OES 11g: Java API to access policy store

Question

Hello
I am trying to use the OES Java APIs to create application policies.
My OES server is running on a server, and I'm trying to develop the policies on JDeveloper on my workstation. Policy store is in an Oracle DB. I've copied the jps-config.xml file from the server, and reference it in my JDev project.
How do I create a connection to the Policy store to be able to use the oracle.security.jps.service.policystore interfaces?
Do I have to go through creating a JpsContextFactory to get to the policy store? If I'm using the JpsContext, then how can I acquire it for the server instance of OES, and not a local (in JDev instance?) Or, is there somewhere I can set the connection strings for the DB policy store to allow me to get directly to the store?
Thank you.

Answer 1

Try a jps-config.xml like this:
<?xml version="1.0" encoding="UTF-8" standalone='yes'?>
<jpsConfig xmlns="http://xmlns.oracle.com/oracleas/schema/11/jps-config-11_1.xsd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://xmlns.oracle.com/oracleas/schema/11/jps-config-11_1.xsd" schema-major-version="11" schema-minor-version="1">
<property name="oracle.security.jps.jaas.mode" value="off"/>
<serviceProviders>
<serviceProvider name="policy.rdbms" type="POLICY_STORE" class="oracle.security.jps.internal.policystore.OPSSPolicyStoreProvider" >
<property name="policystore.type" value="DB_ORACLE" />
</serviceProvider>
</serviceProviders>
<serviceInstances>
<serviceInstance provider="policy.rdbms" name="policystore.rdbms">
<property name="jdbc.driver" value="oracle.jdbc.driver.OracleDriver"/>
<property name="jdbc.url" value="jdbc:oracle:thin:@localhost:1521:orcl"/>
               <property name="jdbc.user" value="DEV_APM"/>
               <property name="jdbc.password" value="Passw0rd1"/>
               <property name="root.dn" value="cn=oes_domain,cn=JPSContext,cn=jpsroot"/>
</serviceInstance>
</serviceInstances>
<jpsContexts default="default">
<jpsContext name="default">
               <serviceInstanceRef ref="policystore.rdbms"/>
</jpsContext>
</jpsContexts>
</jpsConfig>
And update the jdbc connection values appropriately for your system.
Note that this is an insecure way because the password is stored inside this config file in plain text. A better way is to put the password into the wallet, but this should get you started.
Once you got this working you can replace the user and password properties with the following:
<property value="oes_sm_key" name="bootstrap.security.principal.key"/>
<property value="oes_sm_map" name="bootstrap.security.principal.map"/>
and copy the wallet (cwallet.sso) file