Technical data

Setting Up Node Manager
Administration Guide 3-5
security, Node Manager also uses a list of trusted hosts; only commands from an
Administration Server on one of these hosts will be accepted. To configure the Node
Manager you will need to edit the trusted hosts file to add one line for each machine
with an Administration Server that can send commands to this Node Manager. By
default, the trusted hosts file is named
nodemanager.hosts and is installed under the
\config directory. By default this file contains two entries:
localhost
127.0.0.1
You can change the name of the file where Node Managed looks for the list of trusted
hosts on the command line. For more information, see Command-Line Arguments.
You can use either the IP address or DNS name of each trusted host. However, if you
use a DNS name, you will need to enable reverse DNS lookup when starting the Node
Manager. To do this, you would use the following command-line argument:
-Dweblogic.nodemanager.reverseDnsEnabled=true
By default reverse DNS lookup is disabled.
In a typical production environment the Node Manager will not be running on the same
machine as the Administration Server. Therefore, you will need to edit the trusted hosts
file so that it lists only the machines where you will be running an Administration
Server that will be starting or killing the Managed Servers on that machine. Each entry
in the trusted hosts file consists of a single line that is either the DNS host name or IP
address of the machine of an Administration Server machine.
Note: In order for the Node Manager to be able to communicate with the
Administration Server when it starts Managed Servers, the listen address of the
Administration Server must have been set to a DNS name or IP address when
the Administration Server was started.
Setting Up Node Manager for Secure Socket Layer
Protocol
The Node Manager uses the Secure Socket Layer (SSL) protocol in its communication
with the Administration Server. To provide security in communication between the
Node Manager and the Administration Server, two-way SSL authentication is used.