Application Credential and Policy Migration

Hi,
I'm trying to accomplish this: http://www.oracle.com/technology/products/jdev/tips/muench/credmig111100/index.html
What is APPWORKSPACEDIR? The document does not provide any info how it's defined. Is this the folder under AdminServer/tmp/_WL_user/?
If so, there is no src folder under application folder...
In general, I find ADF/WLS documentation very very VERY incomplete :-(

Well in this case I'm think that APPWORKSPACEDIR refers to your existing JDeveloper application directory. You may want to ask the JDev forum:
JDeveloper and ADF
In general, I think the teams are very open to constructive feedback on what specifically needs to be improved with the documentation.
[email protected] is the WLS feedback. For JDev, I would contact some of the bloggers like Shay:
http://blogs.oracle.com/shay/
Good luck.

Similar Messages

How to do Credential and Policy migration in 10g?

Hi, I installed BPEL manager 10g on my machine and want to run the embed demos/tutorials. I noticed the demos are using JAZN as identity service but my installation on Weblogic Server does not support it. As a result I couldn't use JDeveloper BPEL UI designer (to add a participant type) since I couldn't find JAZN.com realm and underlying users.
I found an article regarding how to migrate Credential and Policy to weblogic server:
http://www.oracle.com/technology/products/jdev/tips/muench/credmig111100/index.html
Simplified ADF 11g Application Credential and Policy Migration to Standalone WebLogic Servers
But it is totally different between 11g and 10g.
How can I do similar job in 10g?

The way I did it is,
Created an Execution Mode work repository for the QA purpose and thus only Scenarios & Load Plans were deployed on this QA repo. This had its own Master Repo as well.
For dev the Dev mode work repo is created where all the interfaces, packages, procedures can be developed or modified as and when required.
Thus, the testers have access only to the QA environment.
Otherwise you can assign roles to the users after the installation in the security tab. Give the operator, connect role to the testers.

Application Policy Migration

Hi,
I have an Fusion application (ADF Security) deployed onto WLS-1, and the same Application onto WLS-2. My requirement is to migrate application policies from one env to another (i.e. from WLS-1 to WLS-2). After deploying the application onto WLS-1, the Administrator logs into FMWControl (EM) and do some modifications in the policies associated (let us say granted or revoked). And now, I want to migrate these changes onto WLS-2 (thru some WLST Scripts or OPSS).
I used WLS Import/Export utility from WLS Console and it only migrates the user credentials (users & groups, i.e. content from Embedded LDAP and not from system-jazn-data.xml).
I found some WLST script that migrates policies from Code Base onto WLS during deployment. But my requirement is from one WLS to another WLS.
Please help me with some idea/pointers.
Application Policy Migration
Thanks
Raza

Well in this case I'm think that APPWORKSPACEDIR refers to your existing JDeveloper application directory. You may want to ask the JDev forum:
JDeveloper and ADF
In general, I think the teams are very open to constructive feedback on what specifically needs to be improved with the documentation.
[email protected] is the WLS feedback. For JDev, I would contact some of the bloggers like Shay:
http://blogs.oracle.com/shay/
Good luck.

HT4796 When I run migration assistant on my PC, I get a message saying windows mail is running and won't let me proceed. Windows Mail is not running. I checked Task Manager's applications, services and processes and found no references to Window's Mail.

Got a new iMac 27" for Christmas (well a little after) and tried using Migration Assistant to transfer some files. I can't get past a window on the PC that pops up indicating Quit Other Programs Before you can transfer your information, the following programs must be shutdown: Windows Mail Close these programs and run Migration Assistant again. If these programs do not appear to be running, restart your computer and try again.
I've rebooted. I've searched Task Manager - Applications, Processes and Services and there are no references to WMail. I don't or haven't knowingly used Windows Mail and Outlook isn't even installed on my PC. Does anybody know how to get around this without using external drives, USB flashdrives, etc.

Lots of fun.... The superdrive in my Macbook seems to have gone off kilter since my install. Now the CD-R won't work regardless of which operating system I use. Normal CD's and DVD's are fine, but any CD-R is taken as a blank disk.
Using an external CD drive solved this problem.

Will Migration Assistant application transfer my applications' settings and all my games' save file such as Spore and even ported games?

Will Migration Assistant application transfer my applications' settings and all my games' save file such as Spore and even ported games?

Hello:
Will Migration Assistant application transfer my applications' settings and all my games' save file such as Spore and even ported games?
I doubt if anyone can answer your question. With a new Mac, setup assistant opens the first time the system is turned on. One can also use migration assistant.
I have used both for several years and have never "lost" any data.
If you want to move, have a good backup and then do it.
Barry

WLS 11 Policy migration during EAR deployment

We are installing an ADF 11g EAR into our development instance of WLS 10.3.1 and are seeing some strange behavior with the ADF policy migration. During the EAR install from either the WLS console, or using WLST scripts, the ear deployment appears to create entries in our domains system-jazn-data.xml file in the .../config/fmwconfig directory. The policies work fine when testing the application. Users in the various application roles see expected security behavior. If we then start and stop a completely different managed server from the console, the entries that were in the system-jazn-data.xml file disappear, but the our application security continues to work as expected. If we then bounce the server our ear is deployed to, the entries show up again in system-jazn-data.xml.
Can anyone explain this behavior and verify if this is expected?
Additional Information: We have followed the enterprise deployment guide when setting up our middleware home directory. We have the following directory structure:
/opt/oracle/admin/snidomain/aserver
/opt/oracle/admin/snidomain/mserver
The aserver directory contains the admin server and the mserver directory contains our managed servers. Each directory contains a config/fmwconfig subdirectory each containing a system-jazn-data.xml file. Each also contains a jps-config.xml file that specifies an XML policy provider pointing at "./system-jazn-data.xml". When we install an EAR that utilizes ADF security, the system-jazn-data.xml file in the mserver directory is updated during deployment, but the one in the aserver directory is not. Each recycle of a managed server appears to replace the contents of the system-jazn-data.xml file in the mserver directory.
Also, when I bring up Fusion Middleware Control and view the roles/policies of the ear, none are displayed in the UI. If I add a role/policy using Fusion Middleware Control, the new role/policy is placed in the system-jazn-data.xml file in the aserver directory, and the contents of the one in the mserver directory is completely replaced with the same contents as the one in the asever directory, overwriting the ones added during the deployment.

We are installing an ADF 11g EAR into our development instance of WLS 10.3.1 and are seeing some strange behavior with the ADF policy migration. During the EAR install from either the WLS console, or using WLST scripts, the ear deployment appears to create entries in our domains system-jazn-data.xml file in the .../config/fmwconfig directory. The policies work fine when testing the application. Users in the various application roles see expected security behavior. If we then start and stop a completely different managed server from the console, the entries that were in the system-jazn-data.xml file disappear, but the our application security continues to work as expected. If we then bounce the server our ear is deployed to, the entries show up again in system-jazn-data.xml.
Can anyone explain this behavior and verify if this is expected?
Additional Information: We have followed the enterprise deployment guide when setting up our middleware home directory. We have the following directory structure:
/opt/oracle/admin/snidomain/aserver
/opt/oracle/admin/snidomain/mserver
The aserver directory contains the admin server and the mserver directory contains our managed servers. Each directory contains a config/fmwconfig subdirectory each containing a system-jazn-data.xml file. Each also contains a jps-config.xml file that specifies an XML policy provider pointing at "./system-jazn-data.xml". When we install an EAR that utilizes ADF security, the system-jazn-data.xml file in the mserver directory is updated during deployment, but the one in the aserver directory is not. Each recycle of a managed server appears to replace the contents of the system-jazn-data.xml file in the mserver directory.
Also, when I bring up Fusion Middleware Control and view the roles/policies of the ear, none are displayed in the UI. If I add a role/policy using Fusion Middleware Control, the new role/policy is placed in the system-jazn-data.xml file in the aserver directory, and the contents of the one in the mserver directory is completely replaced with the same contents as the one in the asever directory, overwriting the ones added during the deployment.

HT4889 can I choose which applications to transfer with migration assistant?

I do not want to transfer all my applications from my old Mac Book Pro. (like Toast or DVD Studio since there is no DVD burner and other apps that I don't use)
Is there a way to customize the transfer to pick just the Applications I want using Migration Assistant or something else?

It will transfer ALL applications except the older versions of the standard apps. Just delete them after the transfer.

AppServer 9 and Policy Agent?

Hello reader!
I'm stuck with basics :(. Where is the documentation for Application Server 9 Policy Agent? How do I configure an application to login via Access Manager (for example Calendar Client from the Blueprints)?
I'm really lost right now, I find docs for Policy Agent on many App Servers, but not for App Server 9. What is it that I don't get?
Thanks for help!
Christoph

The link and excerpt below, from the docs, might supply info of interest. My entry just prior to this one is in reference to an earlier question in this thread.
http://docs.sun.com/app/docs/doc/820-2539/6ne4ra881?a=view#gbbip
Caution � Caution �
Once a J2EE agent is installed for a specific domain, the J2EE agent binaries cannot be used on that same Application Server installation for a different Application Server 9.0/9.1 domain. If you attempt to use previously installed J2EE agent binaries on the same Application Server installation, but on a different domain, the installation fails.
J2EE agents associate a specific set of agent binaries with a particular domain for Application Server 9.0/9.1. If you want to install a J2EE agent on a different domain, unzip a new set of bits and copy them to a separate location before running the agentadmin --install command for the second domain.

Difference between Oracle Application Express and Oracle Forms/Reports

hi guys,
i have just use oracle apex to create some report generation tools through the web. know that this is what is known as html db in the past.
however, i have not really touch oracle forms and reports before, neither have i really seen how they work.. but soemhow i feel oracle report/forms seems to be more.. then this oracle apex.
it includes integration with web services, java and pl/sql .
but i still cant really figure out what is the actual general main difference ?
is it that for oracle forms there can be some programming logic inside , whereas for apex , it is just using what is available from what oracle provides ..
i am read oracle form white paper, but seriously, i am not a very web guy. it has alot of components that i am not familiar with.
so i hope you guys can just give me a more general rough idea.
regards,
Noob.

Hi, my .05$
... most Forms & Reports users will tend to be old installed base customers using applications developed many years ago in F&R such as insurance company cores and even banking cores. Going from client/server F&R6 to "web" F&R10g is costly as you have to license an application server and most likely need to migrate to recent versions of the DB in case the customer is still on oracle 8 (common occurrence). So many customers opt. to not migrate or to simply invest in new web enabled solutions.
Using the migration tool f&r installed base will have an easier job of migrating and at a price of whatever DB edition they are using and probably be able to do it with the same people who maintain their f&r systems provided they learn a bit about web technologies.
what might be interesting to see is performance perception of users on f&r vs. apex...
regards,
luis aranguren

9i and 10g migration/interoperability

Does anyone have any experience migration 9i Lite to 10g Lite?
Particularly:
Can 9i clients sync with a 10g server?
Can a 9i Mobile Server and a 10g Mobile Server both be running replication on the same sets of tables in the enterprise db?
Thanks for any insights!

Hi ppl, in my work we where doing a migration from 9i Lite to 10g not only the lite, mobile server too, the only don't change was the enterprise server ( remains 9i )
We found some problems with the migration ( althougt isn't a real migration because we don't make a exportation of database 9i and importation after in 10g ).
Thats because we don't find how. ( or be don't exist )
I describe you the problems we find and incompatibilities we suffer to make your migration a little sweet.
9i clients can't sync with a 10g mobile server. odbc, msync.exe and other files are different in this two versions of lite and mobile server, well in a few words they are different versions and incompatible both.
9i mobile server and 10g mobile server can running replication on the same set of tables in the enterprise bd?, yes they can but we do it in different fisical machines ( the mobile servers i refer ), i don't known if they can co-exists in the same machine.
--Another question : The migration..
Isn't well called a migration because you can't do it a migration with import/export tools because there isn't, its so simple.
We need to do a reconstruction of the same was do it in the past with the 9i mobile server ( create the project, publications and publish the applications ), users and groups for the mb server.
take a look at que question i introduce
Exportation / Importation of Mobile Database Workbench information
No one replies me already, then y suppose there isn't a way to automatize the mobile server implementation.
--Another things we suffer
Don't install 9i Lite and 10g Lite in the same client , we have problems and need to deinstall all and install 10g alone.
ODBC supplied with 10g Lite installation are not configurable, you can't modify a simple option in the control panel > Administrative Tools > ODBC Origins , i suppose oracle do it for automatize the implementation of lite .
Install 10g being the user who needs the Lite because the ODBC only CAN exists in this user and you CAN'T create an ODBC connection manually to 10g ( YES THIS IS TOO BAD but its true ).
I don't known what more to tell u now, they where the most interesting two weeks in my life involved with ORACLE.
And , good luck!
Joan

What is diff between oracle application server and weblogic server?

what is the exact difference between oracle application server and weblogic application server?

The difference between Oracle Application Server AND WebLogic Server has been discussed in a lot of forums dated 2008 and earlier comparing OAS10g with WebLogic10.0/WebLogic9.2
But, now since Oracle has taken over WebLogic, this is not really important.
Now, OAS has no further releases post 10g. WebLogic Server will be the Oracle's strategic application server going forward.
So, if your query is for choosing one of them for a new environment, you are better of with WebLogic Server 10.3.6 OR WebLogic Server 12g
As we will not have further releases of OAS and also OAS10g will be end of life soon, we recommend Oracle WebLogic Server.
If you still want to know the differences, here is one such old oracle documentation link that talks about it
http://docs.oracle.com/cd/B10467_16/migrate.904/b10425/asmwl02.htm
Arun

Doubt about Role and Policy

Hi everyone,
I have a doubt about role and policy,
I'm using OBIEE11.1.1.5, I try to creating role R1 by creating like BIConsumer.
then I go to policies interface,Edit 'BIConsumer' policy,
I find only one role 'BIConsumer' under grantee.
so I'd like to ask why 'R1' is not under policy 'BIConsumer' while R1 has permission like role BIConsumer ???
thanks in advance!

Application policies are sets of java permissions that are associated with a principal which is BIConsumer role in this case which grants permissions necessary to use, or to consume, content created by other users.
So when you try to create like BIConsumer, you are not modifying the existing BIConsumer principal policy( which you should never do) but instead trying to create one similar grants like it.
Usually as long as you are not dealing with BI Publisher, Financial Reporting and Real-Time Decisions application security permissions restriction, you would not have to modify any of these policies and use the default ones.
Hope this helps. Pls mark if it does.
Thanks,
SVS

OS and DB migration

Hi Guys,
Please share with me if any one having SAP EP migration
OS- Windows 2003 Server to Solaris
DB-SQL Server to Oracle
Thanks.

Hi ,
Please migrate the portal system ( or any Java based systems ) using SAPINST as the java system stores persident data in the filesystem as well as data in the database.
For java based systems it is mandatory to run the sapinst for any system copy as the migration controller needs to be invoked .
The migration controller deletes all information of the source system from the database after the database is built by the Jload.
The instance ID of a java instance is a unique id and the migration controller is responsible for the correctness of the instance for a particular combination of hostname, instance number and SID. Hence a db restore with a filesystem copy from source to target in case of a homogeneous system copy will not suffice .
The application specific data and SDM data (in the filesystems ) are copied as SAR archives by sapinst and uncarred in the target.
Hope this answers your querries.
Regards
Ratnajit

Software Updates Failing - Group Policy Overwritten - Server and Policy NOT CONFIGURED

I have seen a few posts about this issue and group policy overwriting the settings needed by SCCM with the wrong WSUS server. I checked the wuahandlerlog and found this error but it didnt have the server information.
"Group policy settings were overwritten by a higher authority (Domain Controller) to: Server and Policy NOT CONFIGURED"
The only coputer policy that applies to this system does not have WSUS entries in it. Windows update runs ok, and I deleted the WSUS registry keys that were set by a script and reinstall the client still getting the same error. I dont see any GPO local or domain, or reg keys that are setting anything. I have 10 other servers is the same AD container that this is working perfecly on.......
Suggestions????

Check out this GPO:
Computer Configuration -> Administrative Templates -> System -> Group Policy:
"Turn off Local Group Policy Objects processing"
The help text:
"This policy setting prevents Local Group Policy Objects (Local GPOs) from being applied.
By default, the policy settings in Local GPOs are applied before any domain-based GPO policy settings. These policy settings can apply to both users and the local computer. You can disable the processing and application of all Local GPOs to ensure that only
domain-based GPOs are applied.
If you enable this policy setting, the system does not process and apply any Local GPOs.
If you disable or do not configure this policy setting, Local GPOs continue to be applied.
Note: For computers joined to a domain, it is strongly recommended that you only configure this policy setting in domain-based GPOs. This policy setting will be ignored on computers that are joined to a workgroup."
Rolf Lidvall, Swedish Radio (Ltd)

Managing Application Installs and Uninstalls with AD Groups Tied to Applications

Hi everyone,
I'm trying to come up with a way to manage application deployment and removal based on user collections that have corresponding security groups in AD. I'm using SCCM 2012 r2.
Historically, I've done the following to deploy applications: -
Create a new application, setting the user experience to install for system.
Create two device collections, one named install and the other named uninstall.
Create two application deployments, one to install (targeted at the install device collection) and one to uninstall (targeted at the uninstall device collection).
Add device to install collection to install application.
To uninstall the application, remove the device from the install collection and add it to the uninstall collection.
That has all been working great but moving forward, I'd like to manage deployment based on user collections. So I've approached this as follows: -
For installations, create a new application setting the user experience to install for user.
Create a security group in AD that corresponds to the new application.
Once SCCM synchronizes with AD and the new group appears under SCCM users, create a new user collection making the security group a direct member of the collection. Set the collection to update incrementally.
Create a required installation deployment for the new application and target it at user collection for the application.
Add a user object in AD to AD security group for the application.
Once everything syncs, the user logged on to a workstation gets the application. Up to here, everything works well.
For uninstalls, I've created an AD security group called Application Uninstalls and made domain users a member.
Once this synchronizes with SCCM, I've created a new user collection called Application Uninstalls and made the security group a direct member of the collection. Again, the collection is set to incremental update.
Create an uninstallation deployment for the new application and target it at the 'Application Uninstalls' collection.
The idea behind the uninstallation is to take advantage of the 'application installation deployments take priority over uninstallation deployments'. Because every user is a member of domain users, if they are not a member of the relevant security group to
have an application installed, then the application is automatically uninstalled. The trouble is, if I remove a user from the AD security group where they get the application, the uninstall deployment isn't kicking in like I would expect and removing the application.
Any thoughts? Is this a logical approach or is it flawed?
Any input appreciated!
Bazzaroo

if I'm reading what you are saying correctly, then has the user logged out and then back on? Since the deployment is to the collection based on group membership, the client would not know that the user is no longer a member of the targeted collection until
the user token has been updated, which happens at log off/log on time.
It does depend on the collection membership - if the collection membership is to the user group, so that the collection member shows the use group, then the log off/log on would be needed.
If the collection membership list displays the individual users, then obviously that collection needs to be updated, AND new policy retrieval at the client so that it knows that it is no longer targeted.
Then, you need an Application Deployment Evaluation Cycle, which is when the client checks to see if apps that are supposed to be installed are.
Wally Mead

Application Credential and Policy Migration

Similar Messages

Maybe you are looking for