Information about the upcoming version of WLST

Question

Satya,
could you please share some information about the new features of the upcoming version of WLST.
I am asking because currently I am trying very hard to implement Python code to setup our entire WLS 8.1 domains (including custom MBeans with our security providers).
This is maybe useless because with the new version of WLST everything is already available.
Will the new version WLST support the following topics?
- creation / deletion of security realms (including display name)
- creation / deletion of security providers
- addition / removal of security providers to / from a security realm
Against these topics I am currently fighting most :-)
Does anyone have corresponding Python code to share?
Cheers,
Torsten

Answer 1

Torsten, Attached 4 scripts that add atn, atz, audit and remove a provider.
This script creates a new security ATN Provider of type com.bea.atn.MyNewAtnProvider
with object name Security:Name=myrealmMyTestAuthenticator
# The realm name in your weblogic server
realmName = 'Security:Name=myrealm'
realm = ObjectName(realmName)
# The default Identity asserter in your wls
atnIdentProvName = 'Security:Name=myrealmDefaultIdentityAsserter'
atnIdentProv = ObjectName(atnIdentProvName)
# The default authenticator in your wls
atnProvName = 'Security:Name=myrealmDefaultAuthenticator'
atnProv = ObjectName(atnProvName)
# The new provider that you would like to create
newAtnName = 'Security:Name=myrealmMyTestAuthenticator'
newAtnProv = ObjectName(atnTestProvName)
# create the provider
create(newAtnName, 'com.bea.atn.MyNewAtnProvider')
# Now add your newly created authenticator to the default realm
mbs.setAttribute(realm, Attribute('AuthenticationProviders', array([atnProv,atnIdentProv,newAtnProv], ObjectName)))
# set the realm pointer back on the newly created provider
mbs.setAttribute(newAtnProv, Attribute('Realm', realm))
# change the controlFlag's
mbs.setAttribute(atnProv, Attribute('ControlFlag', 'OPTIONAL'))
mbs.setAttribute(newAtnProv, Attribute('ControlFlag', 'REQUIRED'))
This script creates a new Authorizer of type com.bea.atz.MyNewAtzProvider
with object name Security:Name=myrealmMyAtzAuthorizer' and its to the default realm
# this is the default security realm
realmName = 'Security:Name=myrealm'
realm = ObjectName(realmName)
# This is the default authorizer
atzProvName = 'Security:Name=myrealmDefaultAuthorizer'
atzProv = ObjectName(atzProvName)
# New atz provider that you would like to create
myAtzProvName = 'Security:Name=myrealmMyAtzAuthorizer'
atzProv = ObjectName(myAtzProvName)
# create your new authorizer of type com.bea.atz.MyNewAtzProvider
create(myAtzProvName, 'com.bea.atz.MyNewAtzProvider')
# Add the newly created authorizer to the realm
mbs.setAttribute(realm, Attribute('Authorizers', array([atzProv,atzProv], ObjectName)))
# set the authorizer on the realm
mbs.setAttribute(atzProv, Attribute('Realm', realm))
This script creates a default auditor and adds it to the realm
audProvName = 'Security:Name=myrealmDefaultAuditor'
audProv = ObjectName(audProvName)
create(audProvName,'weblogic.security.providers.audit.DefaultAuditor')
mbs.setAttribute(realm, Attribute('Auditors', array([audProv], ObjectName)))
mbs.setAttribute(audProv, Attribute('Realm', realm))
This script removes the deference to the Atn provider that was added and deletes the
atn provider
# The realm name in your weblogic server
realmName = 'Security:Name=myrealm'
realm = ObjectName(realmName)
# The default Identity asserter in your wls
atnIdentProvName = 'Security:Name=myrealmDefaultIdentityAsserter'
atnIdentProv = ObjectName(atnIdentProvName)
# The default authenticator in your wls
atnProvName = 'Security:Name=myrealmDefaultAuthenticator'
atnProv = ObjectName(atnProvName)
delAtnName = 'Security:Name=myrealmMyTestAuthenticator'
delAtnProv = ObjectName(atnTestProvName)
# This will remove the deference of delAtnProv from the realm
mbs.setAttribute(realm, Attribute('AuthenticationProviders', array([atnProv,atnIdentProv], ObjectName)))
delete( delAtnName, 'com.bea.atn.MyNewAtnProvider' )
Thanks,
-satya
Satya,
I will try to put together a script that can dothis
and post it.That would be great.
Thanx.
Torsten