Security Data Propagation

Question

Hi
Since propagation tool doesnt propagate some of the security data (like global roles etc for more details http://download.oracle.com/docs/cd/E13155_01/wlp/docs103/prodOps/propToolAdvanced.html#wp1054464 ).
We would like to use the import/export options in the WLS console to migrate from one domain to another domain the embedded ldap data.
Questions:
can we use this options for migrating global roles. But this options will also move other data in embedded ldap associated with visitor roles etc. So can we use both the ldap migration option and propagation tool? In the ldap migration option there is no way to select to move only the global roles.
Is there a possibility of inconsistency between the ldap data after the migration and using propagation tool
Any ideas?

Answer 1

Hi!
calling 'new IntialContext()' should pass the authenticated user automatically to the
initial context request. You could also pass the parameters like listed below:
Principal princ = request.getUserPrincipal();
Properties prop = new Properties();
prop.put(Context.INITIAL_CONTEXT_FACTORY, "weblogic.jndi.WLInitialContextFactory");
prop.put(Context.PROVIDER_URL, "t3://host:port");
prop.put(Context.SECURITY_PRINCIPAL, princ.getName());
prop.put(Context.SECURITY_CREDENTIALS, ((weblogic.security.acl.User)princ).getCredential(princ));
new InitialContext(prop);
Make sure, that your realm implements the getCredential() method (this is not the case in WLS examples).
regards,
przemek
sudarson schrieb:
Realm based basic or form authentication, so that whenever user asks for anything
under some directory(or context), login page/dialog box will be shown.
Regards,
Sudarson
"Amar Pratap" <[email protected]> wrote:
What kind of authentication ur using in the Servet/JSP?
"sudarson" <[email protected]> wrote in message
news:3c5e65a9$[email protected]..
Hi All,
If I use realm to enter ceratin web application then will the securitycontext
(what ever credential user will provide)propagate thru the session? And
if I
call a ejb from any of the servlet or jsp, will the same security rolewill be
used to determine the authorization level ?
If yes, how should I create the context in that case ? Or Should Iuse
new IntialContext()with out environment property hashtable ?
Any suggestion is welcome.
TIA,
Sudarson
Przemyslaw Rychlewski . . . . . . Pixelpark AG
Senior IT-Developer . . . . . . . Systems & Technology
mailto:[email protected] . http://www.pixelpark.com/
Tel.:++49.30.5058.1812. . . . . . Rotherstr. 8
Fax.:++49.30.5058.1600. . . . . . 10783 Berlin