Start WSO2 Identity Server 5.1 as windows Service

Prerequisites

* Jdk 1.624 or later ,1.7 or 1.8 with JAVA_HOME environmental variable in windows environment.
* Yet Another Java Service Wrapper (YAJSW) version 11.03 (you can download it from here.

Configuring wrapper.conf file in YAJSW 

We need to configure wrapper.conf file which is located inside {yajsw-Home} /conf as below. We can just copy and paste the configurations from wrapper.conf file which is located inside {wso2is-5.1.0_Home}/bin/yajsw to wrapper.conf file in {yajsw-Home} /conf.

Setting Up Carbon_Home in Windows 7 

You can use below steps to configure Carbon_Home
1. Right click on the computer icon
2. Choose properties
3. Click on Advanced Settings link
4. Click Environmental Variables
5. Add a new system variable by providing 
     Variable name :CARBON_HOME
     Variable value :D:\Hasanthi\wso2is-5.1.0 (path to the extracted Identity   Server)


Running the product 

1. Use windows command prompt and go to bat folder inside  {yajsw-Home} 
   cd  D:\Hasanthi\yajsw-11.03\bat
2. Start the wrapper in console mode
  runConsole.bat
3. Now you may able to access the wso2 Identity Server by using the url "https://localhost:{port}/carbon"
4. If you need to install Identity Server as a windows service you can use
installService.bat
5. To start the installed service you need to use below command in the same console 
startService.bat
6. To stop the service you can use
stopService.bat
7. To uninstall the service you need to use 
uninstallService.bat

Note: Wso2 recommended  YAJSW version is 11.03. When using some YAJSW versions as yajsw-beta-12.06 , it is unable to start wso2 products as windows service as the service is continuously restarting due to errors in different processes.

Comments

Post a Comment

Popular posts from this blog

Applying CORS Filter to wso2 Identity Server

When we are invoking an endpoint in oauth2 war from a javascript of a web app which is located in a different domain than identity server domain we are getting "No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'http://XXXXXXX is therefore not allowed access." The issue is occurring as the script on your page is running from a specifc domain and would try to request the resource via an XmlHttpRequest or XDomainRequst from a different domain as this is a cross -origin request. In order to get rid of this we need to enable this by sending below header using a custom filter.  Access-Control-Allow-Origin: http: //example.com   (Here  http://example.com is the domain name of where page with that script is hosted) Invoking UserInfo endpoint of wso2 Identity Server from JavaScript We have two possible solutions to apply the CORS header.  1. Customizing OpenIDConnectUserEndpoint.java as below and replacing the oauth
Read more

Secure Wso2 ESB REST APIs using Kerberos

Image
When a consumer attempts to consume a REST API, if the API is secured using some authentication protocol (e.g Basic , Kerberos, NTLM) the consumer has to prove his authentication to the API by sending credentials or relevant token through authorization headers. By default ESB REST APIs does not include any security and from this blog post I will speak about how to make the APIs secured using kerberos. I have used main 3 components ;  Active Directory as the KDC , ESB server as the resource server and a C#.net client to invoke the rest APIs in ESB server. The design of the implementation is as below. The Design of the Kerberos Communication 1. Client tries to invoke the ESB proxy 2. The server responds with 401 unauthorized 3. Client requests a kerberos service ticket from active directory 4. If user is identified by the KDC (AD) it will send the SGT to the client 5. Client wraps the SPENEGO token in the request HTTP header and resend to ESB 6. ESB sees the HTTP header w
Read more

JWKS endpoint of wso2 IS

What is JWKS endpoint? The JSON Web Key Set (JWKS) endpoint is a read-only endpoint. This url returns the Identity Server's public key set in Json web key set format. This contains the signing key(s) the RP uses to validate signatures from the Identity Server. This endpoint is defined loosely by the OpenID Connect Discovery specification . Try JWKS endpoint with Identity Server The endpoint url for the super tenant: https://localhost:9443/oauth2/jwks The jwks for the super tenant will be as follows: { "keys" : [ { "alg" : "RS256" , "kty" : "RSA" , "use" : "sig" , "n" : " AJSn-hXW9Zzz9ORBKIC9Oi6wzM4zhqwHaKW2vZAqjOeLlpUW7zXwyk4tkivwsydPNaWUm-9oDlEAB2lsQJv7jwWNsF7SGx5R03kenC-cf8Nbxlxwa-Tncjo6uruEsK_Vke244KiSCHP8BOuHI-r5CS0x9edFLgesoYlPPFoJxTs5 " , "e" : "AQAB" , "kid" : " d0ec514a32b6f88c0abd12a2840699bdd3deba9d "
Read more