How can JAZN admin tool manage application realms?

Question

I am using the JAZN XML provider for the OC4J server realm and for another realm packaged in an application EAR file, i.e.:
server realm: j2ee/home/config/jazn-data.xml
application realm: j2ee/home/application-deployments/<app name>/jazn-data.xml (unpackaged from the EAR file).
As far as I can tell, the JAZN admin tool (java -jar jazn.jar ....) can only manage one of these at a time, and ONLY the one coded into j2ee/home/config/jazn.xml.
QUESTIONS:
1) Is there a way to manage the application realm via the JAZN admin tool without first modifying the jazn.xml file? For obvious reasons, modifying that file in an active OC4J installation is not a viable option.
2) I have not tried managing these yet with the Oracle Enterprise Manager. Does that tool have the same limitation (i.e. can't manage the application realm)?
OBSERVATION:
1) The JAZN admin tool is hardcoded to use the path "/j2ee/home/config/jazn.xml" for its config file. This is pretty weak! You could at least have a command line argument to tell which jazn.xml file to use.

Answer 1

Scott,
There is a way to manage application realms using the JAZN admin tool - unfortunately, we didn't document it in this release. Thanks for bringing this to our attention and we'll fix it in the docs.
Generally, it is recommended to use OEM, which will indeed let you manage application realms.
If you want to use the JAZN admin tool, you'll need to do the following:
1. Create an application-specific "jazn.xml" file which simply points to the local jazn-data.xml file or equivalent. (See the global/server jazn-data.xml for reference).
2. Make sure that the local (app specific) jazn-data.xml file has the RealmLoginModule defined towards the end. (See the global/server jazn-data.xml for reference).
3. Bring up the JAZN admin tool defining the application jazn.xml. Ex:
"java -Doracle.security.jazn.config=application-deployments/callerInfo/jazn.xml -jar jazn.jar -listusers"
Thanks,
-Lee