UCM 11g and Weblogic SQL Authenticator

A bit lengthy question about UCM 11g using WLS Security providers for user authentication.
There's a lot of stuff on the web about integrating UCM 11g with WLS AD/LDAP authenticators. However there's literally nothing about integrating it with SQL-based authenticators. Does it mean that using WLS's built-in providers other than AD/LDAP is not supported ?
I tried configuring my Custom DBMS Authenticator - it works fine. I can see my users/groups and membership info read from the DB in WLS Admin Console. The users can even log in to the Content Server but their WLS groups are never mapped to UCM roles/accounts. I tried reordering the WLS authenticators so that the DBMS authenticator is at the top but this does not help. Does this mean that group -> role/account mapping works only with LDAP ?
thanks in advance

Hi Sirnath,
Thanks for the prompt reply.
I did another exercise and defined the contributor group in both the DefaultAuthenticator and the SQL Authenticator and created two users 'default' (int the DefaultAuthenticator) and 'sql' (in the SQL authenticator). Both users are members of the 'contributor' group (in the respective Authenticator). If I log in as either of the users they all have the proper principals/credentials set in the javax.security.auth.Subject instance (the 'contributor' is a principal and a credential in both cases). However UCM maps it to a role only for the 'default' user.
Is it possible that the JPS provider somehow bypasses the javax.security.auth.Subject abstraction? Do you know of any related docs available online ?

Similar Messages

  • Start UCM 11g and IBR on WindowsServer 2008 during startup of the server

    Hello,
    I did install ucm 11g with an inbound refinery on a windows server 2008 64bit. The ucm and ibr are supposed to start automatically after the server is being turned on.
    1. I did put the startWeblogic.cmd and the startNodeManager.cmd inside the Autostartup directory. The weblogic and the nodemanager are being started fine in a dos console.
    2. I tried to start the ucm with the following command startManagedWeblogic UCM_Server1. Then it asks me for a username and password and then it throws a java exception and the UCM_Server1 is not being started.
    The current status is that the weblogic and nodemanager will be started automatically and the UCM_Server1 and IBR_Server1 have to be started manually.
    What is the usual way to startup the ucm automatically? Should I create Windows Services?
    Greetings
    Bodhy

    The best way is probably a Windows Service. Here is Oracle documentation on how to do this.
    http://download.oracle.com/docs/cd/E12840_01/wls/docs103/server_start/winservice.html
    You could also try the Windows Task Scheduler. I have heard this works well (although a Windows Service would be better).
    http://www.windowsnetworking.com/articles_tutorials/Working-Windows-Server-2008-Task-Scheduler-Part1.html
    This post shows how to store your WebLogic login information encrypted on disk.
    http://corecontentonly.com/2010/07/27/start-weblogic-managed-server-without-username-and-password/
    Jonathan
    http://www.corecontentonly.com

  • Database link between Oracle 11g and MS Sql Server 2005 EE

    Hi everybody,
    I trying to create database link from Oracle 11g to MS Sql and I'm not succesful.
    I found tutorial for Oracle 10g, but it does't work.
    I created odbc data source, then I modified tnsnames.ora and listener.ora, then I created initkw.ora in HS directory and then I created dabase link, but it does't work.
    Can you help me please? Thanks for help ... ondra
    Tnsnames.ora:
    KW =
    (DESCRIPTION =
    (ADDRESS_LIST =
    (ADDRESS = (PROTOCOL = tcp)(HOST = oracle_ip)(PORT = 1521))
    (CONNECT_DATA =
    (SID = KW)
    (HS = OK)
    listener.ora:
    (SID_DESC =
    (SID_NAME = KW)
    (ORACLE_HOME = C:\oracle\product\11.1.0\db_1)
    (PROGRAM = hsodbc)
    initkw.ora
    HS_FDS_CONNECT_INFO = kw
    HS_FDS_TRACE_LEVEL = 0
    HS_FDS_TRACE_FILE_NAME = kw.trc
    create public database link KW connect to "user" identified by "pass" using 'KW';
    Message was edited by:
    user598176

    Hi, I get two errors.
    ORA-28545 - NET8 mistake Unable to restrieve textof NEWTWORK/NCR message 65535
    and then ORA-02063
    zenda
    I resolved one of error, I have wrong ip.
    But now I have another error:
    ORA-28500: connection from ORACLE to a non-Oracle system returned this message:
    [Generic Connectivity Using ODBC][Microsoft][ODBC Driver Manager] Data source name
    not found and no default driver specified (SQL State: IM002; SQL Code: 0)
    I have ODBC data source in system DSN
    PS: Our Oracle 11g database is 64 bit version
    Message was edited by:
    user598176

  • OBIEE 11g and Weblogic on different Servers

    Hi every
    Can we install OBIEE 11g on one server and weblogic and another server?
    How to indicate in obi configuration, that weblogic is on another server?
    Is there a manual or link that prove it?
    I appreciate your prompt replies
    Regards
    Pedro

    Install BIServer and BIPresentaionServer on one server and deploy BIPS plug-in on Weblogic server where it is installed,so the both will talk with the weblogic server.

  • OBIEE 11g and Weblogic on different Servers - Windows 2008 R2

    Hi
    Can we install OBIEE 11g(BI Server and Presentation Servers) on one server and weblogic and another server. We have a requirement where we need to differentiate all the components on to its own server for performance reasons. How can we do the configurations if we have installed on how to talk to weblogic after the installations.
    Thanks

    Yes we can do that
    a) Install BIS and BIPS on one server and deploy BIPS plug-in on Weblogic server where it is installed,so the both will talk with the weblogic server.
    http://docs.oracle.com/cd/E10415_01/doc/bi.1013/e10417.pdf
    Mark if it helps

  • UCM 11g and SDL translator Integration

    Hi,
    I have to integrate UCM 11g with SDL Trados. SDL Trados is a software which is used for translating the content from one language to another language.
    Anyone has an idea about this integration.
    Thanks

    Hi Srinath,
    Thanks for the reply.
    My requirement is when i checkin a content in english (default language), the content should be translated to multiple languages (which will be captured from the check in screen itself) and translated content should again be checkedIn to the content server.
    Im planning to write a custom service which will invoke the translation tool to translate the content.Again, after retrieving the content i will checkin the content using intradoc api.
    Is lingotek software a translation tool? Is my requirement can be achieved with lingo software?
    If yes, How can i invoke this from my service. Is there any java APIs are provided from lingo? Can u share me some useful link .

  • ODI 11g and Weblogic Server Link

    Hi All,
    I am beginner to work on ODI. Currently installing ODI 11g. I wan to install ODI on my pc and my database is installed on another server.
    Can we Install ODI without weblogic server to work with database using connection string?
    Weblogic server is pre-requisite for ODI installation? or we can just install standalone and start it using by connecting database same like OWB.
    Please Help,
    Waqas

    If you want to have J2EE agent, then only you will need Weblogic server.
    Can we Install ODI without weblogic server to work with database using connection string?
    Yes, you can use Standalone or local agent to connect to database. Weblogic server is not mandatory. You should be good to go.
    Regards,
    Santy.

  • MapViewer 10.1.3 / 11g and WebLogic

    Hi forum
    After Oracle's acquisition of BEA, I have read a lot of places that OC4J will be desupported soon and replaced with the WebLogic Java container. Among others, Steve Cosner from Oracle has declared the OC4J 11g preview to be dead and soon to be replaced with WebLogic - he wrote that on the forum somewhere recently.
    Where does this put me in regard to testing the upcoming MapViewer 11g? Is the 11g tech preview compatible with WebLogic 10.3? And if I wanted to, could I migrate my existing MapViewer 10.1.3.1 installation from OracleAS 10.1.3.3 to WebLogic 10.3 already now, since this clearly seems as the way to go? And would I gain any benefits from doing this already now?
    Please clarify the current situation.
    Thanks,
    Jacob

    Jacob,
    We had the same concerns. After hearing our Oracle Pre-Sales rep say similar things as your posting, he came back later and clarified the following:
    Oracle will soon have two streams for middle-ware. One that is the new BEA-based family of re-branded Oracle "Strategic" middleware (e.g. JRockit, WebLogic, etc.). The other is a continuation of the existing iAS stream (e.g. Oracle HTTP Server, OC4J, etc.).
    The latter is not 'strategic' (our Oracle rep used this word, not me) and will be around for the 'foreseeable future'. I agree with the first part (not strategic) but I seriously doubt the latter. After having lived through many of Oracle changes-in-direction, I'm planning a migration from iAS to the 'now strategic' stream. I'm sure Oracle is already working on similar mechanisms to move its customers to the 'strategic' stream.
    However, you will have some time before you're forced to move (and to deal with the MapViewer issue).
    HTH
    Gary
    BTW, I have a PowerPoint slide deck that describes this, and has one slide in particular that lays out the two streams, with the specific products and offerings in each. Let me know if you want a copy.

  • Error while compiling a custom pll with forms 11g and weblogic

    Hi there,
    I just posted a thread here:
    Error FRM-30312 while compiling a custom pll library on forms 11g weblogic
    please, I need help

    Why wouldn't you post in the proper forum, i.e the Forms forum

  • Connection pool error with oracle 11g and weblogic 10

    Hi,
    my code is:
    public Connection getConnection() {
              properties = new Properties();
              properties.put(Context.INITIAL_CONTEXT_FACTORY,
                        "weblogic.jndi.T3InitialContextFactory");
              //properties.put(Context.SECURITY_PRINCIPAL, "weblogic");
              //properties.put(Context.SECURITY_CREDENTIALS, "weblogic");
              properties.put(Context.PROVIDER_URL, "t3://172.23.61.214:7001/");
              try {
                   initialContext = new InitialContext(properties);
                   datasource = (DataSource) initialContext.lookup("sample_jndi");
                   try {
                        connection = datasource.getConnection();
                   } catch (SQLException e) {
                        e.printStackTrace();
              } catch (NamingException e) {
                   e.printStackTrace();
              return connection;
    it is giving Exception at line " connection = datasource.getConnection(); "
    Exception is:
    javax.naming.CommunicationException [Root exception is java.rmi.ConnectIOException: error during JRMP connection establishment; nested exception is:
         java.io.EOFException]
         at weblogic.jrmp.Context.lookup(Context.java:189)
         at weblogic.jrmp.Context.lookup(Context.java:195)
         at javax.naming.InitialContext.lookup(Unknown Source)
         at com.code.sample.connectionDB.JDBCConnectionPool.getConnection(JDBCConnectionPool.java:35)
         at com.code.sample.connectionDB.JDBCConnectionPool.main(JDBCConnectionPool.java:52)
    Caused by: java.rmi.ConnectIOException: error during JRMP connection establishment; nested exception is:
         java.io.EOFException
         at sun.rmi.transport.tcp.TCPChannel.createConnection(Unknown Source)
         at sun.rmi.transport.tcp.TCPChannel.newConnection(Unknown Source)
         at sun.rmi.server.UnicastRef.newCall(Unknown Source)
         at sun.rmi.registry.RegistryImpl_Stub.lookup(Unknown Source)
         at weblogic.jrmp.Context.lookup(Context.java:185)
         ... 4 more
    Caused by: java.io.EOFException
         at java.io.DataInputStream.readByte(Unknown Source)
         ... 9 more
    Please Advice.... Thanks

    I removed the "/" and tried..
    But the exception is same:
    javax.naming.CommunicationException [Root exception is java.rmi.ConnectIOException: error during JRMP connection establishment; nested exception is:
         java.io.EOFException]
         at weblogic.jrmp.Context.lookup(Context.java:189)
         at weblogic.jrmp.Context.lookup(Context.java:195)
         at javax.naming.InitialContext.lookup(Unknown Source)
         at com.code.sample.connectionDB.JDBCConnectionPool.getConnection(JDBCConnectionPool.java:35)
         at com.code.sample.connectionDB.JDBCConnectionPool.main(JDBCConnectionPool.java:52)
    Caused by: java.rmi.ConnectIOException: error during JRMP connection establishment; nested exception is:
         java.io.EOFException
         at sun.rmi.transport.tcp.TCPChannel.createConnection(Unknown Source)
         at sun.rmi.transport.tcp.TCPChannel.newConnection(Unknown Source)
         at sun.rmi.server.UnicastRef.newCall(Unknown Source)
         at sun.rmi.registry.RegistryImpl_Stub.lookup(Unknown Source)
         at weblogic.jrmp.Context.lookup(Context.java:185)
         ... 4 more
    Caused by: java.io.EOFException
         at java.io.DataInputStream.readByte(Unknown Source)
         ... 9 more

  • Is there a quickstart guide for WLS 10.3.1 (11g) and WebLogic Portal?

    I already have installed WebLogic 10.3.1 on my laptop, and want to know if if is possible to install portal without all of the extra options that seem to be required by the install document. I want to run portal on my laptop for development, and don't want the extra overhead of an ldap server. The goal is to create portlets, and want a portal to test my deployments to. If there is another or better way to accomplish this, I would really like to know!
    I was hoping that Oracle SC's or someone else would have already solved this, possibly in a VM environment, and could post a solution.
    Thanks, Ken

    The LDAP server is embedded and isnt really an overhead. Autonomy is a much bigger overhead and unless you are using search you should turn it off. (WLP_SEARCH_OPTION=none in your start)
    See
    http://peterlaird.blogspot.com/2007/05/optimized-development-for-weblogic.html

  • Oracle UCM 11g Config with DB

    Hi,
    I have configured Oracle UCM 11g in oracle sql developer, but am not able to see the tables related to Oracle UCM..(ex: Revisions, Docmeta).
    Any documentation on this or any one faced this kind of issue.
    Thanks...

    I'd suggest you to follow the Installation guide - see Oracle® Fusion Middleware Installing and Configuring Oracle WebCenter Content 11g Release 1 (11.1.1) - Contents
    In a nutshell, tables (and everything else in the data model) are created by a utility called RCU. This is one pre-req to run the installation. Another issue could be that you have done installation, but you don't use the correct db user (scheme owner) to connect. The correct user for an installed instance can be obtain from the Weblogic admin console.

  • Webcenter and weblogic for windows 7 64 bit

    hi all,
    I have laptop which has windows 7 64 bit
    i want to install webcenter 11g and weblogic. i did not find 64 bit version. does any one know, where can i find 64 bit version download ?
    thx
    dd

    There isn't realy a 64 bit version but you can use the 32 bit version.
    I also have a laptop with windows 7 64 bit and i have installed webcenter and weblogic without any problems.

  • Character display problems....11g connecting to SQL server

    Hi Gurus,
    db: 11.2
    os: redhat 5.5
    there is a problem when with character display with sqlplus and even worst on TOAD, SQL Developer tool.
    there is a Heterogeneous connection between 11g and ms sql serever. i use freedts, unixodbc and dg4odbc to establish the connection.
    using isql tool...the select statement was well formatted..see sample |
    | Ventes USIM |
    | Resprise de charge provisionnees sur creance BUT when i use sqlplus some character are shattered..please see sample
    COST_NAME
    V e n t e s U S I M
    R e s p r i s e d e     c h a r g e p r o v i s i o n n e e s s u r c r e
    a n c ein other client tool e.g TOAD the output is worse just show only the first character of each row e.g V
    i have tried french and english value for nls_language but did not solve the problem.
    anybody with a clue of what is wrong...thanks

    It looks like some wrong character set conversion (more exactly -- lack of it) involving UTF-16 from MS SQL Server NVARCHAR data type. I cannot tell what went wrong and if this is a bug as I do not have experience with this configuration. Please, work with Oracle Support to diagnose and fix this issue.
    -- Sergiusz

  • AD Integration with UCM 11g - Selecting users from multiple OU

    Hi All,
    I have integrated AD with UCM 11g and able to login with AD username/password to UCM application.
    The one problem I face, the users of this application are scattered in different OUs in AD. Like OUs are created for different locations and users are present in that OU. I'm unable to select all the users of this application from different OU's.
    Like the users are present in below OUs.
    OU=Users,OU=America,DC=compnay,DC=net
    OU=Users,OU=Canada,DC=compnay,DC=net
    In User Base DN - What should i give? When i give any one of the above I get the users properly.
    Also is it possible to select users by querying a security group in AD and getting all the members (Users) of it. Because in our application we have only three roles (mapped to the corresponding three security group in AD), and all users of this application are assigned one of that role. So, I could get all the users by querying the security group. But I do not know if that is possible.
    Please advise.
    Kind Regards,
    Selvam S

    Hi Selvam,
    Just put User Base DN: DC=compnay,DC=net
    This will pull all users from both OU, along with some unwanted entries like computers on the domain. Another, possibly silly proposal, would be to create two Ldap authenticators with different User Base DN. Both should be on the top of authenticators list with Sufficient flags.
    Regards,
    Boris

Maybe you are looking for