay/portal/dependencies/user_female_portrait.gif
55image.default.user.male.portrait=com/liferay/portal/dependencies/user_male_portrait.gif
56
57#讄��默认的Logo
58image.default.company.logo=com/liferay/portal/dependencies/company_logo.png
59
60#讄��认证登陆的页�?br /> 61auth.login.url=/web/12702/1
62#讄��d��后的��面路径
63default.logout.page.path=/web/12702
64
65#讄��默认的用戯��?br /> 66admin.default.role.names=Power User\nUser
67

眼镜�?/a> 2009-07-12 13:19 发表评论

Sun, 12 Jul 2009 05:02:00 GMT

登陆名如果用中文的话�Q�会出现��q��Q�导致无法验证通过。解决中文问题无非就是编码问题，其中需要�{换编码的有以下几个地方．

�W�一�Q�在Web.xml文�g里加上Filter�Q�对所有页面进行一�ơ编码�{换．

1<filter>
2        <description>EncodingFilterdescription>
3        <filter-name>EncodingFilterfilter-name>
4        <filter-class>com.xyb.EncodingFilterfilter-class>
5        <init-param>
6            <description>encoding_charsetdescription>
7            <param-name>encodingparam-name>
8            <param-value>gb2312param-value>
9        init-param>
10        <init-param>
11            <param-name>ignoreparam-name>
12            <param-value>trueparam-value>
13        init-param>
14filter>
15<filter-mapping>
16        <filter-name>EncodingFilterfilter-name>
17        <url-pattern>/*url-pattern>
18filter-mapping>

下面是EncodingFilter�c�：

1package com.xyb;
2
3import java.io.IOException;
4
5import javax.servlet.Filter;
6import javax.servlet.FilterChain;
7import javax.servlet.FilterConfig;
8import javax.servlet.ServletException;
9import javax.servlet.ServletRequest;
10import javax.servlet.ServletResponse;
11
12/** *//**
13*
14* @author XiangYabin
15*/
16public class EncodingFilter implements Filter {
17
18    protected String encoding = null;
19    protected FilterConfig filterConfig = null;
20    protected boolean ignore = true;
21
22    public void destroy() {
23
24        this.encoding = null;
25        this.filterConfig = null;
26
27    }
28
29    public void doFilter(ServletRequest request, ServletResponse response,
30            FilterChain chain)
31            throws IOException, ServletException {
32// Conditionally select and set the character encoding to be used
33        if (ignore || (request.getCharacterEncoding() == null)) {
34            String encoding = selectEncoding(request);
35            if (encoding != null)
36                request.setCharacterEncoding(encoding);
37        }
38
39// Pass control on to the next filter
40        chain.doFilter(request, response);
41
42    }
43
44    public void init(FilterConfig filterConfig) throws ServletException {
45
46        this.filterConfig = filterConfig;
47        this.encoding = filterConfig.getInitParameter("encoding");
48        String value = filterConfig.getInitParameter("ignore");
49        if (value == null)
50            this.ignore = true;
51        else if (value.equalsIgnoreCase("true"))
52            this.ignore = true;
53        else if (value.equalsIgnoreCase("yes"))
54            this.ignore = true;
55        else
56            this.ignore = false;
57
58    }
59
60    protected String selectEncoding(ServletRequest request) {
61
62        return (this.encoding);
63
64    }
65
66}

�W�二步，修改CAS登陆验证��面的编码，如果你没换过�q�个主题的话�Q�默认的是修改WEB-INF\view\jsp\default\ui\casLoginView.jsp文�g�Q�在最上面加上<%@ page pageEncoding="gb2312"%>。这里要特别注意一下，�q�个��面的编码要和上面XML文�g里写的编码一致�?/p>
�W�三步，修改验证成功后做跌��{的页面。也��是WEB-INF\view\jsp\protocol\2.0\casServiceValidationSuccess.jsp文�g�Q�在最上面加上<%@ page pageEncoding="UTF-8"%>。这里特别注意的是这个页面的�~�码要和你蟩转过�ȝ��那个��面的编码一��_��换句话说�Q�客��L��的验证页面的�~�码要和�q�个地方的一��_��不一致的话，要�{换一下�?/p>
�l�过�q�三步之后，理论上讲��已�l�可以验证通过了�?/p>

眼镜�?/a> 2009-07-12 13:02 发表评论

Liferay中��用CAS实现单点登陆(SSO)

Sun, 22 Feb 2009 04:53:00 GMT

单点登陆(SSO)的实现方式有很多�U�，�q�里所说的是用CAS实现�Q�这也是Liferay中所采纳的方式。至于什么是CAS�Q�单点登陆实现的原理�{�，�q�里不做解释�Q�直接一步一步明说实现方式，好了�Q�多一个字的费话也不说了�?/p>
�W�一步，创徏证书

keytool -genkey -alias tomcat -keystore c:\mykeystore -dname "CN=xyb, OU=localhost, O=localhost, L=SH, ST=SH, C=CN" -keypass 123456 -storepass 123456

PS:

-genkey         创徏一个证�?br /> -alias          证书的别�?br /> -keystore       指定生成此证书的路径(可不写，默认存在�pȝ��的Home目录�?keystore文�g�?br /> -storepass      指定密钥库的密码
-keypass        指定别名条目的密�?br /> -dname          指定证书拥有者信�?可不写，但，�pȝ��会提�C�Z��依次输入�q�些信息�Q�特别要注意“CN”的值是你想做�ؓCAS服务器的�q�台机器的域名或机器名，但就是不能是IP)
-keyalg         指定密钥的算�?可不�?
-validity       指定创徏的证书有效期多少�?可不写，默认�?0�?

�W�二步，导出证书

keytool -export -alias tomcat -keystore c:\mykeystore -file c:\mycerts.cer -storepass 123456

PS:

-export         ��别名指定的证书导出到文�?br /> -keystore       指定生成此证书的路径(上一步中写的什么这��写什么，如果没写�Q�这也不�?
-file           指定导出到文件的文�g�?/p>
�W�三步，把导出的证书导入到客��L��服务�?/p>
keytool -import -trustcacerts -alias tomcat -keystore "%JAVA_HOME%/JRE/LIB/SECURITY/CACERTS" -storepass 123456 -file c:\mycerts.cer

PS:

-import         ��已�{�֐�数字证书导入密钥�?br /> -file           指定要导入到密钥库的文�g�?也就是上一步导出的那个文�g)
有一个提�C�：是否信�Q�q�个证书�Q�输�?Y�Q�回车�?/p>
�W�四步，下蝲cas集成包。将下蝲后的文�g改名为cas-web�Q�放�|�在liferay的webapps目录下，在conf/server.xml中找��C��面这�D�，��L��原有的注释�ƈ修改为：

<Connector port="8443" maxHttpHeaderSize="8192" maxThreads="150" minSpareThreads="25" maxSpareThreads="75" enableLookups="false" disableUploadTimeout="true" acceptCount="100" scheme="https" secure="true" clientAuth="false" sslProtocol="TLS" URIEncoding="UTF-8"  keystorePass="123456" keyAlias="tomcat"/>

�W�五步，在Liferay的webapps\ROOT\WEB-INF\classes\portal-ext.properties下添加如下内容：

cas.auth.enabled=true
cas.login.url=https://xyb:8443/cas-web/login
cas.logout.url=https://xyb:8443/cas-web/logout
cas.server.name=客户端IP:8080
cas.service.url=
#cas.service.url=http://localhost:8080/c/portal/login
cas.validate.url=https://xyb:8443/cas-web/proxyValidate

如果没在Liferay下，只是普通的Web�E�序可用Filter来实玎ͼ�打开Web-INF\Web.XML文�g�Q�增加如下代�?/p>

<filter>
        <filter-name>CASFilterfilter-name>
        <filter-class>edu.yale.its.tp.cas.client.filter.CASFilterfilter-class>
        <init-param>
            <param-name>edu.yale.its.tp.cas.client.filter.loginUrlparam-name>
            <param-value>https://xyb:8443/cas-web/loginparam-value>
        init-param>
        <init-param>
            <param-name>edu.yale.its.tp.cas.client.filter.validateUrlparam-name>
            <param-value>https://xyb:8443/cas-web/proxyValidateparam-value>
        init-param>
        <init-param>
          <param-name>edu.yale.its.tp.cas.client.filter.serverNameparam-name>
          <param-value>localhost:8080param-value>
        init-param>
    filter>

    <filter-mapping>
        <filter-name>CASFilterfilter-name>
        <url-pattern>/*url-pattern>
    filter-mapping>

最后一步，在客��L��获取CAS认证通过的用户名�Q��ƈ修改�w�䆾验证�E�序为只通过用户名来验证。如是在Liferay下就不用做这一步了�Q�Liferay中本�w�的验证是ScreenName字段

1、在JSP或Servlet中的用法�Q?/p>
<%@ page import="edu.yale.its.tp.cas.client.filter.CASFilter" %>
<%@ page import="javax.servlet.http.HttpServletRequest" %>
<%@ page import="javax.servlet.http.HttpSession" %>
<%
HttpSession ses = request.getSession();

String screenName =
(String)ses.getAttribute(CASFilter.CAS_FILTER_USER);
System.out.println("screenName==:"+screenName);
%>

2、在Java中通过 Session 获取��d��用户�?/p>
// 以下两者都可以
session.getAttribute(CASFilter.CAS_FILTER_USER);
session.getAttribute("edu.yale.its.tp.cas.client.filter.user");

3、在 JSTL 中获取用户名的方�?/p>
<c:out value="${sessionScope[CAS:'edu.yale.its.tp.cas.client.filter.user']}"/>

问题汇总：

严重: edu.yale.its.tp.cas.client.CASAuthenticationException: Unable to validate ProxyTicketValidator [[edu.yale.its.tp.cas.client.ProxyTicketValidator prox
yList=[null] [edu.yale.its.tp.cas.client.ServiceTicketValidator casValidateUrl=[https://192.168.1.111:8443/cas/proxyValidate] ticket=[ST-0-9h7Mx5HK3pfsdxRv
MD3y] service=[http%3A%2F%2F192.168.1.222%3A8080%2Fservlets-examples%2Fservlet%2FHelloWorldExample] renew=false]]]

�q�个CAS异常是从CAS Client里面抛出�Q�是当我们不使用证书的CN去访问域名的时候（比如上文是用IP讉K��而且证书的CN是该IP对应的域名而非该IP�Q�，CASClient无法信�Q�Q�也��是我上面特意提到的那个CN的问题。要特别注意�?/p>
�q�有一�U�情况就是客��L��证书没有导入,同样也报�q�个错误,最�l�可以归��Z��句话,肯定是证书验证没有通过所�?

INFO [org.jasig.cas.authentication.AuthenticationManager
Impl] - ng credentials: [username: test]>

��q��错误�Q�可能是客户端的那个配置文�g里写的不太对。也��是上面说的�W�五步，要多注意一下�?/p>

java.io.IOException: Cannot recover key
        at org.apache.tomcat.util.net.jsse.JSSE14SocketFactory.init(JSSE14Socket
Factory.java:125)
        at org.apache.tomcat.util.net.jsse.JSSESocketFactory.createSocket(JSSESo
cketFactory.java:88)
        at org.apache.tomcat.util.net.PoolTcpEndpoint.initEndpoint(PoolTcpEndpoi
nt.java:292)
        at org.apache.coyote.http11.Http11BaseProtocol.init(Http11BaseProtocol.j
ava:138)
        at org.apache.catalina.connector.Connector.initialize(Connector.java:101

�q�种错误�Q�可能是你生成的证书有问题，如果keypass和storepass的密码不一致也会把�q�个�?不知��Z��么非要设成一��L��)

眼镜�?/a> 2009-02-22 12:53 发表评论

Java获取当前日期的前一个月�Q�前一天的旉��

Thu, 08 Jan 2009 15:20:00 GMT

1Calendar calendar = Calendar.getInstance();
2        calendar.add(Calendar.DATE, -1);    //得到前一�?/span>
3        calendar.add(Calendar.MONTH, -1);    //得到前一个月
4        int year = calendar.get(Calendar.YEAR);
5        int month = calendar.get(Calendar.MONTH)+1;
注意月䆾加一

眼镜�?/a> 2009-01-08 23:20 发表评论

亚洲a在线视频,天堂精品在线视频,国产乱子伦精品

Puppet的server端与agent端的通信建立

Puppet的安装与配置

JSF学习日志

mod_jk(Apache+mod_jk+tomcat)配置全攻略[转]

Apache转发��h��到Glassfish

JBOSS性能优化

log4j详细配置

Liferay中��用CAS实现单点登陆(SSO)

Java获取当前日期的前一个月�Q�前一天的旉���

Java获取当前日期的前一个月�Q�前一天的旉��