Realm

Question

Hi,
I am using weblogic 6.1.I require some help for configuring security realm. I tried
to use to the the RDBMSRealm provided with weblogic. My basic question is once I
configure a realm how do I make it active,i.e tell weblogic to use my RDBMSRealm
instead of the FileRealm that comes as default. I created a RDBMSRealm named defaultRDBMSRealmForOracle.
I specifed
<Realm FileRealm="defaultRDBMSRealmForOracle" Name="myRealm"/>
and used myRealm in the security element like
<Security GuestDisabled="false" Name="examples"
PasswordPolicy="wl_default_password_policy" Realm="myRealm" SystemUser="system"/>
But while startup it gives the following error:
The WebLogic Server did not start up properly.
Exception raised: weblogic.management.configuration.ConfigurationException: unde
fined mbean reference: examples:Name=defaultRDBMSRealmForOracle,Type=FileRealm
weblogic.management.configuration.ConfigurationException: undefined mbean refere
nce: examples:Name=defaultRDBMSRealmForOracle,Type=FileRealm
Can any one help me out.
This is my configuration:
<RDBMSRealm DatabaseDriver="oracle.jdbc.driver.OracleDriver"
DatabasePassword="{3DES}wL7uXTxIQlKbY1dFx3XbAg=="
DatabaseURL="jdbc:oracle:thin:@10.32.0.114:1521:DMCRLRD1"
DatabaseUserName="wsbenadmin" Name="defaultRDBMSRealmForOracle"
Notes="This is provided as an example and is designed to work with the schema
created for the examples.security.rdbmsrealm example. To enable this RDBMSRealm,
you must first create the database tables and edit the configuration parameters as
appropriate for your environment."
RealmClassName="examples.security.rdbmsrealm.RDBMSRealm" SchemaProperties="getGroupMembers=SELECT
GM_GROUP, GM_MEMBER from groupmembers WHERE GM_GROUP = ?;deleteGroup2=DELETE FROM
aclentries WHERE A_PRINCIPAL = ?;deleteGroup1=DELETE FROM groupmembers WHERE GM_GROUP
= ?;addGroupMember=INSERT INTO groupmembers VALUES ( ? , ? );getUser=SELECT U_NAME,
U_PASSWORD FROM users WHERE U_NAME = ?;getPermission=SELECT DISTINCT A_PERMISSION
FROM aclentries WHERE A_PERMISSION = ?;deleteUser3=DELETE FROM aclentries WHERE A_PRINCIPAL
= ?;getGroupNewStatement=false;deleteUser2=DELETE FROM groupmembers WHERE GM_MEMBER
= ?;deleteUser1=DELETE FROM users WHERE U_NAME = ?;getAcls=SELECT A_NAME, A_PRINCIPAL,
A_PERMISSION FROM aclentries ORDER BY A_NAME, A_PRINCIPAL;getUsers=SELECT U_NAME,
U_PASSWORD FROM users;getGroups=SELECT GM_GROUP, GM_MEMBER FROM groupmembers;getPermissions=SELECT
DISTINCT A_PERMISSION FROM aclentries;getAclEntries=SELECT A_NAME, A_PRINCIPAL, A_PERMISSION
FROM aclentries WHERE A_NAME = ? ORDER BY A_PRINCIPAL;newUser=INSERT INTO users VALUES
( ? , ? );removeGroupMember=DELETE FROM groupmembers WHERE GM_GROUP = ? AND GM_MEMBER
= ?"/>
<Realm FileRealm="defaultRDBMSRealmForOracle" Name="myRealm"/>
<Security GuestDisabled="false" Name="examples"
PasswordPolicy="wl_default_password_policy" Realm="myRealm" SystemUser="system"/>

Answer 1

"Sudipta Sarkar" <[email protected]> wrote in
news:[email protected]:
>
Hi,
I am using weblogic 6.1.I require some help for configuring security
realm. I tried
to use to the the RDBMSRealm provided with weblogic. My basic question
is once I configure a realm how do I make it active,i.e tell weblogic
to use my RDBMSRealm instead of the FileRealm that comes as default. I
created a RDBMSRealm named defaultRDBMSRealmForOracle. I specifed
<Realm FileRealm="defaultRDBMSRealmForOracle" Name="myRealm"/>
and used myRealm in the security element like
<Security GuestDisabled="false" Name="examples"
PasswordPolicy="wl_default_password_policy" Realm="myRealm"
SystemUser="system"/>
But while startup it gives the following error:
The WebLogic Server did not start up properly.
Exception raised:
weblogic.management.configuration.ConfigurationException: unde fined
mbean reference:
examples:Name=defaultRDBMSRealmForOracle,Type=FileRealm
weblogic.management.configuration.ConfigurationException: undefined
mbean refere nce:
examples:Name=defaultRDBMSRealmForOracle,Type=FileRealm
I'm pretty sure that to use any Realm other than the FileRealm in 6.1 you
need a CachingRealm configured in front of it. The best way to set this up
is to use the Console to add the RDBMSRealm that you want since the console
is going to know what sorts of things need to be configured.
Doesn't the config.xml already have comments in it about what you need to
add to the CachingRealm line?
This is my configuration:
<RDBMSRealm DatabaseDriver="oracle.jdbc.driver.OracleDriver"snip
<Realm FileRealm="defaultRDBMSRealmForOracle" Name="myRealm"/>
<Security GuestDisabled="false" Name="examples"
PasswordPolicy="wl_default_password_policy" Realm="myRealm" SystemUser="system"/>
>
I'm thinking it should be something like but I haven't tried it...I just
looked at the comments in the config.xml:
<Security GuestDisabled="false" Name="examples"
PasswordPolicy="wl_default_password_policy" Realm="defaultRealm" SystemUser="system"/>
<Realm
Name="defaultRealm"
CachingRealm="defaultCachingRealm"
FileRealm="defaultFileRealm"
/>
<FileRealm
Name="defaultFileRealm"
/>
<CachingRealm
Name="defaultCachingRealm"
BasicRealm="defaultRDBMSRealmForOracle"
/>
Again, your best best is to use the console and then see what it did. There
is an explicit paragraph that tells you what you need to do:
http://e-docs.bea.com/wls/docs61/adminguide/cnfgsec.html#1052867
Paul