Monitoring Identity Manager by JMX

Monitoring
Identity Manager by JMX
Takayuki Okazaki
Solutions Architect, Software Practice
http://blogs.sun.com/okazaki

GOAL

Understanding JMX monitoring feature
which introduced from Identity Manager
7.0

Copyright © 2007 Sun Microsystems K.K. 2

NOTICE

• This is NOT officially verified document
of Identity Manager. All information in this
document are based upon personal
research.


Agenda
About JMX
•
Identity Manager and JMX
•
Configuration instruction
•
Demo
•
TIPS
•


About JMX
• Standard API for monitoring and managing JVM,
services, and applications.
> JSR 3: Java Management Extensions (JMX)
• Monitoring and Managing from remote client
> JSR 160: JMX Remote API
• Target use case of JMX
> Referring and modifying application configuration
> Gathering statistics about the application
> Notify error or status change


Benefit of JMX
Lightweight
•
Secure
•
Scalable monitoring & management architecture
•
Easy to engage existing management solutions (like
•
SNMP, WBEM)


Scope of JMX Specifications


What can monitor by JMX?
• Java VM
> OS and environment, JVM options, Memory and
Garbage collection, Threads
• Web Container
> Performance statistics, Cache, status of a connections,
Connection pool, Thread pool
• Application
> All exposed MBeans(Managed bean)


Example

Memory Thread

CPU

Class


More use case
• Notify events to JMX clients
> Errors and warnings
> Status change
• Invoking operations
> Garbage collection
> Test connection
> State change
• Advanced use case
> Self tuning and self management (like GlassFish v2)


JMX Remote and Security
• Authentication
> UserId/Password authentication by MBean server
• Protecting connection
> TLS and SSL

Authentication through userid/pwd


SNMP and JMX
• Several MBeans are monitored through SNMP
> http://java.sun.com/javase/6/docs/technotes/guides/man
agement/snmp.html
• JVM related info can be monitored by SNMP
> OS and environment, classpath and JMV options, JIT,
classloader, threads, GC, memory, memory pool and
logging


JMX tools
• JConsole
> Bundled with JDK 5 or later
• MC4J (http://mc4j.org)
> Open source monitoring tool
• Sun Java System Management Framework
> Bundled with Java ES 5
> Opensourced: http://proctor.dev.java.net
• More..
> HP Openview, AdventNet ManagemeEngine Applications
Manager, ...

JConsole
• Graphical management tool
• You can develop additional plugin for JConsole


Identity Manager and JMX
• Support starts from Identity Manager 7.0
• Status of cluster/server, Scheduler, information
about Resources, status of ActiveSync


Cluster
ObjectName=IDM:type=Cluster
Attribute name Description
ActiveServers List of active IDM servers
KnownServers List of known IDM servers
NewlyFailedServers Most recent list of failed IDM servers
Alive Is polling thread alive?
PollingInterval Polling interval (in milli-seconds)


Example: Cluster
ObjectName=IDM:type=Cluster


Servers
ObjectName=IDM:type=Cluster,service=Server,name=”<Server name>”
CreateDate Date of server created
Creator Name of user who create this server
Deleted Is this object deleted?
Heartbeat HeartbeatDate Most recent heart beat time
State StateString Status of this server

ObjectName=IDM:type=Server
Name Name of the server
Status StatusDisplay Status of this server


Example: Servers
ObjectName=IDM:type=Cluster,service=Server,name=”<Server name>”

ObjectName=IDM:type=Server

All servers are
listed

Same server to JMX
server

Resources
ObjectName=IDM:type=Cluster,service=Resource,resType=”<Resource type>”,
name=”<Resource name>”

CreateDate Date of resource creation
Creator Creator user name
Deleted Is this object deleted?
LastModificationDate Last modified date
MostRecentActivity Most recent activity
MostRecentActivityDate
Most recent activity date
MostRecentActivityDateMS

Test connection to each resource feature availble.

Example: Resources
ObjectName=IDM:type=Cluster,service=Resource,resType=”<Resource type>”,name=”<Resource name>”

All resource type/resources are listed


Connection test (IDM->Resource)
Invoke test connection
Success case

Failure case


ActiveSync
ObjectName=IDM:type=Cluster,service=Synchronization,component=ActiveSync
resType=”<Resource type>”,name=”<resource name>”

ProgressString Progress string
ErrorStatusString Error string
LastPollAttempt Last ActiveSync date
NextPollAttempt Next ActiveSync date
LastModNum Last modification number
LastModDate Last modification date
LastKnownServer Last server name which starts this ActiveSync
LastStartTime Last start time
State, StateString Status of this active sync

Example: ActiveSync
ObjectName=IDM:type=Cluster,service=Synchronization,component=ActiveSync
resType=”<Resource type>”,name=”<Resource name>”

All ActiveSyncs which is:
- currently running
- failure or scheduled

SPE Sync
ObjectName=IDM:type=Cluster,service=Synchronization,component=SPE Sync
resType=”<Resource type>”,name=”<Resource Name>”

ProgressString Progress string
ErrorStatusString Error string
LastPollAttempt Last SPE Sync date
NextPollAttempt Next SPE Sync date
LastModNum Last modification number
LastModDate Last modification date
LastKnownServer Last server name which starts this SPE Sync
LastStartTime Last start time
State, StateString Status of this SPE sync

Scheduler 1 of 2
ObjectName=IDM:type=Scheduler

Attributes Description
Cycles ?
ErrorCount ?
ExpiredCount ?
FinishedCycleCounter ?
FinishedCycleTIme ?
LaunchedCount ?
ReadyCount ?
ReadyCycleCounter ?
ReadyCycleTime ?


Scheduler 2 of 2

MostRecentHeartbeat Most recent heart beat time
ScheduledCycleCounter ?
ScheduledCycleTime ?
Status StatusDisplay Status of scheduler


Example: Scheduler


Event notification

Heart beat events are notified if
you subscribe to Scheduler event


Configuration
• Identity Manager
• Application Server
• JConsole


Identity Manager 1 of 2
(1) Settings
(2) Servers

(3) Click your server


Identity Manager 2 of 2

(1) JMX

(2) Turn off default setting

(3)Turn on JMX

Application Server

Memorize Port number

Authentication realm

Turn off if you want to
use JConsole

Admin Service

JConsole 1 of 2
JConsole bundled with JDK 6
JConsole bundled with JDK 5

Remote process


JConsole 2 of 2
JMX URL
service:jmx:rmi:///jndi/rmi://<hostname>:<port>
/management/rmi-jmx-connector

User name and password
Default setting of Sun Java System App Server
is “admin-realm”, which is same user of app
server administrator (default user name:
“admin”)


Demo environment
JConsole

idm1 idm2
resource1

resource2

Solaris Container
idmdb

Monitoring from command line
• Most customers already have corporate standard
monitoring tool, but it may not supports JMX
• Most monitoring tools have a capability to invoking
monitoring command
• Using scripting languages which running on Java
> JRuby, JavaScript, Groovy, Pnuts, (JavaFX!)... etc
> Easy to customize


Example: JRuby Gathering ActiveSync Status

#!/usr/bin/env jruby
include Java
include_class 'javax.management.ObjectName'
include_class 'javax.management.remote.JMXConnectorFactory'
include_class 'javax.management.remote.JMXServiceURL'
jmxurl = 'service:jmx:rmi:///jndi/rmi://idm1:8686/jmxrmi'
username, password = 'admin', 'adminadmin'
svcurl = JMXServiceURL.new(jmxurl)
cred = java.lang.String[2].new
cred[0], cred[1] = username, password
env = {'jmx.remote.credentials' => cred}
conn = JMXConnectorFactory.connect(svcurl, env).getMBeanServerConnection
names = conn.query_names(ObjectName.new(
'IDM:type=Cluster,service=Synchronization,component=ActiveSync,*'), nil)
names.each do |name|
cname = name.get_canonical_name
if /name=quot;(.+?)quot;,resType=quot;(.+?)quot;/ =~ cname
puts quot;Resource Type: #{$2}, Name: #{$1}, ”
+ “Status: #{conn.get_attribute(name, 'StateString')}quot;
end
end
Resource Type: FlatFileActiveSync, Name: My FlatFile, Status: down
Resource Type: LDAP, Name: SPE End-User Directory, Status: down


Information
• Custom JMX clinet using JRuby (Japanese)
> http://blogs.sun.com/nishigaya/entry/custom_jmx_client_
using_jruby
> http://blogs.sun.com/nishigaya/entry/custom_jmx_client_
using_jruby1


JMX
Identity Manager

Takayuki Okazaki
takayuki.okazaki@sun.com
http://blogs.sun.com/okazaki

Monitoring Identity Manager by JMX

Recomendados

Recomendados

Mais conteúdo relacionado

Mais procurados

Mais procurados (8)

Destaque

Destaque (9)

Semelhante a Monitoring Identity Manager by JMX

Semelhante a Monitoring Identity Manager by JMX (20)

Último

Último (20)

Monitoring Identity Manager by JMX