Rdbms realm

Question

Hi,
I tried creating rdbms realm in mydomain.
I am able to see the rdbms realm users in the console when I click on users.
I am not able to see the new groups or new members in old groups when I click
groups. I can only see the old groups' entries.
When I click on ACL I get the following
weblogic.management.configuration.RealmException: RealmManager.listAcls - with
nested exception: [security.rdbmsrealm.RDBMSException: RDBMSEnumeration.nextElement
failed - with nested exception: [java.sql.SQLException: ResultSet has already
been closed]] at weblogic.management.configuration.RealmManager.listAcls(RealmManager.java:203)
at weblogic.management.console.pages._panels._mbean._acltable._jspService(_acltable.java:213)
at weblogic.servlet.jsp.JspBase.service(JspBase.java:27) at weblogic.servlet.internal.ServletStubImpl.invokeServlet(ServletStubImpl.java:213)
at weblogic.servlet.internal.WebAppServletContext.invokeServlet(WebAppServletContext.java:1265)
at weblogic.servlet.internal.ServletRequestImpl.execute(ServletRequestImpl.java:1622)
at weblogic.kernel.ExecuteThread.execute(ExecuteThread.java:137) at weblogic.kernel.ExecuteThread.run(ExecuteThread.java:120)
Any idea whats wrong? I am using the default dbschema
I have the entries as listed below in my config.xml.
<CachingRealm BasicRealm="defaultRDBMSRealmForOracle" Name="defaultCachingRealm"/>
<Realm CachingRealm="defaultCachingRealm"
FileRealm="wl_default_file_realm" Name="wl_default_realm"/>
<RDBMSRealm DatabaseDriver="weblogic.jdbc.oci.Driver"
DatabasePassword="tiger"
DatabaseURL="jdbc:weblogic:oracle:vogue"
DatabaseUserName="scott" Name="defaultRDBMSRealmForOracle"
Notes="I have changed the package to security.rdbmsrealm from examples.security.rdbmsrealm
example. I am using the same schema(in the ddl) in oracle"
RealmClassName="security.rdbmsrealm.RDBMSRealm" SchemaProperties="getGroupMembers=SELECT
GM_GROUP, GM_MEMBER from groupmembers WHERE GM_GROUP = ?;deleteGroup2=DELETE FROM
aclentries WHERE A_PRINCIPAL = ?;deleteGroup1=DELETE FROM groupmembers WHERE GM_GROUP
= ?;addGroupMember=INSERT INTO groupmembers VALUES ( ? , ? );getUser=SELECT U_NAME,
U_PASSWORD FROM users WHERE U_NAME = ?;getPermission=SELECT DISTINCT A_PERMISSION
FROM aclentries WHERE A_PERMISSION = ?;deleteUser3=DELETE FROM aclentries WHERE
A_PRINCIPAL = ?;getGroupNewStatement=false;deleteUser2=DELETE FROM groupmembers
WHERE GM_MEMBER = ?;deleteUser1=DELETE FROM users WHERE U_NAME = ?;getAcls=SELECT
A_NAME, A_PRINCIPAL, A_PERMISSION FROM aclentries ORDER BY A_NAME, A_PRINCIPAL;getUsers=SELECT
U_NAME, U_PASSWORD FROM users;getPermissions=SELECT DISTINCT A_PERMISSION FROM
aclentries;getGroups=SELECT GM_GROUP, GM_MEMBER FROM groupmembers;getAclEntries=SELECT
A_NAME, A_PRINCIPAL, A_PERMISSION FROM aclentries WHERE A_NAME = ? ORDER BY A_PRINCIPAL;newUser=INSERT
INTO users VALUES ( ? , ? );removeGroupMember=DELETE FROM groupmembers WHERE GM_GROUP
= ? AND GM_MEMBER = ?"/>
ananya

Answer 1

Hi Narin,
I seem to have forgotten to mention that the problem got fixed when I set getGroupNewStatement
to true.
Anu
"Narinder Gaheer" <[email protected]> wrote:
Have you taken the RDBMSRealm example that comes with weblogic? If thats
the case, that example doesn't implement Group related functionality
as
pointed out by many posts earlier on this newsgroup. You need to provide
that implementation on your own.
"ananya" <[email protected]> wrote in message
news:[email protected]...
Hi,
I tried creating rdbms realm in mydomain.
I am able to see the rdbms realm users in the console when I clickon
users.
I am not able to see the new groups or new members in old groups whenI
click
groups. I can only see the old groups' entries.
When I click on ACL I get the following
weblogic.management.configuration.RealmException: RealmManager.listAcls-
with
nested exception: [security.rdbmsrealm.RDBMSException:RDBMSEnumeration.nextElement
failed - with nested exception: [java.sql.SQLException: ResultSet has
already>> been closed] atweblogic.management.configuration.RealmManager.listAcls(RealmManager.java:20
3)
atweblogic.management.console.pages._panels._mbean._acltable._jspService(_aclt
able.java:213)
at weblogic.servlet.jsp.JspBase.service(JspBase.java:27) atweblogic.servlet.internal.ServletStubImpl.invokeServlet(ServletStubImpl.java
:213)
atweblogic.servlet.internal.WebAppServletContext.invokeServlet(WebAppServletCo
ntext.java:1265)
atweblogic.servlet.internal.ServletRequestImpl.execute(ServletRequestImpl.java
:1622)
at weblogic.kernel.ExecuteThread.execute(ExecuteThread.java:137) atweblogic.kernel.ExecuteThread.run(ExecuteThread.java:120)
Any idea whats wrong? I am using the default dbschema
I have the entries as listed below in my config.xml.
<CachingRealm BasicRealm="defaultRDBMSRealmForOracle"Name="defaultCachingRealm"/>
<Realm CachingRealm="defaultCachingRealm"
FileRealm="wl_default_file_realm" Name="wl_default_realm"/>
<RDBMSRealm DatabaseDriver="weblogic.jdbc.oci.Driver"
DatabasePassword="tiger"
DatabaseURL="jdbc:weblogic:oracle:vogue"
DatabaseUserName="scott" Name="defaultRDBMSRealmForOracle"
Notes="I have changed the package to security.rdbmsrealm fromexamples.security.rdbmsrealm
example. I am using the same schema(in the ddl) in oracle"
RealmClassName="security.rdbmsrealm.RDBMSRealm"SchemaProperties="getGroupMembers=SELECT
GM_GROUP, GM_MEMBER from groupmembers WHERE GM_GROUP =?;deleteGroup2=DELETE FROM
aclentries WHERE A_PRINCIPAL = ?;deleteGroup1=DELETE FROM groupmembersWHERE GM_GROUP
= ?;addGroupMember=INSERT INTO groupmembers VALUES ( ? ,? );getUser=SELECT U_NAME,
U_PASSWORD FROM users WHERE U_NAME = ?;getPermission=SELECT DISTINCTA_PERMISSION
FROM aclentries WHERE A_PERMISSION = ?;deleteUser3=DELETE FROM aclentriesWHERE
A_PRINCIPAL = ?;getGroupNewStatement=false;deleteUser2=DELETE FROMgroupmembers
WHERE GM_MEMBER = ?;deleteUser1=DELETE FROM users WHERE U_NAME =?;getAcls=SELECT
A_NAME, A_PRINCIPAL, A_PERMISSION FROM aclentries ORDER BY A_NAME,A_PRINCIPAL;getUsers=SELECT
U_NAME, U_PASSWORD FROM users;getPermissions=SELECT DISTINCT A_PERMISSIONFROM
aclentries;getGroups=SELECT GM_GROUP, GM_MEMBER FROMgroupmembers;getAclEntries=SELECT
A_NAME, A_PRINCIPAL, A_PERMISSION FROM aclentries WHERE A_NAME = ?ORDER
BY A_PRINCIPAL;newUser=INSERT
INTO users VALUES ( ? , ? );removeGroupMember=DELETE FROM groupmembersWHERE GM_GROUP
= ? AND GM_MEMBER = ?"/>
ananya