J2SDK 1.4._16 on Windows X64 for EP7 installation

[Former Member]

Hi There,

We are planning to migrate our Portral to EP7 on Windows x64 hardware. As per SAP Note 941595, we can only download 1.4.2_16 from Sun web site for x64 hardware. This J2SDK version is available only for SAP Customers.

But, as per Note 716604,

With 1.4.2_14, 1.4.2_15 and 1.4.2_16 you get an exception using Kerberos authentication with WebAS Java (see note 1057474). As a workaround you have to switch back to 1.4.2_13. A fix is promised with 1.4.2_17.

Did anyone used 1.4.2_16 and successfully configured Kerberos?

We intend to configure Kerberos authentication i.e Windows integrated authentication with Active Directory.

Your comments would be appreciated.

Regards

Chandu

P.S : Points will be awarded for useful information/suggestions.

[golo_maichel · Accepted solution]

To make SpnegoLoginModule work with the SUN JDK 1.4.2_14+ try to set the new JAAS property isInitiator to false.

com.sun.security.jgss.accept

{

com.sun.security.auth.module.Krb5LoginModule required

isInitiator=false

debug=true

useKeyTab=true

useTicketCache=false

storeKey=true

principal="..."

doNotPrompt=true

refreshKrb5Config=true;

};

We are using 1.4.2.16 with and Microsoft Server 2003 amd64 and Kerberos works fine.

Best regards

Golo Maichel

[Former Member · Accepted solution]

Thanks Golo.

I would appreciate, if you can send me the URL link, where I can download the J2SDK 1.4._16.

Regards

Chandu

[golo_maichel · Accepted solution]

Hi,

You can download the j2sdk for X64 from the following link,by registering

http://javashoplm.sun.com/ECom/docs/Welcome.jsp?StoreId=22&PartDetailId=j2sdk-1.4.2_13-amd64-JPR&Sit...

or else see this SAPnote - 941595 .

Hopefully,this link also helpful to you -

[former_member247431]

Hello Chandu,

I also could not found older versions to download. You can find older versions if you modify the download URL in the browser - instead of 17 put 16 or 13 at ProductRef=j2sdk-1.4.2_16.... not perfect but it works!

-

---

[download|https://cds.sun.com/is-bin/INTERSHOP.enfinity/WFS/CDS-CDS_Developer-Site/en_US/-/USD/ViewProductDetail-Start?ProductRef=j2sdk-1.4.2_16-amd64-JPR@CDS-CDS_Developer|download]

regards

Stefan

[Former Member]

1.4.2_16 is now provided by SAP as the correct JDK.

Here is the workaround step to getting SPNEGO working...

In Visual Administrator

Expand any server node

Services > Security Provider

Under the Policy Configurations tab, select "com.sun.security.jgss.accept" from the components list

In the list of login modules, select "com.sun.security.auth.module.Krb5LoginModule"

Modify the Login module and add isInitiator=false

Restart the Instance

[Former Member]

Thanks Frank for the update. I really appreciate it.

Where can I download this? SAP Note 941595 has links for 1.4._17.

Regards

Chandu

[Former Member]

Chandhu:

One thing to be careful with is that starting with NW Portal 7.0 SPS12 we started seeing Full GC issues. Instability but not crashes or OOM. We notice long Full GC's in the Benchmark Lab and also in Production with 30,000 named users. Be careful with this 1.4.2_13 version and SPS's later than SPS12, prior to SPS12 we were ok.

We are pressuring SAP and Sun to get us the 1.4.2_17 fix, and will update when we get this release and have tested fully,

Regards,

Frank Ober

[Former Member]

Hi Frank,

Thanks for sharing your experiences. I really appreciate it.

Please do update when SUN release 1.4.2_17 and after your testing is complete.

Would you recommend apply only SPS11 until such issues are resolved.

Also, can you please elaborate on the issues you encountered?

Regards

Chandu

[Former Member]

Hi Chandu:

Yes stick with pre SPS12, we were on SPS10 and SPS12 made memory management unstable specifically with the Full Garbage Collections only. This is of course a serious thing as Full GC's creates a stop the world scenario for the Java Server Process and is indeed a problem. We are struggling now with user slowdowns and basically long running GC's. For nearly 2 years we had 5-7 second averages for Full GC's over many samples (a full week or hundreds of GC's). The situation has changed and we are now in a state where full GC durations are closer to 10 - 20 seconds on average, and we have some random Full GC's that last up to 300 seconds. This is bad.

So there you have some more detail, we are not overly custom, and we are working with Sun and SAP to resolve our situation,

It should be noted that we are very large scale site with over 40 java server process nodes active, sized for 100,000 named accounts, and 1,000,000 page views per weeks. It is possible our situation is rare because of our scale and the node synchronization relative to our very large cluster.

Be aware,

Frank Ober

[Former Member]

Thanks Frank.

Please do update when the next version of J2SDK is released for X64.

Regards

Chandu

[Former Member]

SAP is recommending 1.4.2_16 now for installation of EP 7.0, here is the configuraiton step to make Kerberos work with releases beyond 1.4.2_13 of the JDK

In Visual Administrator

Expand any server node

Services > Security Provider

Under the Policy Configurations tab, select "com.sun.security.jgss.accept" from the components list

In the list of login modules, select "com.sun.security.auth.module.Krb5LoginModule"

Modify the Login module and add isInitiator=false

Restart the Instance

[Former Member]

Frank,

Also, can you tell me the SAP note where they recommended 1.4._16 for EP 7.0?

Regards

Chandu

[Former Member]

good that your problem got solved.

Here are the Links, this might help others who are searching for J2sdk 1.4.2 x64 bit version for SAP installation.

Check these links:-

https://cds.sun.com/is-bin/INTERSHOP.enfinity/WFS/CDS-CDS_Developer-Site/en_US/-/USD/ViewProductDeta...

http://java.sun.com/j2se/1.4.2/SAPsite/download.html

https://cds.sun.com/is-bin/INTERSHOP.enfinity/WFS/CDS-CDS_Developer-Site/en_US/-/USD/DownloadSingleS...

by

raghav

[Former Member]

Resolved.

You can download 1.4.2_13 from the following URL:

http://javashoplm.sun.com/ECom/docs/Welcome.jsp?StoreId=22&PartDetailId=j2sdk-1.4.2_13-amd64-JPR&Sit...

Regards

Chandu

[Former Member]

I seem to remember in this case SAP recommend you use JDK 1.4.2_13.

You can DEFINATELY download this version from java.sun.com - I did, just last week ....

Haydn

[Former Member]

I have also downloaded this version. But, I am concerned about the kerberos issues as mentioned in the SAP note.

Regards

Chandu

[Former Member]

You can go here http://java.sun.com/products/archive/ and select the exact version you need.

Haydn

[Former Member]

I though the note was quite clear - if you want to use Kerberos (with AD) for authentication then you should use _13.

As _17 (with the supposed fix) is not available you have little choice I guess.

Haydn

[Former Member]

I have already checked these archives. J2SDK 1.4_13 is not available for Windows x64 platforms. The only version available is J2SDK 1.4._16 for Windows x64 platform, which brings to my original question of kerberos config.

Regards

Chandu

[Former Member]

1.4.2 at any revision can be installed on x64 platforms - this should help you http://java.sun.com/products/archive/j2se/1.4.2_13/install-windows-64.html

go to http://java.sun.com/products/archive/j2se/1.4.2_13/index.html and select download - you will find the x64 version about half way down the list.

Haydn

[Former Member]

That's for IA64 platforms not for X64 platforms. Any SAP note on installing any 1.4.2 version for x64 platforms?

Regards

Chandu

[Former Member]

yes many appologies, I missed the X bit !!!!

Dont think there is any difference? Perhaps someone can confirm but there isnt an x64 _16 either - well not that I could find.

SAP would not recommend 64 bit windows for production systems if there was not a supported JDK for it.

Haydn

[Former Member]

Check SAP Note 883555 & 941595. J2SDK 1.4_16 (j2sdk-1_4_2_16-windows-amd64) is for AMD which is also applicable for Intel as well.

Regards

Chandu