Questions on LDAP Realm on different versions of Web Logic

Kaia,
I need you to ask JOS / BEA Systems some questions on LDAP
Integration. I have CC'd Randy and Todd in case they have any
feedback on this area. I have read the documentation and have
a
couple of simple questions. The questions differ depending on
the version (because the documentation is different):
4.5 SP7
Users and groups are cached in the WebLogic Server as Enterprise
Java Beans. This reduces the frequency of LDAP lookups
Exactly what is cached? Is authentication carried out against
the Directory each time, or against the cached credentials? Is
this configurable such that an authentication attempt is sent to
the LDAP server each time? Just a suggestion - LDAP lookups are
very "light" and caching them in this fashion is not a good
idea. Let the LDAP Directory do the caching.
The "system" user must be defined in the weblogic.properties
file and in your LDAP server. The LDAP "system" user must be a
member of the LDAP group that has administrative privileges in
the LDAP server
Does this really mean that the user ID in the LDAP server
called "system" needs to have full control over the entire
directory??
In the WebLogic property file realm, the "everyone" group
automatically includes all users. You must create an "everyone"
group and add every WebLogic Server user to its membership list,
including the "guest" and "system" users.
Does this really mean that I need to create a group in the LDAP
directory called "Everyone" and keep it updated with every user
object in the Directory that we want to authorize using weblogic
ACL's?
5.1 Pre SP7
The property:
weblogic.security.ldaprealm.userAuthentication
The description for this in the docs is:
This property determines the method for authenticating users. If
you set the property to local (appropriate for Netscape and
Microsoft servers), LDAPRealm retrieves user data, including
password, from the LDAP server and checks the password in
WebLogic Server. If you set the value to external (appropriate
for Novell NDS), LDAPRealm authenticates a user by attempting to
bind to the LDAP server with the username and password supplied
by the WebLogic client. If you use external authentication, you
must also use SSL
The way I read this is that if you have local set, the Weblogic
Server retrieves the entire user credentials from the LDAP
Directory, and compares the password with what the user passes
in. If you have external set, weblogic does a bind on your
behalf - however, you need to have SSL configured for this
option to be implemented.
However, in the example for an NDS server, the following is
listed:
weblogic.security.ldaprealm.userAuthentication=bind
What is the bind option referring to?
5.1 SP 7
This version makes no reference whatsoever to the
userAuthentication property above. Has it disappeared? What is
the authentication method used now?
6.0
The documentation below:
Table 12-10 LDAP Security Realm Fields on the Users Tab
Field
Description
User Authentication
Determines the method for authenticating Users. Set this field
to one of the following values:
Local specifies that the LDAP Security realm retrieves user
data, including the password from the LDAP Directory server, and
checks the password in WebLogic Server. The Local setting is
appropriate for Netscape Directory Server and Microsoft Site
Server.
External specifies that the LDAP Security realm authenticates a
User by attempting to bind to the LDAP Directory server with the
username and password supplied by the WebLogic Server client. If
you choose the External setting, you must also use the SSL
protocol. The External setting is appropriate for Novell NDS.
Bind
Note that there is a reference to Bind, but no description for
what it is supposed to do. So, what is it supposed to do. Also
a follow up question - This field is not referenced in
documentation for 5.1 SP7, so I was curious as to whether this
will also be dropped in future service packs under 6.0, and if
so, what the authentication process will then be.
regards,
Craig Gilmour

CC 2014 should be the latest version.  You can uninstall any others if you choose to.

Similar Messages

  • How do i get the current version of web logic server on obiee 11g

    Hey
    I am pretty new to 11g and Weblogic
    How do i get the current version of web logic server on obiee 11g(11.1.1.5), I know that it should be higher than 10.3.5.
    Thanks

    Hi,
    Obiee11.1.1.5.0/6.0 both version supporting weblogic 10.3.5.0/6.0 both are no issues.
    http://blog.whitehorses.nl/2012/02/26/a-few-quick-tips-for-upgrading-ofm-11g-to-patch-set-5/
    also refer
    http://docs.oracle.com/cd/E23943_01/bi.1111/e16452/bi_plan.htm#BABECJJH
    Thanks
    Deva

  • Master iPad configurator question concerning cart syncing with different versions of iPads.

    I have a question concerning configurator syncing.Can the master iPad be a different version of iPad than the other synced iPads? For instance can iPad 2 be the master iPad to a group of iPad Air's? The iPad 2 has some fewer capabilities than the Air, would some settings or restrictions be left off of the iPad Airs if they were set up this way?  Thanks.

    There is no such thing as 'master iPad'.  If you're using Configurator or Profile Manager control of the setup is done from a Macintosh.

  • JSDK Version in Web Logic

    Hello friends
              How can I find out the version of JSDK supported by my Web Logic Server? I
              It allows one to switch between different versions of JDK graphically and
              this gets reflected in the StartWebLogic.cmd file.
              What about JSDK? Does it pick what ever version we put in the classpath
              visible to the Web Logic Server or is there anything else that we need to
              configure?
              Thanks in advance
              

              Sailaja wrote:
              > Hello friends
              >
              > How can I find out the version of JSDK supported by my Web Logic Server? I
              >
              Sailaja--
              Use getMajorVersion( ) & getMinorVersion( ) methods from ServletContext
              interface to retrive major & minor
              versions of Servlet API.
              >
              > It allows one to switch between different versions of JDK graphically and
              > this gets reflected in the StartWebLogic.cmd file.
              >
              > What about JSDK? Does it pick what ever version we put in the classpath
              > visible to the Web Logic Server or is there anything else that we need to
              > configure?
              >
              The WLS 4.5.1 implements the JavaSoft HTTP servlet 2.1 API.
              They have their own version of Servlet implementation which is complaint with
              javasoft servlet 2.1 API
              >
              > Thanks in advance
              Thanks,
              Kumar
              

  • Different Versions, Same Web Help File

    Good Moring.
    I've found a topic which applies to this, however I'm having
    no joy in implementing it - thus a new Topic.
    Again I have a project with 500+ topics. Now I have
    sucessfully created documentation for each Dept. eg Finance,
    Operations etc...ising the
    Topic Summary I want to simultaneously generate a version for
    each conditional build tag, and the SSL. However if I choose
    Finance, and go through the same procedure I'm ending up with a
    Helpfile showing ALL the Departments on the Title page, but none of
    the 'Buttons' work, and the Topic list is also missing. However
    doing the same with no SSL obviosly I get the Web version complete.
    Now a while ago I managed to create a version for each Dept,
    so that if you changed the "Master" then the changes would be
    applied to all the Deptments, but you'd still have the Departmantal
    versions.
    Also - say you had a page with buttons for all the
    Departments, and you did a Finance version only that 'button would
    be changed
    Now I know I should've scribbled down how I did it, but I
    didn't and I'm sure I found a topic that explained exactly 'How To"
    , I can't find it on Peter G's website either.
    So could someone out there point me in the right direction?
    Thanks
    Al.
    IT Technician,
    Muckleshoot Indian Casino

    OK - one of the probs was that I needed to re-do all the
    Conditional Build tags. Now I've done that only the dept required
    is being built. So that's one prob fixed.
    Now I can compile each Dept. into separate folders eg.
    C:\facilities, c:\security etc etc.
    It's not really a Windows 'security' issue.
    What i want to be able to do is have a parent/child situation
    (lets call all the Depts a child section, and the parent is the
    Main build ie with everything ie the entire project.
    Now it works fine if it's all split up into separate folders,
    however now we run into the situation where if I change something
    in the Parent, this won't be carried down the chain to the "child'
    versions as they're in their own folders, thus effectively separate
    stand-alone projects Not really what I want, as I'll have to change
    each one in turn, and you can't compile them into the same folder,
    even if I rename each 'title'html file RH seems to over write it...
    Here's the general idea:
    So the "Master Dept" screen has a row of buttons that looks
    like:
    Book/Topic A - for Engineering
    Book/Topic B - for IT
    Book/Topic C - for Marketing
    Book/Topic D - for Inventory
    Now, if we have a Group of Users, let's take Marketing, when
    they go to that particular
    'page', the only button they'll have available (and shown) is
    the button for:
    Book/Topic C - for Marketing
    The IT Dept might have:
    Book/Topic A - for Engineering
    Book/Topic B - for IT
    Book/Topic D - for Inventory
    Here the button for Marketing is not displayed, but there is
    a 'blank' line between B & D.
    I'm sure I'm missing something obvious!
    Al

  • Problem with ODI 11.1.1.5 on different server from Web-logic

    Basically a problem is being faced with installing ODI 11.1.1.5 (Developer, Standalone and Java EE installations) on a different server from OBI 11.1.1.5. Basically, the thing that did cause this type of installation is that I cannot find a version of ODI to run a 64-bit machine like OBI 11.1.1.5. Hence, I installed the OBI on the 64 bit machine and shared the entire drive on which the home of the BI exist. The share process referenced all the folders contained inside the home with full permission given for read and change. This was being done to provide the bea home for the ODI Java EE installation which is required as a part of the installation process.
    The problem is when I specify the middleware home location in the ODI installation with the given shared bea location an error appears saying: INST-07058: unexpected error occurred while validating Oracle home location.
    I would be grateful to receive some advice on how to overcome this obstacle with regards to installting ODI on a 32-bit server where the weblogic AS is resided on a different machine running in 64-bit.
    Help is very much appreciated...

    Thank you for answer, well in the Logueo.jspx i have this code
    <?xml version='1.0' encoding='UTF-8'?>
    <jsp:root xmlns:jsp="http://java.sun.com/JSP/Page" version="2.1"
    xmlns:f="http://java.sun.com/jsf/core"
    xmlns:h="http://java.sun.com/jsf/html"
    xmlns:af="http://xmlns.oracle.com/adf/faces/rich">
    <jsp:directive.page contentType="text/html;charset=UTF-8"/>
    <f:view>
    <af:document id="d1" binding="#{backingBeanScope.backing_Logueo.d1}">
    <af:form id="f1" binding="#{backingBeanScope.backing_Logueo.f1}">
    <af:outputLabel value="outputLabel1"
    binding="#{backingBeanScope.backing_Logueo.ol1}"
    id="ol1"/>
    </af:form>
    </af:document>
    </f:view>
    <!--oracle-jdev-comment:auto-binding-backing-bean-name:backing_Logueo-->
    </jsp:root>
    this not is the problem, because is the project number 3 made on fedora and this don't function fine...... thank you for answer...!!!

  • Check adf runtime version in web logic server

    Hi,
    I want to check the current adf runtime version deployed in the Weblogic server. Please provide some inputs.

    Or ADF: How to find out which ADF version is installed on a manged WebLogic server | JDev &amp;amp; ADF Goodies
    which give you two solutions.
    Timo

  • Trying to setup a LDAP Realm

    I'm runing WLS6.0 SP2 and I'm trying to set up a LDAP realm to talk to a openldap
    server. I'm on Win2k and have it installed as a service.
    I can connect to the server via a ldap browser, and I have a user in the ldap
    tree with a clear text password.
    I created a LDAP realm but I can't find where to configure WebLogic to use that
    LDAP realm for authentication.
    thanks
    joe

    I guess they don't use the LDAP Realm in Weblogic, you should create your custom
    realm that access to AD and return user/group enumerations, acl's, etc...
    I'm able to access to AD using jdk1.4, and I have my custom realm, the only
    problem is wl uses jdk1.3 (+jaas) and I couldn't connect to AD with the old jaas,
    because it didn't support kerberos authentication. A more complete jaas it's included
    in jdk1.4
    Regards,
    Marc
    "Roy Cornell" <[email protected]> wrote:
    Great news, Scott. I hope you don't mind answering the three questions
    below:
    1. Which LDAP realm ***version*** did you use : V1 or V2?
    2. Which LDAP realm type did you specify during the configuration: "MS
    Site
    Server" or other ?
    3. Did you encounter any problems during the integration?
    Thanks a lot.
    Roy
    "Scott Harger" <[email protected]> wrote in message
    news:3b794a7c$[email protected]..
    We have been able to get the LDAP realm (6.0 SP1) to work with Active
    Directory.
    Scott
    "Roy Cornell" <[email protected]> wrote in message
    news:3b72eb32$[email protected]..
    I've got the same question (posted it yesterday). Please, Please,
    Please,
    could somebody reply.
    "Andrew Wallace" <[email protected]> wrote in message
    news:3b72ce38$[email protected]..
    Somehow my last message got truncated. Here's the full deal:
    We're trying to setup an LDAP realm in a microsoft-centric environment
    (Windows 2000). All the documentation from BEA that I've found
    talks
    about MS Site Server, which, as near as I can find, is not an LDAPserver.
    So - can I use MS Active Directory on Win2k? Is it functionally
    the
    same
    thing? Does the MS template in LDAP Realm V2 support it? Does anyone
    have success or horror stories about using AD?
    thanks,
    andy

  • Could there be independent VI paths for different versions of LabVIEW?

    Hello,
    When jumping between different versions of LabVIEW (6.1, 7.1, 8.5) it is annoying that the current path for one becomes the current path for the other. 
    If I am working with LV 7.1 in a folder dedicated to 7.1 VI's, and then open LV 8.5, I don't want 8.5 to go to that 7.1 folder by default.  Alternately. if I was working in LV 8.5, closed it out, and then I click on a 7.1 VI, I don't want it to open in LV 8.5. 
    I've tried changing the path options in each version of LabVIEW, but that doesn't seem to help.  Is there any way of isolating these folder paths from one another?  One of our newer LV guys accidently opened some 7.1 code in 8.5.1 and then saved it.  Luckily, I had archived code to return to, but it could have been a disaster.
    Thanks for any ideas,
    McSynth

    You're actually asking two different questions.
    The first question has to do with which version of LabVIEW gets launched when you double-click a file. This is an operating system thing. The one that gets launched is the last one that got used. (Your first question will be: can this be changed? Answer: Change the operating system. Or, play around with the registry each time you quit out LabVIEW.)
    The second question has to do with search paths. These are independent. However, a VI will contain information about its subVIs in terms of where to find them. This is not a function of LabVIEW, as it is a function of the VI. Thus, it will make no difference which version of LabVIEW you use to open the VI. You can, if you wish, modify the search paths that LabVIEW uses to find VIs for each version of LabVIEW from the Tools->Options menu. However, this will not eliminate the problem, and your best bet is to keep those backups frequent.

  • How can I distribute an application using Reprot generation Toolkit for MS Office for different versions of MS Office?

    I want to create an application which uses the Report Generation Toolkit for Microsoft Office. The office version of the target machine depends on what my customer has installed.
    From several discussions I have seen that the installer detects which version I have on my development machine. I'm not able to hold three or four machines with different versions (97,2000,2002,XP).
    I decided to do the following software architecture:
    I create a LLB MakeReport.llb with a VI called MakeReport.vi. With VI server I will start MakeReport.vi in MakeReport.llb. Over a named queue I will send a command from my application to MakeReport.vi. Then the report will be
    printed.
    I will create this LLB by saving MakeReport.vi with File>>Save with options...>>Application distribution. All neccessary VIs will be in the LLB.
    I will hold different directories for each version. I can create different version of the LLB. During installation of my application the LLB for the right version will be copied from the CD to the application folder.
    I know I will be restricted in testing my report in only one version and hoping it will be good in the other versions.
    I think that the difference lays only in the word and excel related llbs.
    1. Will my software architecture work or is it obviously wrong?
    2. How will I get all versions from the toolkit CD?
    3. Which is the registry key I must read to get the right version (a minor question, if somebody knows I do not need to search for myself).
    Waldemar
    Waldemar
    Using 7.1.1, 8.5.1, 8.6.1, 2009 on XP and RT
    Don't forget to give Kudos to good answers and/or questions

    Lookout saves the files in .csv form which can be opened in Excel. I did make some progress by using the "append table to report" vi which allowed me to put values into an array and then those values were entered into my template on my report vi.
    Where I am stuck now is I want to be able to put values into my template from a .csv file, not from an array I have to manually put numbers in.
    Once those values are in my template I want to pull summed values from the template and place them into a final excel file for printing.
    I have attached examples of the files I am working with to help you better understand what I am trying to do.
    I hope that makes sense.
    Jason Phillips
    Attachments:
    HourlyTotalsTemplate.xls ‏120 KB
    eb_rain_gauge_ss.csv ‏23 KB
    EastBankHourlyRainReport.xls ‏28 KB

  • How to use two different versions of Firefox at the same time on Snow Leopard?

    I recently upgraded to Firefox 4.0 on my 27" iMac running Snow Leopard 10.6.7.
    Previously, I was using Google's "Page Speed" along with Firebug in Firefox 3.6.15 to optimize images in my web pages, and to find other areas to optimize.
    Page Speed is not yet compatible with Firefox 4.0. I wrote to Google about this some time ago -- no answer yet.
    If I run Firefox 3.6.15 in order to use Page Speed, I run into a few problems afterward when I start using Firefox 4.0 again, since they both use the same "Firefox" folder in my "Application Support" folder.
    How can I set it up so that I can have two separate "Firefox" folders in my "Application Support" folder?
    Or is there an easier way to use two different versions of Firefox simultaneously, even if one has extensions and/or plug-ins installed which are not compatible with the other version?
    Thanks for a great browser!

    Please disregard my question. I just conducted more web search and learned how to use Firefox's profile manager in order to make a separate profile for Firefox 3.6.15.
    You can find instructions on this page:
    http://support.mozilla.com/en-US/kb/Managing%20profiles#os=mac&browser=fx35
    '''A small tip:'''
    If your Firefox app is named anything other than "Firefox" -- say for example "Firefox 3.6.15" -- when you follow the instructions at the above link, make sure you escape the blank space that is before the version number by adding a backward slash before it, when you type the command string in the Terminal. In other words, in that string, you should use this:
    Firefox\ 3.6.15
    I hope that helps someone.
    WW

  • Two different versions of iTunes on a mac with two accounts?

    Let's say two people share one computer and person A likes what he hears about iTunes 9 and wants to down it, but person B hates it and wants to keep iTunes 8 on the computer. I know it can't be done with one account but can it be done with two accounts if there is only one computer?

    Good question. I'd say +back up your computer+ and give it a try. Put the copies of iTunes in Applications folders in each account, not in the common Applications folder at the main level of the directory.
    Some of this may depend upon how you currently have it arranged with music files and libraries. I'm assuming you have it all sorted out as to accessing music files, unless you each have your own collection.
    I don't know the full workings of itunes9 but as long as you don't share a common library (which is version-specific) or preferences files then I don't see why different versions won't work. Again, I'd make a backup in case anything funny happens, then try.

  • Can i set up my drive as encrypted with different partitions for different versions of osx?

    i have some questions about setting up an encrypted drive with different versions of osx installed on separate partitions, and how this choice effects time-machine and the emergency recovery disk.
    I have a new/refurbished macbook pro with a SSD.  it already has mavericks installed.  i want to fully wipe the drive and reinstall everything my self because I'm odd like that.
    first wiping the current drive
    Does the recovery partition get wiped if i use disk-utility to reformat the drive. Even thought the recovery partition does not show up as a partition, when i look at it with disk-utility? i would like to know I've wiped all partitions so that no little bugger gets left with out me knowing. Disk-utility does not show the recovery partition and this makes me concerned it might not wipe it.
    Does mavericks automatically make a recovery partition during the installation process? Or do i need to make a new 1gb partition for the recovery disk?
    Can i have two different partitions on my drive with separate installations of OSX on it? (one for work that i don't update the system os till my current project is done, and the other for experimenting with new software.)
    will time machine back up both of the partitions or just one?
    can i accomplish all this from a bootable usb drive or do i need to do this in target disk mode? 
    do i need to use a more capable utility than the stock apple "disk-utility"?
    when reformatting the drive should i format it as encrypted or let file vault do this after i install mavericks?
    how much does encryption slow down performance for things like photo/video/music production?

    Do a backup before you do anything.
    Does the recovery partition get wiped if i use disk-utility to reformat the drive
    It shouldn't
    Does mavericks automatically make a recovery partition during the installation process?
    Yes.
    Can i have two different partitions on my drive with separate installations of OSX on it?
    Yes.
    will time machine back up both of the partitions or just one?
    It will as long as one partition is not excluded in the Time Machine/Options.
    do i need to use a more capable utility than the stock apple "disk-utility"?
    No, just boot into the Recovery Volume (command  - R on a restart).
    file vault do this after i install mavericks?
    I would let File Vault do that.

  • Signing a document using a plugin in different versions of Reader

    Hi,
    I am signing a pdf document with my own .cer file using a plugin. Everything works great in Reader 8, I've got a green check, it specifies that this is a valid signature and I can view the certificate. In Reader 9, however, I receive a huge question mark, but it still specifies that the signature is valid and I can view the certificate. In Reader X, the signature is "UNKOWN".
    How do I get rid of the question mark? Even if I delete the vector data for the drawing the question mark in the plugin, a big yellow question mark is still being displayed in Reader 9 and X.
    Thank you,
    Magda

    Again, I know NOTHING about your plugin, your code, the certificate in question, etc.
    The ONLY WAY to get you an answer is for you to provide our support staff with the PDF in question, at least as a starting point.  Please open a support contract.
    From: Adobe Forums <[email protected]<mailto:[email protected]>>
    Reply-To: "[email protected]<mailto:[email protected]>" <[email protected]<mailto:[email protected]>>
    Date: Fri, 4 Nov 2011 06:25:35 -0700
    To: Leonard Rosenthol <[email protected]<mailto:[email protected]>>
    Subject: Signing a document using a plugin in different versions of Reader
    Re: Signing a document using a plugin in different versions of Reader
    created by magdakuit<http://forums.adobe.com/people/magdakuit> in Acrobat SDK - View the full discussion<http://forums.adobe.com/message/4007539#4007539

  • Different versions of the same app on the app store

    Is it possible to let users download the different versions of the same app from the App store,( even though I have not seen it but just wonder whether it is possible) ?
    If not then can we have different releases of the same product with different feature set.
    This question is applicable for iPhone as well.
    Thanks

    Wouldn't do you any good, as you need to be a registered developer to use the forum. Just contact one of the developer's of an app you're interested in and ask the developer directly.

Maybe you are looking for

  • IDT Audio Nuances

    Hi, I'm currently using a HP Spectre XT 2001tu. Everything was working fine until I had to reinstall the Windows 7 OS due to memory dump issues. And I deleted the recovery partition because of my sheer ignorance. After the installation, everything is

  • Mapping Multiple Source fields to Single Target Fields with differnt Values

    Hello Friends, I am having a senario  where I have to mapped multiple fileds from source str. to same Idoc Fields with ( differnt default values ) E.g Source Str. - ShopNO - OrderTyp Has to mapped to Idoc Str E1EDK14-Orgid. E.g Mapping: So when ShopN

  • Problem with touch pad

    ''Duplicate post, continue here - [https://support.mozilla.com/en-US/questions/794303]'' i can't use the '''touch pad''' in FF4 RC2..why?..with mouse no problem but with touch pad there is... i have acer aspire 7520G thank you!

  • My coumpter restarts every time I connect my iPod touch

    It was working just fine yesterday. But now every time I connect it my coumpter restarts before I connect to iTunes or anything.It is also picking it up as a camera. I dont know what to do and I got it just yesterday. Help?

  • How to Align and adjust this text or paragraph

    Can anyone help me to create something like the following texts in Adobe InDesign CS3? 5.3.3_______You have aligned these texts in Adobe InDesign CS3 5.3.3_______You have aligned these texts in ___________Adobe InDesign CS3 Thanks in advance