Passing Apache (or OHS) environment variables to WebLogic

Hi,
AJP is the protocol used to proxy a Tomcat or Jetty container with Apache HTTP server. Apache environment variables can be passed along to the Java container, instead of using rather insecure HTTP headers.
Is there a way to do the same thing using Apache and mod_weblogic, or using OHS and mod_wl_ohs? From what I've read, these modules are rather pure HTTP proxies. See for instance this post [1].
The idea behind this is to integrate a Shibboleth Service Provider (mod_shib on Apache) with WebLogic, using an Identity Assertion Provider in WebLogic to establish user identities. Shibboleth advises NOT to use headers, and use environment variables instead (see [2]), but it seems that the configuration of perimetric authentication for WebLogic should rely on headers to extract username and other info (see [3] and [4]).
Thanks a lot,
/ben
[1] https://groups.google.com/group/shibboleth-users/browse_thread/thread/af5e7caf7c9bbc0b/7933e991cfcbe089?pli=1
[2] https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPSpoofChecking
[3] http://docs.oracle.com/cd/E21764_01/web.1111/e14395/apache.htm#CDEBCGBI
[4] http://docs.oracle.com/cd/E21764_01/web.1111/e13718/ia.htm#DEVSP248 ==> Passing Tokens for Perimeter Authentication

Hi, thanks for the answer.
However, this is not what I meant with "environment variables". I'm not referring to system environment variables, but to session environment variables of the Apache HTTP server, that it can pass along with requests to a Java container. This mechanism is possible with a Tomcat or Jetty container placed behind a Apache front-end, thx to AJP.
I'm wondering how to do this with Weblogic, which does not support AJP.
/ben

Similar Messages

How can I pass non HTTP_ prefixed environment variables to my CGI program in iPlanet 4.1

We have a need to pass some application specific environment variables (e.g: DB_URL) to CGI programs based on the request data. I am trying to solve it with NSAPI module registered at AuthTrans stage.
- Init directive in obj.conf won't help since it will set the environment for the entire server.
- pblock_nvinsert functions won't help since they prefix the variables with HTTP_. This is not acceptable for us.
- I am not clear if util_env_create would help if I don't want environment setting to effect the entire server.
Any help is greatly appreciated.
Regards

We have a need to pass some application specific environment variables (e.g: DB_URL) to CGI programs based on the request data. I am trying to solve it with NSAPI module registered at AuthTrans stage.
- Init directive in obj.conf won't help since it will set the environment for the entire server.
- pblock_nvinsert functions won't help since they prefix the variables with HTTP_. This is not acceptable for us.
- I am not clear if util_env_create would help if I don't want environment setting to effect the entire server.
Any help is greatly appreciated.
Regards

How do you get LOCAL_ADDR environment variable from weblogic?

How can you access environment variables, such as LOCAL_ADDR? The request object does not expose methods to get at all the environment variables? I need to know which NIC Card the request is coming off of, which the LOCAL_ADDR will tell me.

Some variables you can?t get this way.
I made shellscript that just looked like this.
set > /yourdir/yourfile.txt
Then in my class I did Runtime.exec(shellxcript);
then you just read in "/yourdir/yourfile.txt" as Resource and load it in
a Property object.
After that you can get variables to.

Access environment variables

Hi,
          I'm running WebLogic 5.1 sp12 with an Apache 1.3.27 web server.
          Apache sets an environment variable ('REDIRECT_URL') upon occurence of
          a 40x error. How do I access such an environment variable from my jsp
          page? Thanks - Dave


          [email protected] (D. Alvarado) wrote:
          >Hi,
          > I'm running WebLogic 5.1 sp12 with an Apache 1.3.27 web server.
          >Apache sets an environment variable ('REDIRECT_URL') upon occurence of
          >a 40x error. How do I access such an environment variable from my jsp
          >page? Thanks - Dave
          Hi Dave,
          Hope this link will help you.
          http://developer.java.sun.com/developer/JDCTechTips/2001/tt1204.html#tip1
          Prema
          SIP Technologies & Exports Ltd., India

Apache Environment Variables inside PL/SQL

How to access Apache Environment Variables inside HTMLDB (PL/SQL block)?

Hi,
You can use the owa_util.get_cgi_env packaged function -
FUNCTION GET_CGI_ENV RETURNS VARCHAR2
Argument Name Type In/Out Default?
PARAM_NAME VARCHAR2 INSo, pass in the name of the Env var you want and it will give you back the value.

How to pass environment variables to adf application?

Hi,
I Created form function with this settings to open my adf application:
Type : SSWA plsql function
Maint Mode = None
Context : Resp
Web HTML : test.jsp
Web host: 192.168.1.30:8890
This works fine. But how can I pass environment variables as parameters?
I like to pass username and org_id.
Thanks in advance

KdeGraaf,
Sounds real interestign what you are saying. But I don't know what you mean with:"the application server name appended till html folder($COMMON_TOP/html) "
Basically if u make a SSWA jsp function with only jsp name say A.jsp.At runtime the url is automatically converted tohttp://<application server>:<port number>/OA_HTML/A.jsp
By the way $COMMON_TOP/html folder is the location for all jsps' in EBS.
Where can I find some information about making a OAF page wrapper? Because I have totaly now experience with OAF.
Make a OAF page, say page A, in process request of page get all the context data say, responsibility, org etc, and set it in http session.Then redirect the flow to ur ADF application page. If ur new and have no knowledge how do we build a page in OAF, u can download OAF developers guide from metalink. Search old threads u would get get the metalink id.--Mukul

How can I pass environment variables to the child process?

How can I pass environment variables to the child process? This is what I tried and it didn't work.
     static public void main (String[] args) throws Exception {
          ProcessBuilder b = new ProcessBuilder("java", "-cp", ".", "Child");
          Map<String, String> map = b.environment();
          map.put("custom.property", "my value");
             b.redirectErrorStream(true);
          Process p = b.start();
          BufferedReader reader = new BufferedReader (new InputStreamReader(p.getInputStream()));
          String line = null;
          while (null != (line = reader.readLine())) {
               System.out.println(line);
     public static void main(String[] args) {
          System.out.println("The value of custom.property is : " + System.getProperty("custom.property"));
     }and the result is:
The value of custom.property is : null

Complete test:
     static public void main (String[] args) throws Exception {
          ProcessBuilder b = new ProcessBuilder("java", "-Dcustom.property=my property value", "-cp", ".", "Child");
          Map<String, String> map = b.environment();
          map.put("custom.property", "my environment value");
             b.redirectErrorStream(true);
          Process p = b.start();
          BufferedReader reader = new BufferedReader (new InputStreamReader(p.getInputStream()));
          String line = null;
          while (null != (line = reader.readLine())) {
               System.out.println(line);
     public static void main(String[] args) {
          System.out.println("Property value of custom.property is : " + System.getProperty("custom.property"));
          System.out.println("Environment value of custom.property is : " + System.getenv("custom.property"));
     }

Passing environment variables to managed server during nmStart

I'm trying to script automated start with WLST using node managers but noticed that we're having some applications depending on some environment variables being set during startup.
How can I pass these from the node manager? Is it possible?
I'm trying to keep the number of nodemanagers to a minimum, otherwise I just could have just used a second one with these variables defined.
Edit: Could I just use os.environ perhaps for this?
Edit2: Say I wan't to use the admin console to restart said managed servers, is it possible to set these variables when starting from the adminconsole through the node manager?
Edited by: user13100625 on Aug 23, 2011 11:23 AM
Edited by: user13100625 on Aug 23, 2011 12:04 PM

os.environ did not work because the nodemanager forks a new process inherited on it self... seems like I need a second nodemanager...

[SOLVED] Pass Environment variables from PKGBUILD to .INSTALL script

Hi everyone,
I am trying to modify the grub2-efi-bzr (http://aur.archlinux.org/packages.php?ID=38369) package making some changes in the PKGBUILD and the post-install script. I want to pass few environment variables from the PKGBUILD to the install script. How do I do that?
Some code from the PKGBUILD
_bzrtrunk="lp:grub/grub2" # GRUB2 BZR Main Trunk
# _bzrtrunk="lp:~skodabenz/grub/grub2-bzr-exp" # GRUB2 BZR Experimental Branch
_bzrmod="grub2"
if [ ${_bzrtrunk} = "lp:~skodabenz/grub/grub2-bzr-exp" ]
then
_bzrmod="grub2_exp"
pkgver="exp_${pkgver}"
fi
# grub-extras bzr repo locations
_bzrtrunk_zfs="lp:~skodabenz/grub/grub2-extras-zfs"
_bzrtrunk_lua="lp:~skodabenz/grub/grub2-extras-lua"
if [ "$CARCH" = 'i686' ]
then
_EFI_ARCH=i386
elif [ "$CARCH" = 'x86_64' ]
then
_EFI_ARCH=x86_64
fi
# _EFI_ARCH=x86_64 # Uncomment if you want to override the if condition for _EFI_ARCH above, incase the EFI ARCH does not match the Linux Kernel ARCH.
# $CARCH=x86_64 and _EFI_ARCH=i386 requires gcc-multilib with lib32-glibc installed in the system.
# I do not know about $CARCH=i686 and _EFI_ARCH=x86_64
if [ ${_EFI_ARCH} = "i386" ]
then
pkgver="${pkgver}_x86"
_trns_name="grub2_efi_x86"
elif [ ${_EFI_ARCH} = "x86_64" ]
then
pkgver="${pkgver}_x64"
_trns_name="grub2_efi_x64"
fi
Now the post-install script needs the values of _EFI_ARCH and _trns_name env variables. I do not want to copy the if statements to that script as these are decided at compile time but needed while setting up grub2-efi. This is due to the fact that EFI-ARCH need not match the Linux Kernel ARCH. How do I do that.
Code from the post-install script
${_trns_name}-install --root-directory=/ --no-floppy --recheck --debug
cp /usr/lib/${_trns_name}/${_EFI_ARCH}-efi/lua.mod /boot/${_trns_name}/
cp /usr/lib/${_trns_name}/${_EFI_ARCH}-efi/zfs.mod /boot/${_trns_name}/
cp /usr/lib/${_trns_name}/${_EFI_ARCH}-efi/zfsinfo.mod /boot/${_trns_name}/
cp /usr/lib/${_trns_name}/${_EFI_ARCH}-efi/unifont.pf2 /boot/${_trns_name}/
cp /usr/lib/${_trns_name}/${_EFI_ARCH}-efi/ascii.pf2 /boot/${_trns_name}/
${_trns_name}-mkimage --verbose --directory=/usr/lib/${_trns_name}/${_EFI_ARCH}-efi --prefix="" --output=/boot/${_trns_name}/grub2.efi --format=${_EFI_ARCH}-efi ${_EFI_APP_MODULES}
Thank in advance.
Last edited by skodabenz (2010-07-27 15:46:40)

falconindy wrote:
Don't rely on %foo% existing -- it won't after the first build and this will prevent the PKGBUILD from being reentrant. I would use something like this (untested):
sed -i "s|^$_EFI_ARCH$=.*|\1=${_EFI_ARCH}|; \
s|^$_trns_name$=.*|\1=${_trns_name}|; \
s|^$export _EFI_APP_MODULES$=.*|\1=${_EFI_APP_MODULES}|" \
${startdir}/grub2-efi-bzr.install
Your code works except for 1 problem in the install script I want
export __EFI_APP_MODULES="${_EFI_APP_MODULES}" (the passed ${_EFI_APP_MODULES} value should again come inside double quotes).
right now
export _EFI_APP_MODULES=ata part_gpt part_msdos fat ntfs ntfscomp ext2 iso9660 udf hfsplus fshelp normal chain linux ls search search_fs_file search_fs_uuid search_label help loopback boot configfile echo efi_gop efi_uga xnu xnu_uuid lvm
which is equivalent to
export _EFI_APP_MODULES=ata
I want
export _EFI_APP_MODULES="ata part_gpt part_msdos fat ntfs ntfscomp ext2 iso9660 udf hfsplus fshelp normal chain linux ls search search_fs_file search_fs_uuid search_label help loopback boot configfile echo efi_gop efi_uga xnu xnu_uuid lvm"
How to do it with sed since sed already uses double quotes?

Environment variables not passed through to player in flexunit 4.1.0-beta3

fyi, to get flexunit-4.1.0-beta3 FlexUnit4AntTasks invocation of flashplayer to not be rejected by the vncserver, i needed to modify the FlexUnitLauncher to pass through the environment variables to the command environment.
the reason this is required, i think, is the use of Runtime.exec() directly in CustomPlayerCommand -- in flexunit-4.0.0, the same function was accomplished using the ant executor, which does passthrough by default.
anyway, curious if anyone else has seen this issue, or if i'm doing something dumb.
--- flexunit/flexunit-4.1.0-beta3/flexunit-flexunit-da29198/FlexUnit4AntTasks/src/org/flexuni t/ant/launcher/FlexUnitLauncher.java    (revision 7250)
+++ flexunit/flexunit-4.1.0-beta3/flexunit-flexunit-da29198/FlexUnit4AntTasks/src/org/flexuni t/ant/launcher/FlexUnitLauncher.java    (revision 7251)
@@ -79,7 +82,13 @@
       command.setSwf(swf);
       if (runHeadless())
-         command.setEnvironment(new String[]{ "DISPLAY=:" + xvncStart.getCurrentDisplay() });
+         Map<String, String> env = System.getenv();
+         List<String> envArgs = new ArrayList<String>();
+         for (Map.Entry<String, String> entry : env.entrySet()) {
+            envArgs.add(entry.getKey() + "=" + entry.getValue());
+         }
+         envArgs.add("DISPLAY=:"+xvncStart.getCurrentDisplay());
+         command.setEnvironment(envArgs.toArray(new String[0]));
          LoggingUtil.log("Setting DISPLAY=:" + xvncStart.getCurrentDisplay());

ok. i went looking for a JIRA link somewhere around here and couldn't find it. do you have a URL handy?
there are a couple of other things too:
you probably want trustDirectory.mkdirs() rather than mkdir() in TrustFile.java
you probably want CustomPlayerCommand.setLocalTrusted() -- my player command isn't in the machine's path, but i still want to be able to touch the trust file. So I copied the trustFile.add() stuff from FlashPlayerCommand.launch() into CustomPlayerCommand.launch(). probably a better solution would be refactoring CustomPlayerCommand to be more like FlashPlayerCommand.
anyway, if you want patches, tell me where to put them and i'll post some.

Apache Environment variables usage for dispatcher configurations

I have tried using apache environment variables within dispatcher.any files which doesn't seem to work. Is it feasible?

Hi Yogesh,
I want to carry forward certain environment variables which we are using all virtual hosts configured in our apache web server.
e.g., #1: Virtual hosts used in dispatcher will be same as the ServerName used in our Apache Virtualhost configuration
e.g.. #2: Using environment variables to identify custom docroot in our web cluster based on VirtualHost configuration.
Any thoughts?
Thanks
Suresh

OMB PLUS - Problem passing Unix environment variables to OMBPlus

Due to a requirement to encapsulate deployment of OWB applications, we currently start OMBPlus.sh from our own wrapper ksh script (deploy.ksh) in order to get the new / changed application into the target control center etc.
We now have a new requirement that means we need to pass the content of the Unix environment across to OMBPlus.sh (and from thence into our deployment tcl scripts).
No problem, if you believe the tcl documentation. The entire Unix environement gets dumped into a hash array called 'env', so you can get the variable's value out just by saying $env(unix_valraible).
Sounds great, it should work a treat.
Except OMBPlus only silghtly resembles tclsh.
The 'env' that gets into OMBPlus bears practically no resemblance to the 'env' that existed before OMBPlus.sh got invoked.
Does anyone have:
a decent explanation for why the env gets scrambled (and how to avoid it) ?
or an alternative method of getting the Unix environment varaible values into OMBPlus ?
Please do not propose passing them all on the command line because (would you beleive it) the values are database passwords !
Edited by: user10466244 on 23.10.2008 09:28

Unfortunately, the java implementation of TCL that Oracle used as the basis for OMB+ is NOT a fully-featured implementation. Just try using packages...
However, and understanding why you don't want to hard-code passwords into a file, you can always edit the setowbenv.sh file in your owb/bin/unix directory to grab your specific shell environment variables and propogate them to the java session.
towards the bottom of this env file you will see a section that looks something like:
JDK_HOME=../../../jdk
OWB_HOME=/owb
ORA_HOME=/owb
OEM_HOME=/owb
IAS_HOME=/owb
ORACLE_HOME=/owb
CLASSPATH=Personalties.jar:../admin:$MIMB_JAR:
CLASSPATH_LAUNCHER="-classpath ../admin:../admin/launcher.jar:$CLASSPATH: -DOWB_HOME=$OWB_HOME -DJDK_HOME=$JDK_HOME -DORA_HOME=$ORA_HOME -DOEM_HOME=$OEM_HOME -DIAS_HOME=$IAS_HOME -Doracle.net.tns_admin=$ORA_HOME/network/admin Launcher ../admin/owb.classpath"
export ORA_HOME
export OWB_HOME
export JDK_HOME
export OEM_HOME
export IAS_HOME
export ORACLE_HOME
You could add in the environment variables that you want propogated, include them into the CLASSPATH_LAUNCHER, and then they will turn up in your OMB+ session env array.
e.g., to propgate an environment variable called MY_DATABASE_PASSWORD you would:
JDK_HOME=../../../jdk
OWB_HOME=/owb
ORA_HOME=/owb
OEM_HOME=/owb
IAS_HOME=/owb
ORACLE_HOME=/owb
CLASSPATH=Personalties.jar:../admin:$MIMB_JAR:
CLASSPATH_LAUNCHER="-classpath ../admin:../admin/launcher.jar:$CLASSPATH: -DOWB_HOME=$OWB_HOME -DMY_DATABASE_PASSWORD=${MY_DATABASE_PASSWORD} -DJDK_HOME=$JDK_HOME -DORA_HOME=$ORA_HOME -DOEM_HOME=$OEM_HOME -DIAS_HOME=$IAS_HOME -Doracle.net.tns_admin=$ORA_HOME/network/admin Launcher ../admin/owb.classpath"
export ORA_HOME
export OWB_HOME
export JDK_HOME
export OEM_HOME
export IAS_HOME
export ORACLE_HOME
So now you have no protected data hardcoded, it will pick up your specific environment variables at runtime, and when you start OMB+ you will be able to:
array get env MY_DATABASE_PASSWORD.
cheers,
Mike

How to pass Unix environment variable to a SQL procedure or SQL * Plus

Can any body suggest me how to ,
How to pass Unix environment variable to a SQL procedure or SQL * Plus file..
I am trying to invoke a SQL Procedure from Unix
by passing the value of a Unix environment variable.
Is it possible..?
Thanks in advance.
Regards,
Srinivas Jaltaru

Within your shell script you can use what is known as a "here document" which is basically a way of wrapping a call to Oracle. The following call to Oracle loops and writes rows to files with numerically increasing file names. Two unix shell variables are used, one in a select statement and one in a spool command :
<pre>
#!/bin/bash
export ORACLE_SID=DEV05
FILENO=1007351
while [ ${FILENO} -le 1008400 ]
do
FILENAME=farm_${FILENO}.txt
DUMMY=`sqlplus -s user20/user20 <<SQLSTOP
set lines 73
set pages 0
set head off
set termout off
set echo off
set feedback off
select rpad(searchx, 8)
from blastx@PRODUCTION
where searchx = ${FILENO} ### here's a shell variable
spool /export/home/user20/sql/psiblast/BACKUP2_D/${FILENAME} ### here's a shell variable
spool off
SQLSTOP`
FILENO=`expr ${FILENO} + 1`
done
exit 0
</pre>

How Web Server pass request IP Address as the environment variable?

How can I config the Web server in order to pass the URL request IP address as the environment variable?

Are you inspecting the environment from a CGI program? The definitive guide to the CGI standard is the CGI/1.1 specification at http://hoohoo.ncsa.uiuc.edu/cgi/env.html
iPlanet-specific enhancements to CGI are described in the iPlanet Web Server Programmer's Guide.
REMOTE_ADDR is probably the variable you're interested in.

Not able to get SSL related CGI Environment Variables?

We are currently using APEX 3.2.0.x, OHS 10.1.3.x, and 11gR1 on linux. The APEX application we've been developing will be accessed via SSL and x509 certificates such that a client certificate is passed from a user's browser to the OHS, the information will be read from the certificate, and if the user's cert information exists in a user table associated with the application, they will have the role they've been assigned as an existing user within the application. Otherwise, the user will be a guest and have a minimum role accessing the application.
We are certainly not guru's when it has come to setting up and configuring SSL and certs, but we have gotten to the point where we have all of the required certs created and installed, and the client cert passes it's information successfully to the OHS to get to the "home" page of the application via the Rewrite statement in the httpd.conf/ssl.conf that points to the appropriate https url. We are now at the point where we need the APEX application page to read the cert information, and this is where we are having problems.
We have created an "On Load - Before Header" process and temporary item on the "home" page to display CGI environment variables to see what we're getting. It's a PLSQL Anonymous block like this:
DECLARE
lUserName VARCHAR2(100);
BEGIN
SELECT NVL(owa_util.get_cgi_env('REMOTE_USER'),'NOT POPULATED') INTO lUserName FROM DUAL;
:P1_REMOTE_USERNAME := lUserName;
END;
We can grab any of the cgi environment variables that are listed in the OHS mod_plsql User's Guide. We cannot seem to be able to get any of the SSL CGI environment variables though. We are adding the SSL variables to the dads.conf via the PlsqlCGIEnvironmentList parameter (ex: PlsqlCGIEnvironmentList SSL_CLIENT_S_DN_CN) and bouncing the OHS as needed. Unfortunately, we have not been successful in getting any of them to show up in the item on the APEX page.
As far as we can tell, we have the SSL/OHS/Certs configured, but may be there is another SSL directive or some other configuration item that we've missed that needs to be set in order for SSL CGI environment variables to be available to the owa_util.get_cgi_env function. If anyone can tell us what we may have missed, it would be appreciated.
thanks
bob

Hey John,
what we have found that we were not sure of is that we need to use Rewrite rules and conditions in the ssl.conf to grab the ssl cgi environment variables and "put" them into the request header to hold them like this:
RewriteCond %{SSL:SSL_SERVER_S_DN} (.*)
RewriteRule .* - [E=SSLS_DN:%1]
RequestHeader add X-SSL-SERVER-S-DN %{SSLS_DN}e
Then in the dads.conf put the request header reference in there with the plsqlcgienvironmentlist parameter like this:
PlsqlCGIEnvironmentList HTTP_X_SSL_SERVER_S_DN
Restart the OHS, and then grab the HTTP_X_SSL_SERVER_S_DN variable(s) via the owa_util.get_cgi_env in the APEX page to pull the value out with an anonymous block in an On Load - Before Header process like this:
DECLARE
lUserName VARCHAR2(100);
BEGIN
SELECT NVL(owa_util.get_cgi_env('HTTP_X_SSL_SERVER_S_DN'),'NOTHING HERE') INTO lUserName FROM DUAL;
END;
It's the Rewrite rules and putting them into the request header that we were not totally sure about as far as how and where you put the environment variables to make them accessible to the dads.conf with the PlsqlCGIEnvironmentList parameter that in turn makes them accessible to APEX. We're still not 100% sure this is the correct method, but it's working. We don't recall reading in any of the APEX docs, APEX forum threads, or other documentation about needing Rewrite rules and conditions to put the cgi environment variables into the request header to make them accessible to APEX. So, that seems to be our missing piece of the puzzle here.
Anyway, I think we're okay for the moment, and may be this thread will help someone else out in the future. Thanks for your help John, and will give you a helpful plug on the forum for this thread. BTW, I do have your book, so it was nice to see someone as advanced with APEX as yourself reply to the posting.
Thanks
Bob

Passing Apache (or OHS) environment variables to WebLogic

Similar Messages

Maybe you are looking for