RDBMS Security Store supporting multiple domains

Can one instance of the RDBMS Security Store be utilized to support multiple WLS 10.3.2 domains?
I have several 10.3.2 domains, all of which have clusters and role requirements? The documentation 'suggests' one Store per domain, but all of the tables in the schema contain DOMN (domain) and REALMN (realm) columns that would seem to indicate domain independence. It would be nice to be able to manage one Store schema that supports several Domains.

Hi,
The document which you are referring is for WLS 10.0 and RDBMS security is introduced from WLS 10.3.0 onwards.
The reason why RDBMS security store should not be stored between two domains is RDBMS security store is used by authorization, role mapping, credential mapping, and certificate registry providers.
Once the RDBMS security store is configured in a domain, an instance of any of the preceding security providers that has been created in the security realm automatically uses only the RDBMS security store as a datastore, and not the embedded LDAP server.
It is just the replacement for Embedded LDAP.
Thanks & Regards,
Murali.
============

Similar Messages

Can we share one single RDBMS security store across multiple domains ?

Can we share one single RDBMS security store across multiple weblogic domains? The idea is to utilize the same set of users and group defined in Weblogic Security Realms across multiple weblogic domains. Is it possible ? are there any risk ?
i am using Oracle WebLogicServer11gR1 (10.3.6) Generic with Coherence.

Hi,
The document which you are referring is for WLS 10.0 and RDBMS security is introduced from WLS 10.3.0 onwards.
The reason why RDBMS security store should not be stored between two domains is RDBMS security store is used by authorization, role mapping, credential mapping, and certificate registry providers.
Once the RDBMS security store is configured in a domain, an instance of any of the preceding security providers that has been created in the security realm automatically uses only the RDBMS security store as a datastore, and not the embedded LDAP server.
It is just the replacement for Embedded LDAP.
Thanks & Regards,
Murali.
============

Extend Weblogic domain RDBMS security store

Hello experts,
I want to include the RDBMS security store option to my domain. However, it is a fact that this option is not available when extending an existing domain and it is only available when creating a new one.
Therefore, I created a new domain (with the RDBMS option) and I imported the realm of my default domain. The problem is that the default instance of BI <BI_HOME>/instances/instance1 is associated with the old domain, and when I login to the Enterprise Manager, the overview page indicates that there is no data to display, since no Presentation services are available.
I can create a new instance of the BI, by using the config.sh command, and select the Scale out BI system option, in order to create instance 2. My question is, how to associate the new domain of weblogic with the new instance of BI?
I would appreciate your help since no available solution is found, and I spent weeks on these issue.
Thanks
Angelina

Zakir,
Probably better asked on the WLS forum.
John

Fusion Middlewar Enterprise Manager & RDBMS Security Store

Hello,
when using a weblogic soa domain configured with the realm to use RDBMS Security Store or adding a new SQLAuthProvider into the realm, the Fusion Middleware Enterprise manager does not show status of servers and deployed components anymore. Everything is red and the status column shows a clock.
It seems that Enterprise Manager Application does not work (cannot retrieve status of servers and deployed components) when using a SQL Auth provider or RDBMS Security store.
Does anyone have the same problem??
Database used: oracle 11g. SOA Suite 11.1.1.6
Thanks.
Alexander
Edited by: user13290225 on Nov 1, 2012 7:55 AM
Edited by: user13290225 on Nov 1, 2012 7:55 AM

I have cleared the tmp Folder under the Admin Server Directory and restarted the server..but still facing the same error..How to resolve the error *"oracle.adf.share.security.authentication.AuthenticationServlet"*

WebLogic Server Exception for RDBMS Security Store Database

Hi All,
I am getting List of Exception when I am trying to create a domain based on [RDBMS Security Store Database |http://www.atilimited.net/zakir/err/weblogic2.JPG] by configuring YES of [customize Environment and Services Settings|http://www.atilimited.net/zakir/err/weblogic1.JPG] .
When I going to Start that weblogic domain then I am getting list of [error/Exception|http://www.atilimited.net/zakir/err/AdminServer.log] such as
weblogic.security.service.SecurityServiceException: com.bea.common.engine.ServiceInitializationException: weblogic.security.spi.ProviderInitializationException: A failure occurred attempting to load LDIF for provider Authorizer from file C:\Oracle\MIDDLE~1\WLSERV~1.3\server\lib\XACMLAuthorizerInit.ldift.
     at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.initializeRealm(Unknown Source)
     at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.loadRealm(Unknown Source)
     at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.initializeRealms(Unknown Source)
     at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.initialize(Unknown Source)
     at weblogic.security.service.SecurityServiceManager.initialize(Unknown Source)
     at weblogic.security.SecurityService.start(SecurityService.java:141)
     at weblogic.t3.srvr.SubsystemRequest.run(SubsystemRequest.java:64)
     at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
     at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)
com.bea.common.engine.ServiceInitializationException: weblogic.security.spi.ProviderInitializationException: A failure occurred attempting to load LDIF for provider Authorizer from file C:\Oracle\MIDDLE~1\WLSERV~1.3\server\lib\XACMLAuthorizerInit.ldift.
     at com.bea.common.engine.internal.ServiceEngineImpl.findOrStartService(ServiceEngineImpl.java:365)
     at com.bea.common.engine.internal.ServiceEngineImpl.findOrStartService(ServiceEngineImpl.java:315)
     at com.bea.common.engine.internal.ServiceEngineImpl.lookupService(ServiceEngineImpl.java:257)
     at com.bea.common.engine.internal.ServicesImpl.getService(ServicesImpl.java:72)
     at weblogic.security.service.CSSWLSDelegateImpl.getService(Unknown Source)
     at com.bea.security.css.CSS.getService(CSS.java:122)
     at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.initializeRealm(Unknown Source)
     at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.loadRealm(Unknown Source)
     at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.initializeRealms(Unknown Source)
     at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.initialize(Unknown Source)
     at weblogic.security.service.SecurityServiceManager.initialize(Unknown Source)
     at weblogic.security.SecurityService.start(SecurityService.java:141)
     at weblogic.t3.srvr.SubsystemRequest.run(SubsystemRequest.java:64)
     at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
     at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)
........................................................Please help me how can I solve this issue.
Thanks
zakir
=====

Did you create the tables in the database?
[http://edocs.bea.com/wls/docs103/secmanage/rdbms.html#wp1105241|http://edocs.bea.com/wls/docs103/secmanage/rdbms.html#wp1105241]

RDBMS Security Store ?

Hi guys,
I read the doc but it's not clearly explained so I got stuck how to implement the RDBMS Security Store and authenticate and authorize the users againts the RDBMS.
I installed WebLogic 11g (10.3.1.0), declaring RDBMS Security Store in installation step, then created tables using the script rdbms_security_store_oracle.sql found under the /Oracle/Middleware/wlserver10.3/server/lib. So far so good, but I couldn't figure out the next steps. Many tables are created by the script. I don't know what table to use for the authentication purpose. Furthermore, I couldn't figure it out if I need to configure an authenticator and if so, what authenticator should I use? If I need a SQLAuthenticator, on the common Provide Specific page, what tables should I use?
Thanks,
Best regards,
Eke

Hi guys,
I read the doc but it's not clearly explained so I got stuck how to implement the RDBMS Security Store and authenticate and authorize the users againts the RDBMS.
I installed WebLogic 11g (10.3.1.0), declaring RDBMS Security Store in installation step, then created tables using the script rdbms_security_store_oracle.sql found under the /Oracle/Middleware/wlserver10.3/server/lib. So far so good, but I couldn't figure out the next steps. Many tables are created by the script. I don't know what table to use for the authentication purpose. Furthermore, I couldn't figure it out if I need to configure an authenticator and if so, what authenticator should I use? If I need a SQLAuthenticator, on the common Provide Specific page, what tables should I use?
Thanks,
Best regards,
Eke

ORA-00001: unique constraint during "Configure Database Security Store for OIM Domain"

Hi Guru's,
I am following the below steps for OIM 11.1.2.1 with SOA 11.1.1.7 Installation and facing below error during step "Configure Database Security Store for OIM Domain".
Installed Database 11.2.0.3
Installed RCU (Here I used two versions.
RCU 11.1.2 - Used IDAM prefix for (Metadata Services, OPSS, OIM)
RCU 11.1.1.7 - Used SOA prefix for(Metadata Services,SOA Infrastructure, User Messaging service)
Installed JDK 7 (Java 1.7)
Installed WL 10.3.6 (MW_HOME-/u01/Middleware/fmw, WL_HOME=/u01/Middleware/fmw/wlserver_10.3)
Installed FMW 11.1.2.1 for OIM. (ORACLE_HOME=Oracle_IDM1)
Installed FMW 11.1.1.7 for SOA (ORACLE_HOME=Oracle_SOA1)
WL Domain creation. (Domain Name – idam_domain1)
Configure Database Security Store for OIM Domain.
Internal Exception: java.sql.SQLIntegrityConstraintViolationException: ORA-00001: unique constraint (IDAM_OPSS.IDX_JPS_RDN_PDN) violated
Also followed the below bug solution, but issue still occurs.
Bug 16690836 : CONFIGURE DATABASE SECURITY STORE (CONFIGURESECURITYSTORE.PY) SCRIPT IS FAILING
@ 1. Delete the Schemas using RCU.
@ 2. Recreate the OAM schemas.
@ 3. Reinstall the WLS and OAM software.
@ 4. Run config.sh to create a new domain.
@ 5. Run setDomainEnv.sh from user_projects/domains/<Domain_name>/bin
@ 6. Run the configureSecurityStore.py from same window.
Not sure if anyone tried with different steps that fixed the issue? Could you please help.
Thanks
VG

Hi Gurus, I got the solution from Oracle. SOA 11.1.1.7.0 shouldn't be used with Identity Management 11.1.2.1.0(11GR1-PS1) version. Identity Management 11.1.2.1.0(11GR1-PS1) is bundled with SOA 11.1.1.6.0. When used this SOA version, Installation went smooth. Thanks VG

Errors starting Portal Admin Server after configuring RDBMS Security Store.

Hi,
I'm using WLST to build and configure the portal domain. I've already had our DBA run all the necessary scripts on the Database.
We are using WLP 10.3 on RHEL 4 and Oracle 10G RAC. I read on some thread that RDBMS is only compatble with verion 10.3.2 but why is the feature in 10.3?
The error below seems to point to the URL; does this mean that the RDBMS config does not support RAC databases?
Hope someone can shed light on this as it's pretty urgent.
Many thanks
A
This is the configuration for the created security store:-
-rw- CompatibilityObjectName null
-rw- ConnectionProperties
user=rdbms_user,portNumber=1521,serviceName=portal_db_service
-rw- ConnectionURL
jdbc:oracle:thin:@(DESCRIPTION = (ADDRESS = (PROTOCOL = TCP)(HOST =
portal_host)(PORT = 1521))(CONNECT_DATA = (SERVER = DEDICATED)
(SERVICE_NAME = portal_db_service)))
-rw- DriverName
oracle.jdbc.xa.client.OracleXADataSource
-rw- JMSExceptionReconnectAttempts 0
-rw- JMSTopic null
-rw- JMSTopicConnectionFactory null
-rw- JNDIPasswordEncrypted null
-rw- JNDIUsername null
-rw- Name RDBMSSecurityStore
-rw- NotificationProperties null
-rw- PasswordEncrypted ********
-rw- Username rdbms_user
This is the error I'm getting when I attempt to start the Admin Server :-
####<10-May-2010 18:19:28 o'clock BST> <Info> <Security> <server>
<AdminServer> <[ACTIVE] ExecuteThread: '0' for queue:
'weblogic.kernel.Default (sel
f-tuning)'> <<WLS Kernel>> <1273511968053> <BEA-000000> <Using
dictionary class "kodo.jdbc.sql.KodoOracleDictionary".>
####<10-May-2010 18:19:28 o'clock BST> <Info> <Security> <server>
<AdminServer> <[ACTIVE] ExecuteThread: '0' for queue:
'weblogic.kernel.Default (sel
f-tuning)'> <<WLS Kernel>> <1273511968246> <BEA-000000> <OpenJPA
is now connecting to the database in order to figure out what JDBC
driver you are using
, as OpenJPA must alter its behavior for this database depending on the
driver vendor. To avoid this connection, set the DriverVendor value in
your openjpa.j
dbc.DBDictionary configuration property to one of the following values:
oracle, oracle92 (for the 9.2 driver), datadirect, datadirect61 (for
driver versions <= 3.1), other
For example:
openjpa.jdbc.DBDictionary: oracle(DriverVendor=oracle92)>
####<10-May-2010 18:19:28 o'clock BST> <Info> <Security> <server>
<AdminServer> <[ACTIVE] ExecuteThread: '0' for queue:
'weblogic.kernel.Default (sel
f-tuning)'> <<WLS Kernel>> <1273511968257> <BEA-090511> <The
following exception has occurred:
com.bea.common.engine.ServiceInitializationException:
<openjpa-1.1.0-r422266:657916 fatal internal error>
org.apache.openjpa.util.InternalException: There was
an error when invoking the static getInstance method on the named
factory class "kodo.jdbc.kernel.KodoJDBCBrokerFactory". See the nested
exception for detai
ls.
at
com.bea.common.engine.internal.ServiceEngineImpl.findOrStartService(Serv
iceEngineImpl.java:365)
at
com.bea.common.engine.internal.ServiceEngineImpl.findOrStartService(Serv
iceEngineImpl.java:315)
at
com.bea.common.engine.internal.ServiceEngineImpl.lookupService(ServiceEn
gineImpl.java:257)
at
com.bea.common.engine.internal.ServicesImpl.getService(ServicesImpl.java
:72)
at
weblogic.security.service.internal.WLSIdentityServiceImpl.initialize(Unk
nown Source)
at
weblogic.security.service.CSSWLSDelegateImpl.initializeServiceEngine(Unk
nown Source)
at
weblogic.security.service.CSSWLSDelegateImpl.initialize(Unknown Source)
at
weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.Initi
alizeServiceEngine(Unknown Source)
at
weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.initi
alizeRealm(Unknown Source)
at
weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.loadR
ealm(Unknown Source)
at
weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.initi
alizeRealms(Unknown Source)
at
weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.initi
alizeRealms(Unknown Source)
at
weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.initi
alize(Unknown Source)
at
weblogic.security.service.SecurityServiceManager.initialize(Unknown
Source)
at
weblogic.security.SecurityService.start(SecurityService.java:141)
at
weblogic.t3.srvr.SubsystemRequest.run(SubsystemRequest.java:64)
at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)
<openjpa-1.1.0-r422266:657916 fatal internal error>
org.apache.openjpa.util.InternalException: There was an error when
invoking the static getInstance method
on the named factory class "kodo.jdbc.kernel.KodoJDBCBrokerFactory".
See the nested exception for details.
at
org.apache.openjpa.kernel.Bootstrap.getBrokerFactory(Bootstrap.java:95)
at
com.bea.common.security.storeservice.util.StoreServiceDelegate$StoreSeri
vceHelper.getPersistenceManagerFactory(StoreServiceDelegate.java:347)
at
com.bea.common.security.storeservice.util.StoreServiceDelegate.initJDO(S
toreServiceDelegate.java:145)
at
com.bea.common.security.storeservice.util.StoreServiceDelegate.<init>(St
oreServiceDelegate.java:98)
at
com.bea.common.security.internal.service.StoreServiceImpl.init(StoreServ
iceImpl.java:76)
at
com.bea.common.engine.internal.ServiceEngineImpl.findOrStartService(Serv
iceEngineImpl.java:363)
at
com.bea.common.engine.internal.ServiceEngineImpl.findOrStartService(Serv
iceEngineImpl.java:315)
at
com.bea.common.engine.internal.ServiceEngineImpl.lookupService(ServiceEn
gineImpl.java:257)
at
com.bea.common.engine.internal.ServicesImpl.getService(ServicesImpl.java
:72)
at
weblogic.security.service.internal.WLSIdentityServiceImpl.initialize(Unk
nown Source)
at
weblogic.security.service.CSSWLSDelegateImpl.initializeServiceEngine(Unk
nown Source)
at
weblogic.security.service.CSSWLSDelegateImpl.initialize(Unknown Source)
at
weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.Initi
alizeServiceEngine(Unknown Source)
at
weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.initi
alizeRealm(Unknown Source)
at
weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.loadR
ealm(Unknown Source)
at
weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.initi
alizeRealms(Unknown Source)
at
weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.initi
alize(Unknown Source)
at
weblogic.security.service.SecurityServiceManager.initialize(Unknown
Source)
at
weblogic.security.SecurityService.start(SecurityService.java:141)
at
weblogic.t3.srvr.SubsystemRequest.run(SubsystemRequest.java:64)
at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)
java.lang.RuntimeException: There were errors initializing your
configuration: <openjpa-1.1.0-r422266:657916 fatal store error>
org.apache.openjpa.util.StoreE
xception: Invalid Oracle URL specified: OracleDataSource.makeURL
at
org.apache.openjpa.jdbc.schema.DataSourceFactory.installDBDictionary(Dat
aSourceFactory.java:235)
at
org.apache.openjpa.jdbc.conf.JDBCConfigurationImpl.getConnectionFactory(
JDBCConfigurationImpl.java:684)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.jav
a:39)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessor
Impl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at
org.apache.openjpa.lib.conf.ConfigurationImpl.instantiateAll(Configurati
onImpl.java:288)
at
org.apache.openjpa.conf.OpenJPAConfigurationImpl.instantiateAll(OpenJPAC
onfigurationImpl.java:1409)
at
org.apache.openjpa.kernel.AbstractBrokerFactory.makeReadOnly(AbstractBro
kerFactory.java:646)
at
org.apache.openjpa.kernel.AbstractBrokerFactory.pool(AbstractBrokerFacto
ry.java:131)
at
kodo.jdbc.kernel.KodoJDBCBrokerFactory.getInstance(KodoJDBCBrokerFactory
.java:43)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.jav
a:39)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessor
Impl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at
org.apache.openjpa.kernel.Bootstrap.invokeFactory(Bootstrap.java:124)
at
org.apache.openjpa.kernel.Bootstrap.getBrokerFactory(Bootstrap.java:90)
at
com.bea.common.security.storeservice.util.StoreServiceDelegate$StoreSeri
vceHelper.getPersistenceManagerFactory(StoreServiceDelegate.java:347)
at
com.bea.common.security.storeservice.util.StoreServiceDelegate.initJDO(S
toreServiceDelegate.java:145)
at
com.bea.common.security.storeservice.util.StoreServiceDelegate.<init>(St
oreServiceDelegate.java:98)
at
com.bea.common.security.internal.service.StoreServiceImpl.init(StoreServ
iceImpl.java:76)
at
com.bea.common.engine.internal.ServiceEngineImpl.findOrStartService(Serv
iceEngineImpl.java:363)
at
com.bea.common.engine.internal.ServiceEngineImpl.findOrStartService(Serv
iceEngineImpl.java:315)
at
com.bea.common.engine.internal.ServiceEngineImpl.lookupService(ServiceEn
gineImpl.java:257)
at
com.bea.common.engine.internal.ServicesImpl.getService(ServicesImpl.java
:72)
at
weblogic.security.service.internal.WLSIdentityServiceImpl.initialize(Unk
nown Source)
at
weblogic.security.service.CSSWLSDelegateImpl.initializeServiceEngine(Unk
nown Source)
at
weblogic.security.service.CSSWLSDelegateImpl.initialize(Unknown Source)
at
weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.Initi
alizeServiceEngine(Unknown Source)
at
weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.initi
alizeRealm(Unknown Source)
at
weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.loadR
ealm(Unknown Source)
at
weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.initi
alizeRealms(Unknown Source)
at
weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.initi
alize(Unknown Source)
at
weblogic.security.service.SecurityServiceManager.initialize(Unknown
Source)
at
weblogic.security.SecurityService.start(SecurityService.java:141)
at
weblogic.t3.srvr.SubsystemRequest.run(SubsystemRequest.java:64)
at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)
Caused by: java.sql.SQLException: Invalid Oracle URL specified:
OracleDataSource.makeURL
at
oracle.jdbc.driver.SQLStateMapping.newSQLException(SQLStateMapping.java:
70)
at
oracle.jdbc.driver.DatabaseError.newSQLException(DatabaseError.java:112)
at
oracle.jdbc.driver.DatabaseError.throwSqlException(DatabaseError.java:17
3)
at
oracle.jdbc.driver.DatabaseError.throwSqlException(DatabaseError.java:22
9)
at
oracle.jdbc.pool.OracleDataSource.makeURL(OracleDataSource.java:1234)
at
oracle.jdbc.pool.OracleDataSource.getConnection(OracleDataSource.java:18
4)
at
org.apache.openjpa.lib.jdbc.DelegatingDataSource.getConnection(Delegatin
gDataSource.java:113)
at
org.apache.openjpa.lib.jdbc.DecoratingDataSource.getConnection(Decoratin
gDataSource.java:93)
at
org.apache.openjpa.jdbc.schema.DataSourceFactory.installDBDictionary(Dat
aSourceFactory.java:227)
... 37 more
<openjpa-1.1.0-r422266:657916 fatal store error>
org.apache.openjpa.util.StoreException: Invalid Oracle URL specified:
OracleDataSource.makeURL
at
org.apache.openjpa.jdbc.schema.DataSourceFactory.installDBDictionary(Dat
aSourceFactory.java:235)
at
org.apache.openjpa.jdbc.conf.JDBCConfigurationImpl.getConnectionFactory(
JDBCConfigurationImpl.java:684)
at
org.apache.openjpa.jdbc.conf.JDBCConfigurationImpl.getDataSource(JDBCCon
figurationImpl.java:782)
at
org.apache.openjpa.jdbc.conf.JDBCConfigurationImpl.getDataSource2(JDBCCo
nfigurationImpl.java:789)
at
org.apache.openjpa.jdbc.sql.OracleDictionary.ensureDriverVendor(OracleDi
ctionary.java:253)
at
kodo.jdbc.sql.OracleAdvancedSQL.setDriverVendorDefaults(OracleAdvancedSQ
L.java:50)
at
kodo.jdbc.sql.OracleAdvancedSQL.getBatchLimit(OracleAdvancedSQL.java:28)
at
kodo.jdbc.kernel.AutoOrderUpdateManager.setConfiguration(AutoOrderUpdate
Manager.java:56)
at
org.apache.openjpa.lib.conf.Configurations.configureInstance(Configurati
ons.java:473)
at
org.apache.openjpa.lib.conf.Configurations.configureInstance(Configurati
ons.java:430)
at
org.apache.openjpa.lib.conf.PluginValue.instantiate(PluginValue.java:103
at
org.apache.openjpa.lib.conf.ObjectValue.instantiate(ObjectValue.java:83)
at
org.apache.openjpa.jdbc.conf.JDBCConfigurationImpl.getUpdateManagerInsta
nce(JDBCConfigurationImpl.java:577)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.jav
a:39)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessor
Impl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at
org.apache.openjpa.lib.conf.ConfigurationImpl.instantiateAll(Configurati
onImpl.java:288)
at
org.apache.openjpa.conf.OpenJPAConfigurationImpl.instantiateAll(OpenJPAC
onfigurationImpl.java:1409)
at
org.apache.openjpa.kernel.AbstractBrokerFactory.makeReadOnly(AbstractBro
kerFactory.java:646)
at
org.apache.openjpa.kernel.AbstractBrokerFactory.pool(AbstractBrokerFacto
ry.java:131)
at
kodo.jdbc.kernel.KodoJDBCBrokerFactory.getInstance(KodoJDBCBrokerFactory
.java:43)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.jav
a:39)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessor
Impl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at
org.apache.openjpa.kernel.Bootstrap.invokeFactory(Bootstrap.java:124)
at
org.apache.openjpa.kernel.Bootstrap.getBrokerFactory(Bootstrap.java:90)
at
com.bea.common.security.storeservice.util.StoreServiceDelegate$StoreSeri
vceHelper.getPersistenceManagerFactory(StoreServiceDelegate.java:347)
at
com.bea.common.security.storeservice.util.StoreServiceDelegate.initJDO(S
toreServiceDelegate.java:145)
at
com.bea.common.security.storeservice.util.StoreServiceDelegate.<init>(St
oreServiceDelegate.java:98)
at
com.bea.common.security.internal.service.StoreServiceImpl.init(StoreServ
iceImpl.java:76)
at
com.bea.common.engine.internal.ServiceEngineImpl.findOrStartService(Serv
iceEngineImpl.java:363)
at
com.bea.common.engine.internal.ServiceEngineImpl.findOrStartService(Serv
iceEngineImpl.java:315)

Thanks, Ravi - already did all that. I have managed to stand the whole cluster up but two niggly things - one more so!
First, when I start any of the managed servers for the forst time, I get the error below; it's as if the managed server can't download the ldap config from the AdminServer - subsequent restarts work fine though.
tuning)'> <<WLS Kernel>> <> <> <1273851208837> <BEA-000436> <Allocating 3 reader threads.>
####<14-May-2010 16:33:28 o'clock BST> <Info> <Socket> <host_2> <server_2> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-
tuning)'> <<WLS Kernel>> <> <> <1273851208839> <BEA-000446> <Native IO Enabled.>
####<14-May-2010 16:33:29 o'clock BST> <Info> <IIOP> <host_2> <server_2> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1273851209488> <BEA-002014> <IIOP subsystem enabled.>
####<14-May-2010 16:34:28 o'clock BST> <Critical> <WebLogicServer> <host_2> <server_2> <Main Thread> <<WLS Kernel>> <> <> <1273851268370> <BEA-000
386> <Server subsystem failed. Reason: weblogic.ldap.EmbeddedLDAPException: Empty initial replica
weblogic.ldap.EmbeddedLDAPException: Empty initial replica
at weblogic.ldap.EmbeddedLDAP.getInitialReplicaFromAdminServer(EmbeddedLDAP.java:1301)
at weblogic.ldap.EmbeddedLDAP.start(EmbeddedLDAP.java:221)
at weblogic.t3.srvr.SubsystemRequest.run(SubsystemRequest.java:64)
at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)
>
####<14-May-2010 16:34:28 o'clock BST> <Notice> <WebLogicServer> <host_2> <server_2> <Main Thread> <<WLS Kernel>> <> <> <1273851268601> <BEA-00036
5> <Server state changed to FAILED>
Secondly, both managed server are starting in ADMIN mode because some of the libraries aren't getting deployed. Think this is due to clashes in the Implementation-Version. I get the errors below (loads of the libraries - approx a third but I just pasted this for brevity) although after starting them with nodemanager and they go into ADMIN mode, I can always click on resume which then starts them up. Any idea why this is the case?
Many, many, thanks!
A
plementation-Version: 1.0.2.2 (WAR).>
####<14-May-2010 16:59:21 o'clock BST> <Error> <Deployer> <host_2> <server_2> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (se
lf-tuning)'> <<WLS Kernel>> <> <> <1273852761063> <BEA-149205> <Failed to initialize the application 'content-management-app-lib [LibSpecVersion=10.3.2,LibImp
lVersion=10.3.2]' due to error weblogic.application.library.LibraryDeploymentException: [J2EE:160145]Failed to deploy library Extension-Name: content-manageme
nt-app-lib, Specification-Version: 10.3.2, Implementation-Version: 10.3.2.1, because of conflicting library Manifest values, and library information registere
d with the server: [Implementation-Version: 10.3.2.1 vs. 10.3.2]. Check the library"s MANIFEST.MF file, and correct version info there to match server setting
s. Or undeploy the misconfigured library..
weblogic.application.library.LibraryDeploymentException: [J2EE:160145]Failed to deploy library Extension-Name: content-management-app-lib, Specification-Versi
on: 10.3.2, Implementation-Version: 10.3.2.1, because of conflicting library Manifest values, and library information registered with the server: [Implementat
ion-Version: 10.3.2.1 vs. 10.3.2]. Check the library"s MANIFEST.MF file, and correct version info there to match server settings. Or undeploy the misconfigure
d library.
at weblogic.application.internal.library.LibraryDeploymentFactory.getLibData(LibraryDeploymentFactory.java:106)
at weblogic.application.internal.library.LibraryDeploymentFactory.createDeployment(LibraryDeploymentFactory.java:46)
at weblogic.application.internal.DeploymentManagerImpl.createDeployment(DeploymentManagerImpl.java:84)
at weblogic.deploy.internal.targetserver.BasicDeployment.createDeployment(BasicDeployment.java:149)
at weblogic.deploy.internal.targetserver.AppDeployment.prepare(AppDeployment.java:114)
at weblogic.management.deploy.internal.DeploymentAdapter$1.doPrepare(DeploymentAdapter.java:39)
at weblogic.management.deploy.internal.DeploymentAdapter.prepare(DeploymentAdapter.java:187)
at weblogic.management.deploy.internal.AppTransition$1.transitionApp(AppTransition.java:21)
at weblogic.management.deploy.internal.ConfiguredDeployments.transitionApps(ConfiguredDeployments.java:233)
at weblogic.management.deploy.internal.ConfiguredDeployments.prepare(ConfiguredDeployments.java:165)
at weblogic.management.deploy.internal.ConfiguredDeployments.deploy(ConfiguredDeployments.java:122)
at weblogic.management.deploy.internal.DeploymentServerService.resume(DeploymentServerService.java:173)
at weblogic.management.deploy.internal.DeploymentServerService.start(DeploymentServerService.java:89)
at weblogic.t3.srvr.SubsystemRequest.run(SubsystemRequest.java:64)
at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)
>
####<14-May-2010 16:59:21 o'clock BST> <Info> <J2EE> <host_2> <server_2> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tu
ning)'> <<WLS Kernel>> <> <> <1273852761069> <BEA-160151> <Registered library Extension-Name: content-management-app-lib, Specification-Version: 10.3.2, Imple
mentation-Version: 10.3.2.1 (EAR).>
####<14-May-2010 16:59:21 o'clock BST> <Error> <Deployer> <host_2> <server_2> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (se
lf-tuning)'> <<WLS Kernel>> <> <> <1273852761074> <BEA-149205> <Failed to initialize the application 'content-management-cmis-base-web-lib [LibSpecVersion=10.
3.2,LibImplVersion=10.3.2]' due to error weblogic.application.library.LibraryDeploymentException: [J2EE:160145]Failed to deploy library Extension-Name: conten
t-management-cmis-base-web-lib, Specification-Version: 10.3.2, Implementation-Version: 10.3.2.1, because of conflicting library Manifest values, and library i
nformation registered with the server: [Implementation-Version: 10.3.2.1 vs. 10.3.2]. Check the library"s MANIFEST.MF file, and correct version info there to
match server settings. Or undeploy the misconfigured library..
weblogic.application.library.LibraryDeploymentException: [J2EE:160145]Failed to deploy library Extension-Name: content-management-cmis-base-web-lib, Specifica
tion-Version: 10.3.2, Implementation-Version: 10.3.2.1, because of conflicting library Manifest values, and library information registered with the server: [I
mplementation-Version: 10.3.2.1 vs. 10.3.2]. Check the library"s MANIFEST.MF file, and correct version info there to match server settings. Or undeploy the mi
sconfigured library.
at weblogic.application.internal.library.LibraryDeploymentFactory.getLibData(LibraryDeploymentFactory.java:106)
at weblogic.application.internal.library.LibraryDeploymentFactory.createDeployment(LibraryDeploymentFactory.java:46)
at weblogic.application.internal.DeploymentManagerImpl.createDeployment(DeploymentManagerImpl.java:84)
at weblogic.deploy.internal.targetserver.BasicDeployment.createDeployment(BasicDeployment.java:149)
at weblogic.deploy.internal.targetserver.AppDeployment.prepare(AppDeployment.java:114)
at weblogic.management.deploy.internal.DeploymentAdapter$1.doPrepare(DeploymentAdapter.java:39)
at weblogic.management.deploy.internal.DeploymentAdapter.prepare(DeploymentAdapter.java:187)
at weblogic.management.deploy.internal.AppTransition$1.transitionApp(AppTransition.java:21)
at weblogic.management.deploy.internal.ConfiguredDeployments.transitionApps(ConfiguredDeployments.java:233)
at weblogic.management.deploy.internal.ConfiguredDeployments.prepare(ConfiguredDeployments.java:165)
at weblogic.management.deploy.internal.ConfiguredDeployments.deploy(ConfiguredDeployments.java:122)
at weblogic.management.deploy.internal.DeploymentServerService.resume(DeploymentServerService.java:173)
at weblogic.management.deploy.internal.DeploymentServerService.start(DeploymentServerService.java:89)
at weblogic.t3.srvr.SubsystemRequest.run(SubsystemRequest.java:64)

Supporting Multiple domains in IM&P with and Expressway deployment?

Hello everyone. This is long winded but the context is needed to explain what I'm looking for. Any help is appreciated.
My customer has piloted IM&P for 1 year now and is looking to take it to the next level. They purchased Expressway Core & Edge and they are looking to enable Mobile Remote Access, B2B Video and XMPP Federation. One issue is that the Jabber domain that was selected 1 year ago for the pilot was a local domain. The reason for this is because the multidomain support was not available at the time. Internally there are 3 domains. example.ca, examplesales.ca, and examplebanannas.com. Their Jabber ID they use today is example.root.local. I am reading through the guides and it seems as though IM&P allows you to map a JABBER ID to an email address or a directory URI. This will allow multiple presence domains within one Presence cluster. The problem is that it appears as though federation will not work through expressway core / edge if you use this method. Can this be confirmed?
I am providing you these URL's only for guidance, to show you how I arrived at my situation where I’m asking for help on a configuration change to my customers IM&P settings.
note the section on page 41 of the following guide http://www.cisco.com/c/dam/en/us/td/docs/telepresence/infrastructure/vcs/config_guide/X8-5/Mobile-Remote-Access-via-VCS-Deployment-Guide-X8-5-1.pdf
One would presume that Multi-domain support is now supported with expressway core & edge. The caveat I found on page 4 of the following guide in relation to xmpp federation.
http://www.cisco.com/c/dam/en/us/td/docs/telepresence/infrastructure/vcs/config_guide/XMPP-Federation-with-Cisco-VCS-and-IM-and-Presence-Service.pdf
and page 10 of the following guide
http://www.cisco.com/c/dam/en/us/td/docs/telepresence/infrastructure/vcs/config_guide/X8-5/XMPP-Federation-with-Cisco-VCS-and-IM-and-Presence-Service.pdf
and this section
http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/im_presence/interdomain_federation/10_5_1/CUP0_BK_I07B7052_00_integration-guide-interdomain-federation-105/CUP0_BK_I07B7052_00_integration-guide-interdomain-federation-105_chapter_01010.html#CUP0_RF_CAF8AEDD_00
Expressway-E does not support XMPP address translation (of email addresses, for example). If you are using Expressway-E for XMPP federation, you must use native presence Jabber IDs from IM and Presence Service.
This being said
Based on my findings, I believe Cisco now supports multi-domain setup for IM&P with the "caveat" federation still doesn't work. My customer is not happy with this but still would like to proceed with the rest of the benefits that MRA brings to the table for their Jabber deployment.
To support the above scenario it is my understanding I need to make an adjustment to the configuration of IM&P. As I stated when I opened the case my customer’s current IM&P domain is “example.root.local” their JID is made up of [email protected]. It’s my understanding we cannot use this domain and activate MRA so we need to adjust everyone’s JID to be a Publicly routable DNS name. Since everyone that has a JABBER account also has an email account I was thinking we map the JID to the email. I’m trying to understand how to get from where we are to where we need to be. I found this guide but it doesn’t talk about the effects of doing this on a live system setup the way my customer is setup.
http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/im_presence/interdomain_federation/10_5_1/CUP0_BK_I07B7052_00_integration-guide-interdomain-federation-105/CUP0_BK_I07B7052_00_integration-guide-interdomain-federation-105_chapter_01100.html
I am also not certain this is the setting I’m looking for. I believe what I need to change is actually on the Presence server under the domains section I found this
Domains Configuration
Use the controls on this window to view and edit domains managed by the IM and Presence Service. Previously, the IM and Presence Service supported a single domain. With this release, you can specify multiple domains.
Before You Begin
To take advantage of multiple IM and Presence Service domains, you must choose Directory URI as the IM address scheme on the Advanced Presence Settings window. If the IM address scheme is set to UserID@domain, the default domain is used for the IM and Presence Service. The status of the IM Address Scheme setting is displayed at the top of the window in the Status box. The Status box contains a link to the Advanced Presence Settings window.
Is this what I need to do?

Hello everyone. This is long winded but the context is needed to explain what I'm looking for. Any help is appreciated.
My customer has piloted IM&P for 1 year now and is looking to take it to the next level. They purchased Expressway Core & Edge and they are looking to enable Mobile Remote Access, B2B Video and XMPP Federation. One issue is that the Jabber domain that was selected 1 year ago for the pilot was a local domain. The reason for this is because the multidomain support was not available at the time. Internally there are 3 domains. example.ca, examplesales.ca, and examplebanannas.com. Their Jabber ID they use today is example.root.local. I am reading through the guides and it seems as though IM&P allows you to map a JABBER ID to an email address or a directory URI. This will allow multiple presence domains within one Presence cluster. The problem is that it appears as though federation will not work through expressway core / edge if you use this method. Can this be confirmed?
I am providing you these URL's only for guidance, to show you how I arrived at my situation where I’m asking for help on a configuration change to my customers IM&P settings.
note the section on page 41 of the following guide http://www.cisco.com/c/dam/en/us/td/docs/telepresence/infrastructure/vcs/config_guide/X8-5/Mobile-Remote-Access-via-VCS-Deployment-Guide-X8-5-1.pdf
One would presume that Multi-domain support is now supported with expressway core & edge. The caveat I found on page 4 of the following guide in relation to xmpp federation.
http://www.cisco.com/c/dam/en/us/td/docs/telepresence/infrastructure/vcs/config_guide/XMPP-Federation-with-Cisco-VCS-and-IM-and-Presence-Service.pdf
and page 10 of the following guide
http://www.cisco.com/c/dam/en/us/td/docs/telepresence/infrastructure/vcs/config_guide/X8-5/XMPP-Federation-with-Cisco-VCS-and-IM-and-Presence-Service.pdf
and this section
http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/im_presence/interdomain_federation/10_5_1/CUP0_BK_I07B7052_00_integration-guide-interdomain-federation-105/CUP0_BK_I07B7052_00_integration-guide-interdomain-federation-105_chapter_01010.html#CUP0_RF_CAF8AEDD_00
Expressway-E does not support XMPP address translation (of email addresses, for example). If you are using Expressway-E for XMPP federation, you must use native presence Jabber IDs from IM and Presence Service.
This being said
Based on my findings, I believe Cisco now supports multi-domain setup for IM&P with the "caveat" federation still doesn't work. My customer is not happy with this but still would like to proceed with the rest of the benefits that MRA brings to the table for their Jabber deployment.
To support the above scenario it is my understanding I need to make an adjustment to the configuration of IM&P. As I stated when I opened the case my customer’s current IM&P domain is “example.root.local” their JID is made up of [email protected]. It’s my understanding we cannot use this domain and activate MRA so we need to adjust everyone’s JID to be a Publicly routable DNS name. Since everyone that has a JABBER account also has an email account I was thinking we map the JID to the email. I’m trying to understand how to get from where we are to where we need to be. I found this guide but it doesn’t talk about the effects of doing this on a live system setup the way my customer is setup.
http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/im_presence/interdomain_federation/10_5_1/CUP0_BK_I07B7052_00_integration-guide-interdomain-federation-105/CUP0_BK_I07B7052_00_integration-guide-interdomain-federation-105_chapter_01100.html
I am also not certain this is the setting I’m looking for. I believe what I need to change is actually on the Presence server under the domains section I found this
Domains Configuration
Use the controls on this window to view and edit domains managed by the IM and Presence Service. Previously, the IM and Presence Service supported a single domain. With this release, you can specify multiple domains.
Before You Begin
To take advantage of multiple IM and Presence Service domains, you must choose Directory URI as the IM address scheme on the Advanced Presence Settings window. If the IM address scheme is set to UserID@domain, the default domain is used for the IM and Presence Service. The status of the IM Address Scheme setting is displayed at the top of the window in the Status box. The Status box contains a link to the Advanced Presence Settings window.
Is this what I need to do?

OCS 10g - Does it support multiple domain hosting

Hi,
We have installed OCS 10g for a domain university.edu
Now, It provides only two available domains as local domains. ie, university.edu and .edu
I would like to add some more sub domains (at least one more) such as college.university.edu to be a local domain in OCS for which it should accept emails.
It this simple feature of multiple domain hosting supported in OCS.
Kindly let us know some tips for it.
Many thanks in advance.
maas.

I configured the domain about 2 years ago, so I have to go and look in my archive (which is at the office, I will not be there before the end of next week).
The setup has 2 top level domains (one is .nl and one is .com). Under .nl about 4 domains are running, under .com only 1. If I remember corretly issues did raise with files. Calendar and mail are running as expected. This is on a 9.0.4 release though (not a OCS 10 R1 or R2). I did read loads of articles and had to patch even more. Luckily I printed all articles I read, so I can lookup the exect document numbers. If you can wait until next week, I can help you out.

Cisco Jabber client to support Multiple e-mail domains

Hi All,
Per the following link, CUCM an IM&Presence starts supporting multiple domains at version 10:
http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/rel_notes/10_0_1/delta/CUCM_BK_C206A718_00_cucm-new-and-changed-1001/CUCM_BK_C206A718_00_cucm-new-and-changed-1001_chapter_010.html#CUCM_RF_I31EA3AB_00
However, we have heard from Cisco that there is NO Jabber client that works with version 10 to support multiple email domains.
This may or not may be true.
Can someone who has connection with BU confirm this? If there is Jabber client that supports multiple email domains, what is the version and when is it going to be available?
Thanks,
Mustafa

Per-Olov
How are you dealing with this DA restriction?
Also, what are your comments about the use of Domain Alias vs. Domain with inetdomainbaseDN pointing to my organization? Which one was your choice?
Thanks,
Ivo

Multiple Domain support

Does anyone know if Oracle Collaboration Suite 10g Release 1 (10.1.2.2) supports Multiple Domains?
Example: Data Center looking at hosting mail/calendar/workspaces for Small Medium Businesses.
Client 1: domaina.com
Client 2: domainb.net
Client 3: domainc.org
Client 4: domaind.ca
Client 5: domaine.hu
Can I install a single server instance and host these multiple domains?
I can't find any documentation to support this question.
Thank you.

Hey Chandrakanth -- saw your other post as well. Wondering why you moved away from Kerberos. Could you elaborate on the SLS requirements/architecture complexity that led to this?
Joe

More problems with multiple domains and subaccounts

I had been creating multiple .mac web sites in earlier versions of IWeb by creating extra “domain” files and dragging them in and out of the folder library/Application Support/IWeb as needed. Now I notice that IWeb 08 lets me store several domain files with different names in a folder, and pick whichever one I want when launching IWeb. That’s good -- but of course, the IWeb “Publish” command wants to publish them all to my same .dot mac web site -- even though I have four .dot mac subaccounts each of which can have its own web site. The only way I could figure out to publish different domain files to different .mac web sites was to create several different user accounts on my computer, assign each one to a different .mac subaccount, launch IWeb, find the domain file for that account, publish it -- then log out, log in to another account, launch IWeb there and do the whole exercise again.
It would be bad enough if that worked, but it doesn’t: I found that when I logged in to an account other than the one that created a given domain file, I could open that file (I’ve got it stored in a folder on root level of my hard drive), but I couldn’t save it -- I would get the error message: “Couldn’t save file. You don’t have permission to make changes to that file.” So OK, I went into “Get Info” and changed the ownernship/permissions to match the user account I was in. Now I can make changes and save my domain file -- but I can’t publish what I just saved. When I try, to get the message: “Publish Error. An unknown error occurred.”
Is there any way I make this all work -- to open and save my domain files and publish them to the .dot mac subaccount/web site I want? And is there any way around this whole clunky system that would allow me to publish to different .mac subaccounts/websites more efficiently (preferably logged into my Mac from the same user account)?
(It may be irrelevant, but in addition to paying for the subaccounts, I bought the family pack version of ILife what should give me legit access from a licensing point of view anyway.)

That's helpful -- I'll try it. It seems to me it would still be preferable to store my multiple domain files in one hard drive location, easily accessible and offering read and write privileges to any user account. That way I could at least do design work, etc., on any of my domains without logging in and out as various users. Any way to make that work? And really, it seems weird that I can sit at my Mac and mount the IDisks of any of my four .mac sub accounts, open their folders, and look at the web pages previously published to those subaccounts -- but apparently I can't publish any changes to those subaccounts/domains through IWeb without logging out and then back in as a different user. Isn't there some way around these apparent restrictions?

Multiple domains for tracker.js

I'm using the personalization functionality of CQ 5.4, which appears to force a request for http://localhost:4502/libs/wcm/stats/tracker.js when pages load. According to the docs at http://dev.day.com/docs/en/cq/5-4/deploying/configuring_cq.html#OSGi Configuration in the Repository , I should be able to override this URL by adding some nodes to /apps/projectName. However, my tests seem to show that doing so for one project affects all sites on the server. In production, the client has a number of domains all running on one CQ instance.
1) Is there a way to remove this request altogether without modifying any JSPs in the /libs folder, or inheriting/overriding them?
2) Is there a way to support multiple domains?
The best solution I've come up with so far is creating a generic domain like cq-tracking.clientName.com, and having all sites use that.

See the following:
http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00808c3c45.
shtml
*Perform Multi-Domain Searches (Optional) *
*Optional.* The ASA currently does not support the LDAP referal
mechanism for multi-domain searches (Cisco bug ID CSCsj32153).
Multi-domain searches are supported with the AD in Global Catalog Server
mode. In order to perform multi-domain searches, setup up the AD server
for Global Catalog Server mode, usually with the these key parameters
for the LDAP server entry in the ASA. The key is to use an
ldap-name-attribute that must be unique across the directory tree.
server-port 3268
ldap-scope subtree
ldap-naming-attribute userPrincipalName
If global catalog server is not an option for you, you can always create two seperate SSL tunnel-groups and two seperate LDAP aaa-server groups and this would also allow you to do two AD domains (but the drawback is that you would have to inform the user which group they should select)
-heather

DNS for Multiple Domains

I am trying to figure out the proper configuration for DNS that will support multiple domains. I have DSN working now for just one domain.
My XServe has a static IP connected directly to cable modem and is the master nameserver. I also have an Ubuntu server with static IP connected directly to cable modem that is the secondary (slave) nameserver.
On the XServe, I currently have a primary zone created for domain1.com. with:
* an A record for domain.com. (Fully Qualified) and the same static IP as the XServe
* an A record for ns1 (not fully qualified) and the same static IP as the XServe
* Aliases for ftp, www and mail (not fully qualified) mapped to destination ns1.domain1.com. (Fully Qualified)
Nameservers under the Primary Zone is ns1.domain1.com. and Mail Exchangers is ns1.domain1.com. with a priority of 10.
The reverse zone is getting created appropriately for me as far as I can tell. I am able to access www.domain1.com just fine as well as mail and ftp.
Now I want to add a new domain2.com to this master nameserver. I know that I will need a new Primary Zone for domain2.com. to be recognized and to setup it's aliases?
Can I use the same static IP or do I have to have a unique static IP?
Can I use the ns1.domain1.com. nameserver or does the new domain2.com need new nameservers?
Does domain2.com have it's own A records?
Does the mail exchangers need to be different for domain2.com?
It seems like all the documentation and information that I can find are just for configuring one domain and not so much for multiple domains. Any help would be greatly appreciated.
Spotted Dog

Don't think of subsequent domains as being any different from the first domain.
For every domain you need to provide certain information, including a list of the hostnames within that domain. There is no relationship between 'www' in domain1.com and 'www' in domain2.com (unless you point them to the same address, but that's a different issue).
Any host record in the zone can either be an A record (where you specify an IP address) or a CNAME (where you specify another hostname that it maps to).
In the case of your web server handling both domains you could set 'www.domain2.com' as an A record with the appropriate IP address, or you could set it as a CNAME with a value of 'www.domain1.com.' (essentially saying 'www.domain2.com has the same IP address of www.domain1.com, so go find that address').
It's also possible to use cross-domain records for things like name servers and mail servers - in other words you can set your MX record for domain2.com to mail.domain1.com (essentially saying that domain2.com's email is handled by mail.domain1.com).
Can I use the same static IP or do I have to have a unique static IP?
That's not a question for DNS. What you're defining are the hostnames in that domain. If you have one server (e.g. a web server) that can handle multiple domains (e.g. one apache server handling web traffic for both domain1.com and domain2.com) then, sure, you can use the same IP address for both.
If, on the other hand, you have specific services that cannot be multi-hosted (e.g. HTTPS) then you will need different IP addresses.
Can I use the ns1.domain1.com. nameserver or does the new domain2.com need new nameservers?
Sure, it's entirely possible to use domain1.com's name servers for domain2.com.
Does domain2.com have it's own A records?
It can do, or not, as you choose. If you're running www.domain2.com on the same server as www.domain1.com then you could use a CNAME record to point www.domain2.com to www.domain1.com.,or you could set an A record with the same IP address.
The result would be the same, but the CNAME has the advantage that if your IP address changes you only need to change your DNS in one place (www.domain1.com) and all the other addresses would automatically follow.
Does the mail exchangers need to be different for domain2.com?
Not at all, if your mail server is configured to handle mail for both domains it's entirely possible to specify mail.domain1.com as the MX record for domain2.com.

RDBMS Security Store supporting multiple domains

Similar Messages

Maybe you are looking for