I ran across another thread that mentioned this same behavior, but that it didn't happen on centos. So I'm wondering: Is this something about Ubuntu's packaging of openjdk-6-jre-headless, which puppetdb depends on? Any ideas?
Still, I've found no solution and come to no conclusions. Any help would be appreciated. :-) Out of curiosity, I ran the command, below (from puppetdb-foreground). It's pretty clear that puppetdb is somehow loading the RMI classes. $ su puppetdb -s /bin/bash -c "/usr/bin/java -verbose -Xmx192m -XX:+HeapDumpOnOutOfMemoryError -XX:HeapDumpPath=/var/log/puppetdb/puppetdb-oom.hprof -jar /usr/share/puppetdb/puppetdb.jar services -c /etc/puppetdb/conf.d $@" 2>&1 | egrep -i '\b(rmi|registry)\b' [Loaded java.rmi.server.RMIServerSocketFactory from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded java.rmi.registry.LocateRegistry from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded java.rmi.Remote from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded java.rmi.registry.Registry from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded java.rmi.server.RemoteObject from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded java.rmi.server.RemoteServer from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.registry.RegistryImpl from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded java.rmi.server.RemoteRef from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded java.rmi.server.ServerRef from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.server.Dispatcher from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.server.UnicastRef from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.server.UnicastServerRef from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.server.Util from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded java.rmi.server.LogStream from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.runtime.Log from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.runtime.Log$LogFactory from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.runtime.Log$LoggerLogFactory from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.runtime.Log$LoggerLog from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.runtime.Log$LoggerLog$1 from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.runtime.Log$InternalStreamHandler from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.server.WeakClassHashMap from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.server.UnicastServerRef$HashToMethod_Maps from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded java.rmi.server.ObjID from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded java.rmi.server.UID from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.transport.LiveRef from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.transport.Endpoint from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.transport.tcp.TCPEndpoint from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.transport.Transport from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.transport.tcp.TCPTransport from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.transport.tcp.TCPTransport$1 from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded java.rmi.server.RMIClientSocketFactory from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded java.rmi.server.RMISocketFactory from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.transport.proxy.RMIMasterSocketFactory from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.transport.proxy.RMIDirectSocketFactory from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.server.UnicastServerRef2 from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.server.UnicastRef2 from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded java.rmi.server.RemoteStub from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.registry.RegistryImpl_Stub from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded java.rmi.server.Operation from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded java.rmi.server.Skeleton from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.registry.RegistryImpl_Skel from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.transport.Target from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.transport.WeakRef from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.transport.ObjectTable from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded java.rmi.dgc.DGC from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.transport.DGCImpl from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.runtime.RuntimeUtil$GetInstanceAction from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.runtime.RuntimeUtil from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.runtime.RuntimeUtil$1 from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.transport.DGCImpl$2 from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.transport.DGCImpl_Stub from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.transport.DGCImpl_Skel from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.transport.ObjectEndpoint from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.runtime.NewThreadAction from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.runtime.NewThreadAction$1 from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.runtime.NewThreadAction$2 from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.transport.tcp.TCPTransport$AcceptLoop from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.server.WeakClassHashMap$ValueCell from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded java.rmi.RemoteException from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded java.rmi.AccessException from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded java.rmi.NotBoundException from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded java.rmi.AlreadyBoundException from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.server.UnicastServerRef$HashToMethod_Maps$1 from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded com.sun.jmx.remote.protocol.rmi.ServerProvider from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded javax.management.remote.rmi.RMIConnectorServer from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded javax.management.remote.rmi.RMIServer from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded javax.management.remote.rmi.RMIServerImpl from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded javax.management.remote.rmi.RMIJRMPServerImpl from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded java.rmi.server.UnicastRemoteObject from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded javax.management.remote.rmi.RMIServerImpl_Stub from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded javax.management.remote.rmi.RMIConnection from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded java.rmi.server.SkeletonNotFoundException from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.transport.ObjectTable$Reaper from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded javax.management.remote.rmi.RMIConnector from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded javax.management.remote.rmi.NoCallStackClassLoader from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded javax.management.remote.rmi.RMIConnector$1 from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded javax.management.remote.rmi.RMIConnectionImpl_Stub from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded java.rmi.MarshalledObject from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded javax.management.remote.rmi.RMIConnector$2 from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded javax.rmi.CORBA.Stub from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded org.omg.stub.javax.management.remote.rmi._RMIConnection_Stub from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded com.sun.jndi.url.rmi.rmiURLContextFactory from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded com.sun.jndi.url.rmi.rmiURLContext from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded com.sun.jndi.rmi.registry.RegistryContext from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded com.sun.jndi.rmi.registry.AtomicNameParser from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.transport.Channel from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.transport.tcp.TCPChannel from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.transport.Connection from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.transport.tcp.TCPTransport$ConnectionHandler from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.transport.tcp.TCPConnection from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.transport.proxy.RMISocketInfo from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded java.rmi.server.RemoteCall from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.transport.StreamRemoteCall from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.server.MarshalOutputStream from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.transport.ConnectionOutputStream from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.server.MarshalOutputStream$1 from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded java.rmi.NoSuchObjectException from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded java.rmi.server.RMIClassLoader from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded java.rmi.server.RMIClassLoaderSpi from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded java.rmi.server.RMIClassLoader$2 from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded java.rmi.server.RMIClassLoader$1 from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.server.LoaderHandler from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.transport.DGCAckHandler from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.server.MarshalInputStream from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.transport.ConnectionInputStream from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded java.rmi.activation.ActivationSystem from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.server.Activation$ActivationSystemImpl_Stub from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded java.rmi.activation.ActivationGroupID from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded java.rmi.activation.ActivationInstantiator from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded java.rmi.activation.ActivationDesc from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded java.rmi.activation.ActivationID from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded java.rmi.activation.ActivationException from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded java.rmi.activation.UnknownGroupException from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded java.rmi.activation.ActivationMonitor from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded java.rmi.activation.UnknownObjectException from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded java.rmi.activation.ActivationGroupDesc from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.transport.DGCAckHandler$1 from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.transport.Transport$1 from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.transport.DGCClient from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded java.rmi.dgc.VMID from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded java.rmi.dgc.VMID$1 from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.transport.DGCClient$EndpointEntry from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.transport.DGCClient$EndpointEntry$RenewCleanThread from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.transport.DGCClient$EndpointEntry$RefEntry from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.transport.DGCClient$EndpointEntry$RefEntry$PhantomLiveRef from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded java.rmi.dgc.Lease from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.transport.DGCImpl$LeaseInfo from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.transport.DGCImpl$1 from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.transport.SequenceEntry from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.transport.tcp.TCPChannel$1 from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.transport.DGCClient$EndpointEntry$1 from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.registry.RegistryImpl$1 from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] [Loaded sun.rmi.registry.RegistryImpl$2 from /usr/lib/jvm/java-6-openjdk-amd64/jre/lib/rt.jar] On Monday, December 24, 2012 1:27:24 AM UTC-8, Michael Henry wrote: > > PuppetDB is operating fine, but I can't figure out how to disable it from > listening globally on TCP 1099 or 58722 > > How do I disable them from listening globally without having to resort to > iptables? > > $ lsof -i -n -P | grep java | grep LISTEN > java 30115 puppetdb 22u IPv6 119118 0t0 TCP *:1099 (LISTEN) > java 30115 puppetdb 23u IPv6 117236 0t0 TCP *:58772 (LISTEN) > java 30115 puppetdb 40u IPv6 117241 0t0 TCP > 127.0.0.1:8080(LISTEN) > java 30115 puppetdb 45u IPv6 117247 0t0 TCP > 127.0.0.1:8081(LISTEN) > > $ netstat -tnlp | grep java > tcp6 0 0 :::1099 :::* > LISTEN 30115/java > tcp6 0 0 127.0.0.1:8080 :::* > LISTEN 30115/java > tcp6 0 0 127.0.0.1:8081 :::* > LISTEN 30115/java > tcp6 0 0 :::58772 :::* > LISTEN 30115/java > > This is what NMAP says they are: > > PORT STATE SERVICE VERSION > 1099/tcp open jrmi Java RMI > 58772/tcp open unknown > > Java RMI: http://en.wikipedia.org/wiki/Java_remote_method_invocation > > My relevant configurations: > $ egrep '(port|host|1099|58772)' /etc/puppetdb/conf.d/* > /etc/puppetdb/conf.d/database.ini:# For PostgreSQL: > //host:port/databaseName > /etc/puppetdb/conf.d/database.ini:subname = //localhost:5432/puppetdb > /etc/puppetdb/conf.d/jetty.ini:# Hostname to list for clear-text HTTP. > Default is localhost > /etc/puppetdb/conf.d/jetty.ini:host = localhost > /etc/puppetdb/conf.d/jetty.ini:port = 8080 > /etc/puppetdb/conf.d/jetty.ini:ssl-host = localhost > /etc/puppetdb/conf.d/jetty.ini:ssl-port = 8081 > /etc/puppetdb/conf.d/repl.ini:# What port the REPL should listen on > /etc/puppetdb/conf.d/repl.ini:port = 8082 > > OS: Ubuntu 12.04 LTS x86_64 > Puppetdb 1.0.5 > Puppet 3.0.1 > > Is there a setting I've missed? > > Thanks in advance. > > Respectfully, > > Michael Henry (Mike) > > > -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To view this discussion on the web visit https://groups.google.com/d/msg/puppet-users/-/0vlSetd9vVIJ. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
