Developer access for admin_client.jar in 10.1.3.1

I would like our developers to be able to deploy their applications to OAS 10.1.3.1 on Solaris via command line. They already have an administrator login for OAS.
It appears that the default permissions for admin_client.jar is 750 meaning that only those in the dba group have read/execute access to this jar by default.
So my question is: What is the typical supported method for allowing developers to deploy their applications via command line?
Do you simply open permissions on the jar and that's fine?
Do you install the remote client administration tool and open permissions on that?
I know that they can deploy very easily in JDeveloper, but many developers here are using eclipse instead, and we may also want to automate the deployment into our build scripts, so I'd like to know how to open the access up to do this via OAS CLI utilities.
Let me know what you all are doing out there for your developers and how this is intended to be used by those that are not DBAs.
Thanks!
Tony

OK, in case anyone else had the same issues, here is what I ended up doing to resolve the issue:
Basically I created a new unix group for those I wished to have access to admin_client.jar util and layed down the oc4j remote administration zip with that user.
In our env the steps looked like this:
1. Create Group oc4jadm
2. Create User oc4jinst (group oc4jadm)
3. Add all users that will deploy apps to the oc4jadm group
4. Unzip the remote client with oc4jinst user
5. All files are now accessible by the oc4jadm group
6. Test admin_client.jar with normal user in the oc4jadm group
7. Everything works great.
This way I could install OAS 10.1.3.1 with the oracle user and dba group like normal and not have to dig around and haphazardly grant access to the various dirs and files required by the admin_client.jar. Everything required is bundled up in the remote admin client zip and it may be installed with a user other than oracle without issue. Plus it has the added bonus of working remote servers in case you don't want your developers accessing the server on which the OAS itself resides.
HTH,
Tony

Similar Messages

Libraries for admin_client.jar

I'm trying to run admin_client.jar on RHES (Linux) using the command in the OC4J config guide but using gij -jar instead of java -jar. I am getting NoClassDefFoundError for oracle.oc4j.admin.deploy.cmdline.Oc4jAdminCmdline
I've tried setting my CLASSPATH and JAVA_PATH to include all the directories for jar files that were listed for the remote client download (see below). Any other ideas?
paths (actual path listing includes the OAS home as well):
/j2ee, /j2ee/home, /j2ee/home/lib, /lib, /opmn, /jlib

Not sure what you are trying to do and why you would use gij, as only specific JDKs are certified for use:
http://www.oracle.com/technology/software/products/ias/files/oracle_soa_certification_101310.html
In my case this syntax works:
java -jar /u03/app/oracle/product/as1013/j2ee/home/admin_client.jar deployer:oc4j:opmn://osupport:6003/Ourapplication oc4jadmin pa55w0rd -redeploy -file /home/osupport/tmp/Ourapplication.ear -deploymentName Ourapplication -bindAllWebApps-bindAllWebApps default-web-site

Difference between admin.jar and admin_client.jar

OC4J provide two commad-line utility: admin.jar and admin_client.jar for performing configuration tasks on OC4J. admin_client.jar can work in Oracle Application Server clustered environment as well as on a standalone OC4J server, but admin.jar only works in a standalone OC4J installation. Do they have any other difference?
If used in a standalone OC4J installation, are they the same?

The documentation on the OC4J management tools covers this to some degree:
http://download-west.oracle.com/docs/cd/B32110_01/web.1013/b28950/admin.htm#CEGHHGGB
In a nutshell
1. admin.jar is the old command line utility we kept in the release for backwards compatibility. It uses a set of internal/proprietrary APIs to work against OC4J. It works only against OC4J standalone.
2. admin_client.jar is a new command line utility that is based on JMX and its associated set of specifications to manage and deploy to a J2EE container. It can connect to and manage all variants of OC4J -- standalone, single AS instance, clustered AS instance. It has many more resource configuration options added to it. For simplicity, we maintained the "feel" of admin.jar so the command structure is very similar to what was provided in admin.jar, but the way it works is completely different under the covers.
While admin.jar still works and is supported, you should use admin_client.jar whenever you want to do command line operations with 10.1.3.x. I was considering putting a note to that effect on stdout whenever admin.jar was used, but we didn't end up doing it.
Another two nice aspects about admin_client.jar are
1. The common library it uses to perform its operations is also used by the Oracle Ant tasks -- so in effect there are two faces to it -- admin_client.jar and Ant tasks. There's a near 100% compatibility between the two meaning what you can do with admin_client.jar you can most likely do with a set of Ant tasks from a development environment.
2. We have isolated the dependencies for admin_client.jar and produced a separate, small distribution called oc4j_admin_client.zip (which is 6MB from memory) that can be unzipped onto any remote server and you have the full admin_client.jar utility -- meaning that to perform administration options against ant of the OC4J variants (standalone, single and clustered AS instance) you only need this one, very small distribution.
cheers
-steve-

ESW: how to enable developer access to the ES workplace systems

Hi,
I received the access from ES workplace for ECC . But I dont have any authorization create any object , the role S_DEVELOP is not assigned to me ,
How to get developer access for the ES Workplace systems ( unable to creat new object ) ?
is it like that P users dont have developer access in all systems ?
How to get assign my user ID with the required roles ?
Experts Pls guide me on the same .
Regards
Chinnaiya P
Edited by: chinnaiya pandiyan on Nov 27, 2010 6:01 PM

hi,
it requires a userid and password to get authorization for developping object.
i already had these information but i don't know where should i use it to get authorization.
can anyone who already have passed through this problem can guide?

Admin_client.jar - connect to a remote standalone oc4j instance

Hi
I have installed a standalone instance of OC4J on a remote linux box. I am trying to connect to that running instance on a windows box using the admin client jar supplied in the oc4j_admin_client_101310.zip file but get the following error -
Failed at "Could not get DeploymentManager".
I am able to connect to a remote OPMN managed instance and a local standalone instance but not to the remote standalone instance. I know the remote instance is ok as i have logged in and validated the URI using the admin_client.jar on that box. The URI format i am using is as follows -
deployer:oc4j:host:23791
Is it possible to connect to this instance remotely?
Thanks
George

Hey George -- admin_client.jar can connect to local/remote OC4J standalone instances -- it connects to all sorts of things in 10.1.3.
The "could not get deployment manager" message is very vague, I certainly appreciate that.
What it usually comes down to is the deployer URI being incorrect in either the format being used or the host:port being incorrect.
Sounds like you have validated the URL correctly.
Just as a sanity check -- you can ping the remote server from the windows box?
The oc4j standalone instance is up and running?
The ORMI port is 23791?
What you could do if you want to see if there is an underlying problem is to enable the client side logger for admin_client.jar.
The doc describes it here:
http://download.oracle.com/docs/cd/B31017_01/web.1013/b28950/adminclient.htm#CHDHIABJ
Set it progressively to the FINE, FINER, FINEST levels and see if anything suspicious is identified in the log outputs that might be helpful.
Let me know how it goes.
-steve-

Admin_client.jar 10.1.3.1.0 and changing JVM settings for OC4J in opmn.xml

Just now briefly looked at admin_client.jar 10.1.3.1.0. It appears that there is new functionality to create/alter and interrogate (J2EE) resources in this utility. This partially answers my other question, as stated in Jython support in Oracle Application Server 10g R3 (10.1.3)
(Would be nice to get a definitive answer on scripting though)
Anyway...
As a follow-up question. Will there also be functionality (or is there already functionality) which lets me change JVM settings of OC4J components as they are declared in the opmn.xml, using only command line (and/or scripting) tools?
Thanks

Jan -- there is no out of the box command line utility that can amend the JVM settings for an OC4J instance.
As Deepak alluded to, it is possible to do this using JMX because all the OPMN configuration elements are all reachable from JMX. This means you can create whatever Java JMX client you desire to modify the settings, or use a scripting environment which provides nice support for JMX (for example Groovy with its GroovyMBean) to access and use the OpmnConfig MBean set to change the OPMN configuration values.
Asanka -- the 10.1.3.1 release has lots of capability in ASC to manage the OPMN settings from a browser -- including modifying all the JVM settings (things like heap, System properties, etc.) as well as OC4J switches (-userThreads, etc.)
cheers
-steve-

UNICODE system access for further development of connectors

As there has been a bit of activity on the forums around issues with UNICODE and the various Scripting Language connectors, I'd like sort this out for Perl, Python and Ruby.
Unfortunately I do not have access to a UNICODE based system, so I have never been able to persue this.
Is there anyone (in particular someone at SAP - really) who could arrange access for me so that this work can be done - This is something that is in the interests of the community, so it's a chance for someone to make a contribution (hint hint and turning of screws etc. :-).
All that is required is basic development access ie. ABAP developer work bench, and the ability to run, monitor, and debug RFC calls.
Piers Harding.

Hello everyone - I have spent a busy month reengineering saprfc for Ruby, including rewrtting a large portion of the C code, introduce comprehensive UNICODE support. This support inclues the use of librfcu, and libsapu16 supplied by SAP for UNICODE support in RFC. As I do not have access to a UNICODE enabled system, I have had to make do in a large part, by emulating conditions to get this code to a point where it can be community tested (thanks also goes to Gregor for loaning his environment also).
For the brave - please download from http://www.piersharding.com/download/ruby/saprfc-0.20.tar.gz and follwo the instructions in the README file, paying particular attention to the requirements for the UNICODE version of the RFCSDK, and retireving the u16lit.pl script from OSS.
And help with the testing.
Cheers,
Piers Harding.

Does anyone have a good link for images I can access for my web development work. I have Adobe Creative SUite 5.5

Does anyone have a good link for images I can access for my web development work. I have Adobe Creative Suite 5.5

In short, NO.
I was hoping that the 7.4.1 update would allow it to work, but it has caused more problems than it is worth.If you do actually get it to work you will see the TC in finder (under Shared) when connected to the internet outside of your home network. What I have found though is that the 7.4.1 firmware update has made using the internet at home almost impossible.
I have tried Hamachi but it is not reliable.
I have settled with Dropbox so my files are synced between my home machine and laptop.

Admin_client jar - add "remove-inherited" for oracle.jdbc shared library

Guys,
I am using admin_client.jar utility which comes oracle 10.1.3 to deploy our web-application on the oc4j server, everythings is working fine, except for this small issue, where i want to avoid having the shared library "oracle.jdbc" inherited by web-module (which is by default inherited by all apps apparently), since i want to use the oracle-jdbc driver bundled with the war. Now i do that the solution is to introduce a "remove-inherited" tag (for the oracle.jdbc library) under the "inherited-shared-libraries" element in the orion-application.xml file (generated on deployment by oc4j), but what i want to know is how to automate this process of adding this entry, since we dont want to have any manual intervention on deployment.
Though admin_client.jar so far has provided all the functionality required for deployment but it apprarently doesnt any way where we can specify the shared-libraries not to be inherited by the deployed war..
Any comments/suggestions ?
Thanks and Regards,
Message was edited by:
user632496
Message was edited by:
user632496

Alright that makes sense.
Yes, spot on. The suggestion I made was contingent on having an EAR file -- even though we accept a WAR file from you, we ultimately produce an EAR file from it during the deployment phase. If you don't want to produce an EAR file then its not viable for you.
Another possible solution is one that you are sort of suggesting here -- each application can be specified as a child of a parent application -- from which it will inherit various libraries and configuration settings.
What you could do is to deploy a single, dedicated application on which you configure the shared-library import to the JDBC driver you want -- and then you simply choose that application as the parent, whereupon the child application will pick up the shared-library setting.
There current, visible parent of all deployed applications is the "default" application. What you could do is to tweak the configuration of the default applicaiton so it uses a different JDBC library to the one it inherits from its actual parent (the system application). The configuration for the default application is contained within the j2ee/home/config/application.xml file -- which if you look at it, is actually an "orion-application.xml" file. So if you make the change there, it will apply to all the applications that are deployed to the container.
Just found it in the doc:
http://download.oracle.com/docs/cd/B32110_01/web.1013/b28952/classload.htm#CIHFFBCA
Even easier, what you evaluate is a simpler approach where you install and publish the Oracle JDBC driver you wish to use, with the name "oracle.jdbc" and set it with a higher version (which I assume you are doing) than the deafault one -- whereby from how the config in the application.xml is set and where the oracle.jdbc driver is imported, it should pick up the higher version -- so that way you don't even need to change the config file -- simply publish the later versioned library using the name oracle.jdbc and it should be picked up.
Currently the version in 10.1.3.3 is:
<shared-library name="oracle.jdbc" parent="api" version="10.1.0_2">
So if you published the jdbc driver you want to use with the name oracle.jdbc and a higher version, then the import of oracle.jdbc will default to the latest version, which should pick up your library.
Thus all you need to do is a one-off publishing operation of a new shared-library (oracle.jdbc: 10.1.2.3 for example) and it then should be picked up implicitly by all deployed applications.
Worth testing my theory though ... ;-)
-steve-

Is there a admin_client.jar et all. for OC4J9.0.4.x.x, OC4J10.1.2.x.x ?

I want to deploy a WAR file onto these oldies in one swoop, as is possible with admin_client.jar from the command line.

There's no way to do that with releases prior to 10.1.3.
There is the j2ee\home\admin.jar utility, but it only deploys ear files.
I've seen it done by the wrapping into an ear file with ant then calling admin.jar to deploy it.
-steve-

Deploying with the admin_client.jar Utility

Does anybody have an issue with deploying app to a specific OC4J instance/Instances Within a Cluster using admin_client.jar? I'm always getting same error: "Failed at: 'Could not get Deployment Manager'". When I deploy it to a local standalone OC4J it works.
Thanks in advance

Hi all.
I am using oc4j 10.1.3 standalone and am using Ant to build and deploy my project. When we were using oc4j 9, the script that I have worked fine and the project was deployed successfully. However, after we upgraded to 10.1.3, the script broke.
I tracked down the issue to oc4j 9 using "http-web-site" as the web-site name versus 10.1.3 using "default-web-site". So, I changed that and everything built and deployed ok. However, after the application deployed, I could not login. It was like some thing was not getting binded properly. Here is the deployment command I was using:
java -jar C:\oracle_10_1_3/j2ee/home/admin.jar ormi://localhost:23791 oc4jadmin admin -deploy -file ../../deploy/iemp.ear -deploymentName iemp
So, having that fail, I tried to switch over to using admin-client.jar. However, everytime I try to use it, I get an error that says "[java] Failed at "Could not get DeploymentManager". Here is the deployment command I was using:
java -jar C:\oracle_10_1_3/j2ee/home/admin_client.jar deployer:oc4j:opmn://localhost/home oc4jadmin admin -redeploy -file ../../deploy/iemp.ear -deploymentName iemp -keepSettings
I ran through the posts in this thread to try to check out the port and other issues, but I cannot seem to access opmnctl.jar. In fact, I cannot find it anywhere within the Oracle dirs. When I try to run this on the command line "$ORACLE_HOME/opmn/bin/opmnctl status -port"
I get "Unable to access jarfile C:\oracle_10_1_3/opmn/bin/opmnctl".
I am out of ideas... can anybody shed some light for me?
Thanks,
--Nate

Automated Deployment Using admin_client.jar gives 500 error

Greetings,
1. standalone OC4J version 10.1.3.3.0
2. Windows XP platform in a VM
We have a mature deployment in that the deployment from JDeveloper is routinely successful. During the course of developing continuous integration builds, the automated deployment is now failing. We had succeeded previously using admin_client.jar and the deploy command as follows:
    <target name="deploy_oc4j" depends="assembleEar"
description="deploy the enterprise archive to a standalone oc4j using admin_client.jar">
    <echo>
      In deploy_oc4j target.
    </echo>
    <java classname="${j2ee.home}/admin_client.jar" fork="true">
        <jvmarg value="-jar"/>
        <arg value="${oc4j.deploy.admin_client}"/>
        <arg value="${oc4j.deploy.username}"/>
        <arg value="${oc4j.deploy.password}"/>
        <arg value="-deploy"/>
        <arg value="-file"/>
        <arg value="${this.application.name}".ear"/>
        <arg value="-deploymentName"/>
        <arg value="${this.application.name}"/>
        <arg value="-bindAllWebApps"/>
        <arg value="${default.application.name}"/>
    </java>
    </target>We now have two issues occurring and they may be related. We have added the capability of creating a connection pool and a data source using admin_client.jar commands:
    <target name="connectionpool" depends="deploy_oc4j"
      description="create a connection pool using admin_client.jar">
    <echo>
    Adding a connection pool.
    </echo>
      <java classname="${j2ee.home}/admin_client.jar" fork="true">
        <jvmarg value="-jar"/>
        <arg value="${oc4j.deploy.admin_client}"/>
        <arg value="${oc4j.deploy.username}"/>
        <arg value="${oc4j.deploy.password}"/>
        <arg value="-addDataSourceConnectionPool"/>
        <arg value="-applicationName"/>
        <arg value="${this.application.name}"/>
        <arg value="-name"/>
        <arg value="jdev-connection-pool-name"/>
        <arg value="-factoryClass"/>
        <arg value="oracle.jdbc.pool.OracleDataSource"/>
        <arg value="-dbUser"/>
        <arg value="username"/>
        <arg value="-dbPassword"/>
        <arg value="password"/>
        <arg value="-url"/>
        <arg value="jdbc:oracle:thin:@dev:1521:ORCL"/>
      </java>
    </target>
    <target name="datasource" depends="connectionpool"
      description="create a datasource using admin_client.jar">
    <echo>
    Adding Managed Data Source.
    </echo>
      <java classname="${j2ee.home}/admin_client.jar" fork="true">
        <jvmarg value="-jar"/>
        <arg value="${oc4j.deploy.admin_client}"/>
        <arg value="${oc4j.deploy.username}"/>
        <arg value="${oc4j.deploy.password}"/>
        <arg value="-addManagedDataSource"/>
        <arg value="-applicationName"/>
        <arg value="${this.application.name}"/>
        <arg value="-name"/>
        <arg value="jdev-connection-managed-name"/>
        <arg value="-jndiLocation"/>
        <arg value="jdbc/name"/>
        <arg value="-connectionPoolName"/>
        <arg value="jdev-connection-pool-name"/>
        <arg value="-dbUser"/>
        <arg value="username"/>
        <arg value="-dbPassword"/>
        <arg value="password"/>
      </java>
    </target>We complete the automated deployment and all ant tasks succeed, including creation of the connection pool and managed data source. During this process, the existing system-jazn-data.xml file is overwritten and our Application's <login module> information has been deleted. Upon editing this file and adding back the login module data and restarting oc4j, we can login to our application. The framework of the site is present along with graphics, yet every page visited yields a 500 error (jspx +and+ HTML). Since the entire deployment is done from ant, we do not have the capability of specifying a the web-app as development configuration. We need advice on how best to debug the deployed application as well as knowledge regarding the mechanism which causes the system-jazn-data.xml file in the oc4j/j2ee/home/config folder to be modified.
THX
-Mike
Edited by: Michael F. Hardy on Sep 11, 2008 5:03 PM
Edited by: Michael F. Hardy on Sep 11, 2008 5:03 PM
Edited by: Michael F. Hardy on Sep 11, 2008 5:05 PM

Found that jar files were missing from autobuild. This continues to be an issue where libraries are added to WEB-INF\lib in JDeveloper and the individual jar files are needed for an automated build process.

Using admin_client.jar

Hello,
admin_client.jar command needs oc4jadmin password. Is there a way where it can accept encrypted password or certificate? I don't want to store/send plain text password from my bash script.
Thanks
m

I think no, and I belive is a problem of this services is only for development or test purposes, if you want to implement some kind of security has to be in the OS side like encrypting or securing the file as well not printing the output in the screen.
Hope this helps
Greetings

Sharepoint 2010 permission The following factors also affect the level of access for

hello,
In my development server ,suddently from no where all users ,even full control group users
cannot able to add or edit any list or any content.
The following factors also affect the level of access for user1(domain\user1)
Deny
Manage Permissions
Create and change permission levels on the Web site and assign permissions to users and groups.
Deny
Create Subsites
Create subsites such as team sites, Meeting Workspace sites, and Document Workspace sites.
Deny
Manage Web Site
Grants the ability to perform all administration tasks for the Web site as well as manage content.
Deny
Add and Customize Pages
Add, change, or delete HTML pages or Web Part Pages, and edit the Web site using a Microsoft SharePoint Foundation-compatible editor.
Deny
Manage Lists
Create and delete lists, add or remove columns in a list, and add or remove public views of a list.
Deny
Apply Themes and Borders
Apply a theme or borders to the entire Web site.
Deny
Apply Style Sheets
Apply a style sheet (.CSS file) to the Web site.
Deny
Override Check Out
Discard or check in a document which is checked out to another user.
Deny
Manage Personal Views
Create, change, and delete personal views of lists.
Deny
Add/Remove Personal Web Parts
Add or remove personal Web Parts on a Web Part Page.
Deny
Update Personal Web Parts
Update Web Parts to display personalized information.
Deny
Add Items
Add items to lists and add documents to document libraries.
Deny
Edit Items
Edit items in lists, edit documents in document libraries, and customize Web Part Pages in document libraries.
Deny
Delete Items
Delete items from a list and documents from a document library.
Deny
Create Groups
Create a group of users that can be used anywhere within the site collection.
Deny
Use Self-Service Site Creation
Create a Web site using Self-Service Site Creation.
Deny
Approve Items
Approve a minor version of a list item or document.
Deny
Delete Versions
Delete past versions of a list item or document.
Deny
Create Alerts
Create alerts.
Deny
Manage Alerts
Manage alerts for all users of the Web site.
Deny
Edit Personal User Information
Allows a user to change his or her own user information, such as adding a picture.
For all the users this happened ,How i need to fix this issue
please help.
thanks

Take a look at the user policy settings for the web application. I suspect someone has added a User Policy that covers the user which denies all these permissions. The User Policy at the web app level is the only place where you can deny permissions.
But that setting applies to every site collection in the web application and takes precedence over every other setting.
Paul Stork SharePoint Server MVP
Principal Architect: Blue Chip Consulting Group
Blog: http://dontpapanic.com/blog
Twitter: Follow @pstork
Please remember to mark your question as "answered" if this solves your problem.

I had the developer preview for IOS 6 on my phone, and just got a message telling me that my operating system is no longer active. How do I get my phone activated again?

I had the developer preview for IOS 6 on my phone, and just got a message telling me that my operating system is no longer active. How do I get my phone activated again?
I had the developer preview installed. Never had to update to the release version of the OS. Now, the preview has expired, and I cannot use my phone because my iTunes reads my OS as being current, but my iPhone cannot active. Any ideas on how to fix this issue?

If I Google for Michael Superczynski, first match tells "Michael Superczynski's Profile : Apple Support Communities". It in fact does a lot of work there even if not paid.
And yes we do not have disagreement about "official apple developers". Problem is that Apple screwed our devices because we are "official apple developers" and did effort to stop us getting proper help. I unbricked my ipad and iphone thanks to unofficial help. Thank you who wrote this unofficial help and "no thanks" for apple for ruining my access to my devices. My mistake was assuming that "update" button on my devices works. It did not because it always told "Your device has latest IOS6 installed" until it bricked yesterday.
If Apple does not want to listen us, continue do delete post, blame us installing your software and yes we stop buying your devices and developing for them.
Tonu

Developer access for admin_client.jar in 10.1.3.1

Similar Messages

Maybe you are looking for