ACL Question in Weblogic

Hi,
From the Weblogic document, it mentioned that the ACL only work on file Realms.
Can it apply to directory like http://www.bea.com/*.
Here is what I need to do:
For http://www.bea.com:7001 is free to access,
for http://www.bea.com:7001/administrator or http://www.bea.com:7001/test can
only be access from certain IP arrange or VPN.
Can it be done by Weblogic? or I need to build my own http proxy?
Furthermore, I saw that Weblogic also support UNIX Security Realm, does I means
that I can allow only defined UNIX user to access certain directory ot files?
btw, I am using Weblogic 6.1.
Thanks a lot!!

Hi Jon,
Your issue should be raised with BEA support. With regard to your second isssue:
"and this be included in the documentation outlining the
responsibilities for implementing a custom realm."
You should raise this as an enhancement either via the support channels or via
[email protected]
Kind Regards,
Richard Wallace.
Senior Developer Relations Engineer.
BEA Support.
"Jon Wilmoth" <[email protected]> wrote:
I've implemented a custom realm on wl6.1 sp1 which extends the LDAPv2
realm
(implementing the ManageableRealm interface) for users and groups and
delegates to a rdbms delegate for aclentry management. I read an earlier
post about revoking a permission which requires a custom realm to augment
the weblogic.security.acl.AclImpl class. My question is similar in nature.
In a situation where a positive AclEntry needs to be changed to a negative
entry, what are the requirements imposed on the custom realm implementer?
Do I need to worry about the checkPermission call on the Acl implementation?
On the AclEntry implementation? Is there a BEA recommended path similar
to
that for revoking permissions?
I would also recommend that the BEA responses to the revoking permissions
post and this be included in the documentation outlining the
responsibilities for implementing a custom realm.
Thanks!
Jon
Jon Wilmoth
Software Architect
eSage Group
(206) 264-5675 (Voice & Fax)
[email protected]
http://www.esagegroup.com

Similar Messages

Question about Weblogic

Hello,
I have a question about Weblogic and would like someone to help me with it.
I created a JSP and everything was doing fine while i was testing it in Tomcat. But once I started the tests with Weblogic, it seemed Weblo wasn't accepting a class that i used to call from my JPS ( a sax parser). Instead of using my parser, Weblogic was using his default SAXParser, what causes problems to my JSP. Trying to solve this, I changed the classpath in Weblo and putted the jar of my parser in the beginning of the classpath, but it still didn't work. Does anyone have an idea of why Weblogic don't accept my parser and uses its default parser instead?
Thanks in advance!!
M@G

naveen.g wrote:
How to get the path of the domain, where my application is running, in a java code?
For example, my domain path is "D:\bea\user_projects\domains\production". How to get this path dynamically?Please start a new topic instead of resurrecting an old and non-related thread and hijacking others' threads.

CCNA - ACL question

Hi,
I'm studying for the CCNA 640-801 exam and in some study materials there is the following ACL question and I don't understand why the answer is what it is. I was hoping someone in here could help with explaining why. Thanks.
Router1-s0--------s0-Router2-s0--------s0-Router3
___|________________|_______________|____
PCA through PCF all seem to be connected to a common backbone. All three routers appear to also be connected to the same backbone as the PCs. Router1 conects to Router2 which connects to Router3.
PCA - 5.1.1.8/24
PCB - 5.1.1.10/24
PCC - 5.1.2.10/24
PCD - 5.1.2.20/24
PCE - 5.1.3.8/24
PCF - 5.1.3.10/24
You're the systems administrator at Cisco, and you create the following access control lists.
access-list 101 deny tcp 5.1.1.10 0.0.0.0 5.1.3.0 0.0.0.255 eq telnet
access-list 101 permit any any
You then enter the command "ip access-group 101 in" to apply access control list
101 to router1's e0 interface.
Which of the following Telnet sessions will be blocked as a result of your access
lists? (Select all that apply)
A. Telnet sessions from host A to host 5.1.1.10
B. Telnet sessions from host A to host 5.1.3.10
C. Telnet sessions from host B to host 5.1.2.10
D. Telnet sessions from host B to host 5.1.3.8
E. Telnet sessions from host C to host 5.1.3.10
F. Telnet sessions from host F to host 5.1.1.10
Answer D & F
I understand answer D, that is straight forward and easy to understand however I don't understand answer F. The ACL statement, 'access-list 101 deny tcp 5.1.1.10 0.0.0.0' specifically has the source host listed which is not PCF. I would think only addresses matching the source address in the ACL should be blocked. Thanks to anyone who can help.

Riley
I have an issue with their solution and an issue with your solution.
I think that the major flaw in their solution is putting the access-group on the serial interface as an inbound filter. As an inbound filter on the serial 192.168.1.1 or 192.168.118.0 would be the source address and their access list has it as the destination. Putting the access list as inbound on Ethernet 0 is effective. Putting it also on serial 1 adds no effectiveness. I am not clear whether they were again trying to point out the possibility of preventing telnet by denying the response traffic. But you can not do both in one access list which is limited to 3 statements.
Another (small) issue with their access list is in the second line:
access-list 101 deny tcp any 192.168.118.0 0.0.0.0 eq 23
The mask is for a specific host but 192.168.118.0 is not a host. It is the network/subnet address and no legitimate traffic will ever have that as a source address.
The main issue in your access list is the placement of "eq 23". You have it coming before the source address and the "eq port" comes after an address specification (after either the source or after the destination) and not before both of the addresses. Also if your access list is inbound on interface Ethernet 0 then telnet traffic to router 1 will have port 23 (telnet) as the destination port.
There is an apparent difference between your list and their list but it does not matter. You specify 192.168.134.0/24 as the source address and they specify any as the source address. Since the network explanation indicates that 192.168.134.0 is the only network behind E 0 the effect of the access lists does not change between the two source address specifications.
I agree with Kevin that there does not appear to be a lot of effective proof reading of this material. I have taught Cisco classes and I have written training material and I appreciate that this is difficult to do. But it is highly unfortunate and lowers the credibility of the material (and their source) when these kinds of mistakes are apparent.
HTH
Rick

ACLS QUESTION - 2 LAN SEGMENTS - ISSUE

ACLS QUESTION - 2 LAN SEGMENTS - ISSUE
I have a scenario where 2 LAN segments are separated by a router, Admin and Students. There is a DNS server and an EMAIL server on the admin segment. Students should be able to access DNS and EMAIL services (smtp, pop3 and dns). No access to any other traffic. Admin should have full access to the student LAN segment. I managed to implement all the filtering with extended ACLS placed on the router as follows:
access-list 105 permit tcp any any eq smtp
access-list 105 permit tcp any any eq pop3
access-list 105 permit tcp any any eq www
access-list 105 permit udp any host 10.20.0.2 eq 53
access-list 105 deny ip any any
int e1/1
ip access-group 105 in
But for some reason it does not allow any access from the admin segment to the students segment.
EMAIL AND DNS ARE WORKING FINE FROM THE STUDENTS SEGMENT AND PINGS FAIL AS EXPECTED AFTER THE COMMANDS MENTIONED WERE ISSUED.
ADMIN SHOULD BE ABLE TO PING STUDENTS SEGMENTS
AFTER ATTEMPTING MANY TIMES AND DIFFERENT CONFIG I TRIED THE FOLLOWING:
access-list 106 permit ip any any
int e1/0
ip access-group 106 in
I also tried
int e1/1
ip access-group 106 in
BUT ADMIN STILL HAS NO ACCESS TO THE STUDENTS SEGMENTS!!!!!!
WHY NOT?
FEW FELLOWS TRIED IT OUT AS WELL IN PACKET TRACER WITH NO SUCCESSFUL RESULTS...
:S
I WOULD REALLY APPRECIATE SOME HELP ASAP!
THANK YOU IN ADVANCE,
MIGUEL
Posted by WebUser Miguel Pcn

Hi Miguel ,
You issue is the returning packet for the session initiated by the Admin - caused by deny ip any any on access-list 105
For the "ping" from admin to student to work add :
access-list 105 permit any any echo-reply
What kind of access is need it from Admin to Student ?
Dan

Questions on Weblogic RMI

Hi
          I've a few questions on WL RMI that I couldn't figure out from the
          documentation.
          Suppose I have a cluster containing Weblogic servers server1 and server2.
          Server1 hosts an RMI object o1 that is bind to the cluster wide JNDI tree.
          O1 implements remote interface i1 that has a method m1 which takes as an
          argument an object o2 implementing remote interface i2. That is:
          public class o1 implements i1 {...}
          public interface i1 extends weblogic.rmi.Remote {
          public void m1 (i2 _o2);
          public class o2 implements i2 {...}
          public interface i2 extends weblogic.rmi.Remote {...}
          Now if inside server2 I create o2 using the default constructor, lookup a
          reference to o1 and call method m1, will o2 get passed by value or by
          reference? Is there any way to control this? What if I don't use the
          constructor to create the object but the object is hosted in server2 and I
          get a reference to the object using JNDI lookup? In short, how does WL RMI
          decide when to pass an object by reference and when by value.
          I'm trying to increase the scalability of a system by distributing its
          modules as RMI objects to several machines running Weblogic server, and I
          need to know the details on how WL RMI works. The documentation seems to be
          rather inadequate...
          Thanks for reading this far :)
          - Juha


Actually, O2 will always be passed by reference because it is an RMI object
          (i.e., it implements weblogic.rmi.Remote). If O2 were a non-RMI object, it would
          be passed by value if O1 is in a different process and by reference if O1 and O2
          are in the same process.
          Edwin Marcial wrote:
          > My 2 cents on this:
          >
          > I believe in this case, since O2 is a remote object, it will get passed by
          > reference. If it were not a remote object, it would be passed by value.
          >
          > Edwin
          >
          > "Juha Lindström" wrote:
          >
          > > Hi
          > >
          > > I've a few questions on WL RMI that I couldn't figure out from the
          > > documentation.
          > > Suppose I have a cluster containing Weblogic servers server1 and server2.
          > > Server1 hosts an RMI object o1 that is bind to the cluster wide JNDI tree.
          > > O1 implements remote interface i1 that has a method m1 which takes as an
          > > argument an object o2 implementing remote interface i2. That is:
          > >
          > > public class o1 implements i1 {...}
          > >
          > > public interface i1 extends weblogic.rmi.Remote {
          > > public void m1 (i2 _o2);
          > > }
          > >
          > > public class o2 implements i2 {...}
          > >
          > > public interface i2 extends weblogic.rmi.Remote {...}
          > >
          > > Now if inside server2 I create o2 using the default constructor, lookup a
          > > reference to o1 and call method m1, will o2 get passed by value or by
          > > reference? Is there any way to control this? What if I don't use the
          > > constructor to create the object but the object is hosted in server2 and I
          > > get a reference to the object using JNDI lookup? In short, how does WL RMI
          > > decide when to pass an object by reference and when by value.
          > >
          > > I'm trying to increase the scalability of a system by distributing its
          > > modules as RMI objects to several machines running Weblogic server, and I
          > > need to know the details on how WL RMI works. The documentation seems to be
          > > rather inadequate...
          > >
          > > Thanks for reading this far :)
          > >
          > > - Juha

Questions on Weblogic SNMP

Hi,
I have managed to start WLS snmp agent in Solaris2.7 but I have a couple
of questions on the following:
./snmpget stage57 public
.1.3.6.1.4.1.140.600.20.1.20.10.115.116.97.110.100.97.108.111.110.101.11.115.101.114.118.101.114.45.55.48.48.49
1) Why do I need to put in so many trailing numbers in order to snmpget
data from an object? What do these number mean? Any documnetation on
them? Based on the WLS MIB tree .1.3.6.1.4.1.140.600.20.1.20 is where
the serverState is located.
2) Why did serverState always return 1 (which means UP) even 2 minutes
after I brought down the server on port 7888 and ran the above on the
command line? In the startSNMPAgent.sh file, I have specify the port
number in this line "$JAVA weblogic.SNMPAgent -password 123 -serverURLs
t3://stage57:7888 -trapDestinations localhost:162".
enterprises.140.600.20.1.20.10.115.116.97.110.100.97.108.111.110.101.11.115.101.114.118.101.114.45.55.48.48.49
= 1
Any help is appreciated.
Jie Chen
http://home.cnet.com

Jie Chen <[email protected]> wrote in message news:[email protected]..
Hi,
I have managed to start WLS snmp agent in Solaris2.7 but I have a couple
of questions on the following:
./snmpget stage57 public
.1.3.6.1.4.1.140.600.20.1.20.10.115.116.97.110.100.97.108.111.110.101.11.115
.101.114.118.101.114.45.55.48.48.49
>
1) Why do I need to put in so many trailing numbers in order to snmpget
data from an object? What do these number mean? Any documnetation on
them? Based on the WLS MIB tree .1.3.6.1.4.1.140.600.20.1.20 is where
the serverState is located.- snmpget needs the OID of a specific instance of a Server in the
ServerTable. (see the SNMP RFCs for details on OID encoding - or i am sure i
have ans. this question in some other message in this newsgroup)
- or use snmpwalk with just '.1.3.6.1.4.1.140.600.20.1.20 ' . walk doesn't
need the specific OID.
>
2) Why did serverState always return 1 (which means UP) even 2 minutes
after I brought down the server on port 7888 and ran the above on the
command line? In the startSNMPAgent.sh file, I have specify the port
number in this line "$JAVA weblogic.SNMPAgent -password 123 -serverURLs
t3://stage57:7888 -trapDestinations localhost:162".
enterprises.140.600.20.1.20.10.115.116.97.110.100.97.108.111.110.101.11.115.
101.114.118.101.114.45.55.48.48.49
= 1the default refresh interval in the agent is 5 minutes. You can reduce that
if you want. See -refreshInterval @
http://www.weblogic.com/docs51/admindocs/snmpagent.html#use_agent
>
Any help is appreciated.
Jie Chen
http://home.cnet.com

I have a question about weblogic RMI , how can I resolve it.Thank you

I have a question about the weblogic RMI .
I have a program.web services+weblogic RMI +Data Sources When I run the program in the console application.it is ok.But When i run it with the web services(it 'is mean Get some parameter and run the different program).it's fail.The Exception is
cannot assign instance of yype weblogic.rmi.RMIServices_1033_WLStub to field demo.RMIServer_1033_WLStub.stubinfo of type weblogic.rmi.internal.StubInfo in instance of demo.RMIEsrver_1033_WLStub
how to resolve .Thank you.

Hi Charles,
Parental Controls has always had problems with https sites, no idea if it's fixed in 10.9.x or not.
When you setup your Mac it shouldv'e made an admin account, are you not running from that account, or did you somehow change it to a Managed account???

Question about WebLogic query syntax

Hello,
I am using WebLogic Server 6.0, which came as part of the WebGain
Studio SE 4.5 development kit. My question regards the Web Logic query
syntax, which I have not yet mastered.
I am trying to create a finder method that takes a single argument
of type "char" and finds all matching fields of the column "keyword" in
which the argument is the first letter of keyword. That is, if I were
only looking for fields beginning with the letter "M", I'd use:
(like keyword 'M%')
However, I'm looking for all fields beginning with the first letter
defined by the first argument. Sadly, this syntax:
(like keyword '$0%')
doesn't seem to be working. Any suggestions on the correct syntax?
If this is not the right forum for this question, could someone
suggest an appropriate newsgroup?
Thanks, Dave

962466 wrote:
Hi all,
I have an issue I need help with. I have created a script for an automated partition create on a monthly basis. It creates a monthly partition containing all dates within the respective month. The script is essentially this:
ALTER TABLE SCHEMA.TABLE
ADD PARTITION &&1
VALUES LESS THAN (to_number(to_char(to_date('&&2', 'DD-MON-YY'), 'YYYYMMDD')))
TABLESPACE LARGE_DATA94 COMPRESS;
I continually get this error message "ORA-14019: partition bound element must be one of: string, datetime or interval literal, number, or MAXVALUE"
The variable &&2 is passing in character data for the first of the month (E.G. '01-SEP-12'). &&1 passes character data for the month in MONYY (AUG12) I can run this query:
select
(to_number(to_char(to_date('&&2', 'DD-MON-YY'), 'YYYYMMDD')))
from dual;
With the output of 20120801. I cannot understand why I am able to run this partition create statement by hardcoding 20120901 but passing it in as a variable I receive the error. Note that I am not having problems with the &&1 variable. If anyone has any ideas please let me know. Thanks!I don't understand why you are taking a string, converting it to a date, then converting the date BACK TO a string ... then trying to convert that string to a number.
What is the data type of the partitioning key? It appears that it is a NUMBER, but actually represents a DATE. If so, that is a fundamentally flawed design.

Architecture Question with WebLogic

          WE have started a new project using WebLogic (in fact we will do that very
          soon). Since we are new to WebLogic, we are questioning the following
          tradeoff:
          About the system:
          The end system will be a web-based application providing secure access to
          its web users. The business logics (combination of some session and entity
          beans) store data in Oracle. The system is very report intensive, meaning in
          most of the time, people using it to get some report. The system also have a
          specific web interface to specific user for administration purpose. The
          admin ultimately create, update, remove data stored in Oracle.
          Questions 1 -- Servlets, JSP, and use of RMI:
          To generate the report, we decide to use WebLogic Servlet with JSP. There
          are 40 different reports, and each is mapped to one servlets. There will be
          a servlet manager to start other servlets, the ones that actually using the
          JSP to dynamically generating the HTML pages (the report).
          The Servlets themselves have to interface with the business logic objects
          using RMI. They have to do that since we don't want to re-implement the
          business logic in the Servlet again. The Business logic (Java Beans)
          executes on separate NT computer. Is this is a good architecture?
          Question 2 -- Applet/application and RMI:
          The system needs to interact with some admin users. To do that, the business
          logic portion (the session and entity Beans) provide remote interfaces to
          the applets/application. With Applet, Of course we can embed them in the
          HTML pages.Note that the business logic Beans are the ones also used by the
          servlets.
          Anyone see any problem with this approach? Is there any other alternative?
          Remember this approach has to be worry about synchronization between the
          report pages IF data is changed through applet/application by some
          administrator? This is something that we like to avoid! Anyone has a better
          alternative architecture or any suggestion?
          Thanks,
          Mansour


Manish,
          See below...
          >
          >WE have started a new project using WebLogic (in fact we will do that very
          >soon). Since we are new to WebLogic, we are questioning the following
          >tradeoff:
          >
          >About the system:
          >The end system will be a web-based application providing secure access to
          >its web users. The business logics (combination of some session and entity
          >beans) store data in Oracle. The system is very report intensive, meaning in
          >most of the time, people using it to get some report. The system also have a
          >specific web interface to specific user for administration purpose. The
          >admin ultimately create, update, remove data stored in Oracle.
          >
          So currently, you're supporting two different clients - one typically
          generating reports using a browser-based interface (HTTP/HTML) and the
          other a little more complex which may need the functionality of an
          applet or application.
          Servlets/JSPs should definitely be used to bridge the gap between your
          browser-based clients and your application's components. How dynamic
          is the underlying data used to generate the reports? Are the majority
          of reports static or based on adhoc queries? Sounds like they may be
          fairly static. If so, consider caching the reports somehow to prevent
          database hits. Although, consider the fact that the database caches
          data a lot better than we can - typically. I would create a few test
          cases to validate an approach.
          >Questions 1 -- Servlets, JSP, and use of RMI:
          >To generate the report, we decide to use WebLogic Servlet with JSP. There
          >are 40 different reports, and each is mapped to one servlets. There will be
          >a servlet manager to start other servlets, the ones that actually using the
          >JSP to dynamically generating the HTML pages (the report).
          >The Servlets themselves have to interface with the business logic objects
          >using RMI. They have to do that since we don't want to re-implement the
          >business logic in the Servlet again. The Business logic (Java Beans)
          >executes on separate NT computer. Is this is a good architecture?
          >
          Sounds like you guys have decided on using the second access model for
          JSPs and this certainly provides the most flexibility. Good decision.
          I'm assuming you really mean your business components are EJBs and not
          straight-up RMI objects as your statement may be interpreted?!?!?!
          EJBs are the correct choice for a lot of reasons.
          >Question 2 -- Applet/application and RMI:
          >The system needs to interact with some admin users. To do that, the business
          >logic portion (the session and entity Beans) provide remote interfaces to
          >the applets/application. With Applet, Of course we can embed them in the
          >HTML pages.Note that the business logic Beans are the ones also used by the
          >servlets.
          >Anyone see any problem with this approach? Is there any other alternative?
          >
          Using servlets to provide an interface to clients who choose to speak
          HTTP to your application is a good approach. For browser-based clients
          its a must and you may easily use the same servlets in your
          applets/applications as well. However, do consider the fact that your
          applets/applications may speak T3 to WL. My only concern with the
          latter approach is duplication of logic in the client itself and you
          will certainly want to eliminate this. Leveraging the servlets will
          certainly be a benefit.
          >Remember this approach has to be worry about synchronization between the
          >report pages IF data is changed through applet/application by some
          >administrator? This is something that we like to avoid! Anyone has a better
          >alternative architecture or any suggestion?
          >
          Consider a report manager layer that will be responsible for ensuring
          the latest report is potentially cached and available or is
          responsible for generating the report (by calling the servlet or bean
          or whatever...).
          Again, if the underlying data is fairly dynamic, then I would tend to
          generate the reports each time and rely on the database to cache data,
          optimize queries, handle synchronization issues... rather than
          attempting to cache reports in WL. If the data is fairly static
          though, developing a report manager layer that can cache reports...
          may be worth while.
          Jason

Vlan/ACL question

I am in the process of getting my guest access set up on my network and I have a couple of questions.
1) On my L3 switch I currently have the switch port with the command line of switchport access vlan 2 for my current wireless network. I am looking to add vlan 3 for the guest wireless access. Should I add/change that line to switchport trunk allow vlan 2,3 for each port I have my APs plugged into?
2) I am having issues with my ACLs. All I want my guest vlan to do is go to the internet, nothing more. Is it better to place this ACL on the WCL, L3 switch or ASA? When I try it on the WLC, even when I deny ICMP both ways, I am still able to ping and I do have the ACL applied to the interface.
Thanks,
Jim

If your ap are in local mode you won't Ned ti change the port as the traffic is ingress/egress at the WLC. So long as VLAN 3 is allowed there it will be fine.
As for the ACL, I'd put it on the Layer 3 interface of the switch/router.
Steve
Sent from Cisco Technical Support iPhone App

Question In Weblogic....

Weblogic Discriptor files having the following Elements to control the Bean Instance.
<max-beans-in-free-pool>500</max-beans-in-free-pool>
<initial-beans-in-free-pool>250</initial-beans-in-free-pool>
how to calculate these numbers 500,250 for a particular bean .

sorry already one person posted the same question. sorry for the trouble

Iplanet web server 6.0 ACL question

Hi,
I am using ACLs to protect some of my URLs in iplanet web server 6.0.
I am getting one problem. Its not a problem actually but would like to know how to avoid authenticating the users 2 times.
In my ACL file, when ever I create an entry for a path, I am getting the following by default.
authenticate (user,group) {
database = "default";
method = "basic";
My entry is like this with the above lines.
acl "path=/www/develop/itsecurity/admin";
authenticate (user,group) {
database = "default";
method = "basic";
allow absolute (all)
(user = "modadmin");
allow absolute (all)
(user = "itsecadm");
deny (all)
(user = "anyone");
Now if the entry is like this with
authenticate (user,group) {
database = "default";
method = "basic";
after the first line, then whenever that particulaar user "itsecadm" tries to access the URL, he gets userid and password dialogue box. After entring into the page, if he tries to access or click any other link, it is asking the userid and password again.If he gives this second time, next time onwards it is not asking userid and password.
But When I remove the lines
authenticate (user,group) {
database = "default";
method = "basic";
from the file for that particular entry, it is not asking 2nd time userid/password.
Could you please tel me why this happening. Why this entry is created whenever I am adding a new one into ACL file?
Is any one facing the similar problem with iplanet web server 6.0 ACL files?
Thanks & Regards
Murthy

Hi,
Thank you for your suggestion. I have tried with your option also. Still I am getting the second time userid/password dialogue box.
Is there any other solution to avoid the second time user authentication dialogue box?
Do you want to see the ACL file?
Thanks & Regards,
Murthy

Question about weblogic-cmp-rdbms-jar.xml

WinNT 4.0 SP6, Weblogic 5.10
In the online documents, it says:
---- digest from the online documents ----
The following example finds all the EJBs in a table. It uses the
sample finder method signature:
public Enumeration findAllAccounts()
throws FinderException, RemoteException
The sample <finder> stanza uses an empty WLQL string:
<finder>
<method-name>findAllAccounts</method-name>
<finder-query></finder-query>
</finder>
---- End of digest ----
However I implement it in my sample EJB, call findAllAccounts in the
client JSP file, get a SQLException about "null after where".
How can i solve this problem?
Thanks in advance,
Paul Shen
Email: [email protected]
WWW: shensr.8m.com

In the DOCTYPE declaration, replace "weblogic-cmp-rdbms-jar" with
"weblogic-rdbms-jar".
Bob
"Jason" <[email protected]> wrote in message
news:[email protected]..
>
When I deploy my bean I get the following error:
While reading META-INF/weblogic-cmp-rdbms-jar.xml, the EntityEJB's pers
istence layer failed to deploy. The error was:
Error in descriptor line 7: Document root element "weblogic-rdbms-jar",must ma
tch DOCTYPE root "weblogic-cmp-rdbms-jar".
atweblogic.ejb20.ejbc.EJBCompiler.compileEJB(EJBCompiler.java:302)
>
>
Here is my deployment descriptor: (weblogic-cmp-rdbms-jar.xml)
<?xml version="1.0"?>
<!DOCTYPE weblogic-cmp-rdbms-jar PUBLIC
'-//BEA Systems, Inc.//DTD WebLogic 6.0.0 EJB RDBMS Persistence//EN'
'http://www.bea.com/servers/wls600/dtd/weblogic-rdbms20-persistence-600.dtd'
>
>
<weblogic-rdbms-jar>
<weblogic-rdbms-bean>
<ejb-name>MessageEJB</ejb-name>
<data-source-name>ora8lplxPoolDataSource</data-source-name>
<table-name>Messages</table-name>
<field-map>
<cmp-field>msg_id</cmp-field>
<dbms-column>msg_id</dbms-column>
</field-map>
<field-map>
<cmp-field>msg</cmp-field>
<dbms-column>msg</dbms-column>
</field-map>
<field-map>
<cmp-field>msg_date</cmp-field>
<dbms-column>msg_date</dbms-column>
</field-map>
</weblogic-rdbms-bean>
</weblogic-rdbms-jar>

More questions about WebLogic 7.0 clustering

          Hi Folks,
          I have weblogic 7.0 spX in my environment.
          Machine A(7001) contains AdminServer and Machine B(7002),C(7002) are managed servers.The
          entire configuration is in Machine A config.xml file.The config.xml file of Machine
          B and C have only server information.
          I created a cluster in Admin Box A and added Managed B and C into the cluster.Using
          iPlanet as a web server,"Cluster Address" have machine B and C ip:port.
          Q1: The cluster information is available in only AdminServer A config.xml file.If
          the whole box(sun solaris) goes down, what will happen to managed servers and
          cluster?
          Q2:We deploy an .ear file in Admin Server A and restart the service.As per the
          weblogic document, it should deploy the .ear automatically on managed box's.It
          does.But I don't see the whole .ear file in Machine B and C.Instead I am seeing
          the content of .ear file in exploded format.Why?
          Thank You,
          - Lara


          Hi Lara,
          There is patch available for this for 7.0 and this is fixed in sp2 and higher.
          If you are in the lower version just go to ".internal" folder in the managed server
          boxes and delete the console.war (after everytime you restart your mgd severs).
          I know this is dirty. but this is a work around
          Joe
          "Lara Man" <[email protected]> wrote:
          >
          >Thanks, Aravind.
          >
          >I do not want to enable independence mode due to security reasons.Please
          >check
          >http://xforce.iss.net/xforce/xfdb/12567
          >
          >Any other way?
          >
          >"Aravind Krishnasamy" <[email protected]> wrote:
          >>Weblogic has an option to enable MSI(Managed server independence). By
          >>enabling this feature on your managed server b & c, admin server will
          >>push
          >>config.xml, fileRelam.properties, SerializedSystemIni.dat etc., to all
          >>the
          >>managed server. Make sure you enable this functionality on only instance
          >>per
          >>sun server.
          >>
          >>When the admin server goes it should not affect the fuctionality of
          >running
          >>MS, since as described before all the information are cached. You cannot
          >>modify any configuration at this point of time. Due to MSI enabled you
          >>should be able to restart the managed server.
          >>
          >>Aravind
          >>
          >>> 2) We explode it to get access to the .jar files inside.
          >>>
          >>> Sam
          >>>
          >>> Lara Man wrote:
          >>> > Hi Folks,
          >>> >
          >>> > I have weblogic 7.0 spX in my environment.
          >>> >
          >>> > Machine A(7001) contains AdminServer and Machine B(7002),C(7002)
          >>are
          >>managed servers.The
          >>> > entire configuration is in Machine A config.xml file.The config.xml
          >>file
          >>of Machine
          >>> > B and C have only server information.
          >>> >
          >>> > I created a cluster in Admin Box A and added Managed B and C into
          >>the
          >>cluster.Using
          >>> > iPlanet as a web server,"Cluster Address" have machine B and C ip:port.
          >>> >
          >>> > Q1: The cluster information is available in only AdminServer A
          >>config.xml file.If
          >>> > the whole box(sun solaris) goes down, what will happen to managed
          >>servers and
          >>> > cluster?
          >>> >
          >>> > Q2:We deploy an .ear file in Admin Server A and restart the service.As
          >>per the
          >>> > weblogic document, it should deploy the .ear automatically on managed
          >>box's.It
          >>> > does.But I don't see the whole .ear file in Machine B and C.Instead
          >>I am
          >>seeing
          >>> > the content of .ear file in exploded format.Why?
          >>> >
          >>> > Thank You,
          >>> >
          >>> > - Lara
          >>>
          >>
          >>
          >

Question on weblogic that is part of BPM suite.

Hi Team,
I have a requirement to work on ADF application, BPM process
Since BPM suite comes with weblogic server, Can i use it for deploying ADF applications also.
or do i need a separate SOA suite for deploying ADF applications
Thanks
Parker.

ADF is a framework that is based in J2EE, so it'll work on any J2EE container although it is especially suited for WLS. If you're developing UIs for a BPM process (integrating it with BPM human tasks) then it would be best to work it through BPM.
There's a create form wizard that is accessible after you open the BPM human task. It creates a project, form (jspx), task flow and BPM data controls need to integrate with BPM. The problem is that you can't test your UI using the embedded WLS contain in JDeveloper. You have to deploy your ADF UI project into a stand alone WLS and the BPM project.
If you are doing some major UI development and the only integration with BPM are things like the action buttons, then you might consider starting with a simple ADF project without the BPM libraries. You can test your code using the embedded WLS in JDeveloper. This is only a viable approach if you can figure out how to integrate the BPM controls back into the UI later on. This is not a trivial task. There are BPM managed beans and data controls to consider. It is very advanced and not for a novice.
HTH,
Mark

ACL Question in Weblogic

Similar Messages

Maybe you are looking for