How to disable Base64 encoding

Question

Hi,
I'm new to weblogic and my task is to develop a custom identity asserter, I used a SimpleSampleIdentityAsserter example that was available on BEA web some time ago.
I was progressing very slowly and now it seems I got stuck.
our proxy adds a header to HTTP request that contains the username in plaintext format (I know, it's not safe at all, but that is not my problem now)
I think that in this case I have to disable Base64 encoding in "Home >myrealm >Summary of Security Realms >myrealm >Providers >IdentityAsserter"
"Settings for SSIA2 > Configuration- Tab > Common tab"
by default the value is set to true : "Base64 Decoding Required:     true"
I'm unable to change it niether via admin console nor have I found it in any xml config file, does anyone know where and how this can be configured?
we use WebLogic 10.3
any help would be much appretiated
thx, Vaclav

Answer 1

Hi Sandeep,
Thanks a lot for your reply.
I addded those lines in config.xml file as said by you and restarted the weblogic server.
But still i couldn't set Base64 decoding as false.
Could you please check this config.xml file where i added these lines.
<?xml version="1.0" encoding="UTF-8"?>
<domain xsi:schemaLocation="http://www.bea.com/ns/weblogic/920/domain
http://www.bea.com/ns/weblogic/920/domain.xsd" xmlns="http://www.bea.com/ns/weblogic/920/domain" xmlns:sec="http://www.bea.com/ns/weblogic/90/security" xmlns:wls="http://www.bea.com/ns/weblogic/90/security/wls" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<name>base_domain</name>
<domain-version>9.2.3.0</domain-version>
<security-configuration xmlns:xacml="http://www.bea.com/ns/weblogic/90/security/xacml">
<name>base_domain</name>
<realm>
<sec:authentication-provider xsi:type="wls:default-authenticatorType"/>
<sec:authentication-provider xsi:type="wls:default-identity-asserterType">
<sec:active-type>AuthenticatedUser</sec:active-type>
<sec:active-type>wsse:PasswordDigest</sec:active-type>
<sec:active-type>X.509</sec:active-type>
<sec:base64-decoding-required>false</sec:base64-decoding-required>
<wls:use-default-user-name-mapper>true</wls:use-default-user-name-mapper>
<wls:default-user-name-mapper-attribute-type>CN</default-user-name-mapper-attribute-type>
</sec:authentication-provider>
<sec:role-mapper xsi:type="xacml:xacml-role-mapperType"/>
<sec:authorizer xsi:type="xacml:xacml-authorizerType"/>
<sec:adjudicator xsi:type="wls:default-adjudicatorType"/>
<sec:credential-mapper xsi:type="wls:default-credential-mapperType"/>
<sec:cert-path-provider xsi:type="wls:web-logic-cert-path-providerType"/>
<sec:cert-path-builder>WebLogicCertPathProvider</sec:cert-path-builder>
<sec:name>myrealm</sec:name>
</realm>
<default-realm>myrealm</default-realm>
<credential-encrypted>{3DES}Vi5yoJAzEZYw/U5nkiNT9B8M043431Rfr/QF2dMB65KlW2rbV3d7a0uGF9YxUnfFZwBv0q0BNLhzmIi/wjJ/sGUnWQ2SvNMK</credential-encrypted>
<node-manager-username>weblogic</node-manager-username>
<node-manager-password-encrypted>{3DES}RCc8ftzF/irGNnXbhZ3nRA==</node-manager-password-encrypted>
</security-configuration>
<server>
<name>AdminServer</name>
<listen-address/>
</server>
<embedded-ldap>
<name>base_domain</name>
<credential-encrypted>{3DES}tYhX7HO2bVJh5Pn4ldTY45UYYd2zBw/URUs++SXMZ8U=</credential-encrypted>
</embedded-ldap>
<configuration-version>9.2.3.0</configuration-version>
<admin-server-name>AdminServer</admin-server-name>
</domain>
Thanks & Regards,
Swathi