Several realms in a domain?

Hello everyone,
sorry if this group is not correct for the subject..
 
We are using WebLogic Server 8.1 for our project. We are deploying two versions of our software, with different authentication requirements; so we have written two authentication providers. As authentications providers are realm-specific, I've configured two security realms for our domain (and two software versions, EAR1 and EAR2, have different realms configured in their weblogic-application descriptors).
 
Now, it seems that any moment only realm configured as default works; other application (with non-default realm) does not work.
 
Documentation on the subject seems very unclear. Is it even possible to have several realms in a domain?
Thanks for your responses.
Regards,
Sami Lehtinen

Hi Andrey,
I assume that you mean you want to set filter values on a characteristic. You want several filters, some or all of which are ranges (between filters).
I can tell you how to do this in BEx Analyzer (queries embedded in Excel workbooks). Users can do this manually using the Set Filter interface and selecting the Value Ranges from the drop down box at the top left. If both ends of the range are in the master data, they can select each end of the range. If the ranges they want are not in the master data, then they simply type in the range with a semicolon ( between the two values.
If you want to do this programmatically, so the user does not have to use the Set Filter interface, it is possible, but problematic. It requires quite a bit of Visual Basic coding and is not recommended. See https://websmp201.sap-ag.de/~sapidb/011000358700011836292001
which includes a warning against implementing just this sort of thing (see page 2).
If you want to do this for a Web report, I'm not an expert in that area. Hopefully someone else who is can respond.
- Pete

Similar Messages

Empty list of realms in Default Realm item in domain screen

Hi,
I've been given a WebLogic 7.0 SP1 installation with WebLogic Portal
to look at because it's behaving strangely. The symptom I was given
was "it stops working after running an hour" but it's got more basic
problems than that. In particular, when I use the console to look at
it and select the name of the domain (the second line on the
left-hand-side interface, just below Console), the list for Default
Realm has no entries. On a vanilla install, that list includes
"Compatability Realm" which I understand is necessary for use with
WebLogic Portal 7.
So how do I fix the configuration so that I can put it into
Compatability Realm mode?
Peter Rowley
[email protected]

Hi Steve
Many thanks for that. Could I ask that
this kind of thing goes in the release
readme also.
Marc

Migrating several collections to one domain

I have a TFS 2013.3 instance in a domain that is just for TFS stuff. lets call it TFSDomain
TFSDomain trusts UserDomain(oneway). UserDomain is where all my users log into etc.
I have a Developer domain that has a TFS 2010 SP1 instance in it. Lets call it DevDomain. I want to move the collection from the DevDomain to the TFSDomain.
Currently in the DevDomain users use DevDomain Accounts to login and develop on TFS. They also have UserDomain accounts. If I move the collection from the DevDomain to the TFSDomain I believe that all of the DevDomain user IDs will disappear because it changes
the AD forest also. So the question is can the users just start using their UserDomain Accounts to login to the TFSDomain?
The workspaces from the DevDomain will transfer over but the owners of the workspaces will be incorrect. Can that be changed? Or does everyone need to check in all code before the move?
Would I be better off just allowing the TFSDomain to trust the DevDomain? Is it even possible to allow TFS domain to trust multiple user domains?
Thanks for your replies.

Hi brthomas,
Based on your description, you suppose the DevDomain user IDs will disappear after moving the collection from the DevDomain to the TFSDomain since it changes the AD forest. I'd like to know whether DevDomain and UserDomain are two-way trusted.
If DevDomain and UserDomain consists a AD forest. Then you can make two-way trust between TFSDomain and the AD forest, then you can migrate the team project collection from DevDomain to TFSDomain. Whether you can use UserDomain Accounts to login
to the TFSDomain depends on the permissions of UserDomain Accounts to your TFS 2010 SP1 instance.
As my understanding, you can allowing the TFSDomain to trust the DevDomain since the Objects in that container(AD forest) inherently trust each other and the security services located in that same container. However, you can also allow TFSDomian trust multiple
user domains. To secure the migration succeed, you can also set up a test machine to have a test. Or backup the TFS 2010 sp1 team project collection databases before the migration.
Best regards,
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Chaning the OD Domain name (kerberos realm)

Hey folks,
Currently our OD domain is nsnet.com - we don't own that publically, but we use it internally. ... in retrospect, not a wise move.
It hasn't created any DNS issues, or any real problems for that matter ... except one. Its very very hard to get a commercial SSL certificate when you don't own the email address for the domain you want to secure.
I've been toying with the idea of changing the domain and kerberos realm to a domain name that I can buy...but I am curious how (if it all) I can change the OD Domain and Realm in Leopard server?
One thought is to blow away the OD domain and start from scratch - we are only talking about 15 macs, a few linux boxes and about 5 users ... but if I can change it easily then I'd like to try that first.
thanks!
-N

Hi
The Kerberos Realm Name is derived from what is configured in the DNS Service so you would have to change that first. This could have major repercussions (inevitably it always does) if you have any other Service running dependent on DNS; Web, iCal, SUS etc.
Demotion to Standalone, re-configuring the DNS Service and re-promotion is certainly the way I would go if you have the amount of users you currently have. In a funny way its probably quicker. One avenue you can explore is to change the DNS Service to reflect the change and then issue changeip:
sudo changeip /LDAPv3/127.0.0.1 oldIPAddress newIPAddress oldHostName newHostname
man changeip for usage.
If the IP address is not changing then leave it the same. As an example your server's FQDN could be myserver.mydomain.com yielding a Kerberos Realm of MYSERVER.MYDOMAIN.COM and an IP address of 172.16.16.254, in which case the command would look like this:
sudo changeip /LDAPv3/127.0.0.1 172.16.16.254 172.16.16.254 myserver.mydomain.com myserver.mynewdomain.com
You'll be prompted first for the System Admin name and password as well as the Directory Admin name and password (diradmin). A couple of restarts and possibly you might be on track. If this does not work - sometimes it does not - go for demotion and proceed from there.
Hope this helps, Tony

RDBMS Security Store supporting multiple domains

Can one instance of the RDBMS Security Store be utilized to support multiple WLS 10.3.2 domains?
I have several 10.3.2 domains, all of which have clusters and role requirements? The documentation 'suggests' one Store per domain, but all of the tables in the schema contain DOMN (domain) and REALMN (realm) columns that would seem to indicate domain independence. It would be nice to be able to manage one Store schema that supports several Domains.

Hi,
The document which you are referring is for WLS 10.0 and RDBMS security is introduced from WLS 10.3.0 onwards.
The reason why RDBMS security store should not be stored between two domains is RDBMS security store is used by authorization, role mapping, credential mapping, and certificate registry providers.
Once the RDBMS security store is configured in a domain, an instance of any of the preceding security providers that has been created in the security realm automatically uses only the RDBMS security store as a datastore, and not the embedded LDAP server.
It is just the replacement for Embedded LDAP.
Thanks & Regards,
Murali.
============

How to config domain?wl 6.0

We have four developers which makes up one develop team. Now we
want to develop together on one server, which is installed with
weblogic6.0 under solaris7. We want each developer can make his
own ejb separately on his own computer but all developers can deploy
their components on the server. In this case we need each developer
has separate environment on the sever. Even though I read all documents
of WebLogic6.0 I cannot find out a way to configure a proper develop
environment. Should I start several domains or should I start several
servers in one domain? I noticed that there are 3 default domains
after installing the weblogic6.0 and I can startup them concurrently
with configuring different port. I tried to create new domains
for each developer in the console. I copied “config.xml”,
“startxxxDomain.sh” and “fileRealm.properties”
to the new domain and changed the domainname in these files. But
finally I got an error message as the following files
config.xml:

<Domain
Name="wenjing"
>
<JTA
Name="wenjing"
/>
<ApplicationManager
Name="wenjing"
/>
<Security
Name="wenjing"
/>
<Server
AdministrationPort="0"
ListenAddress=""
ListenPort="8001"
Machine=""
Name="wenjingServer"
>
<ServerDebug
Name="wenjingServer"
/>
<WebServer
Name="wenjingServer"
/>
<KernelDebug
Name="wenjingServer"
/>
<SSL
Name="wenjingServer"
/>
<Log
Name="wenjingServer"
/>
</Server>
<Log
Name="wenjing"
/>
</Domain>
fileRealm.properties:
#Wed Feb 21 13:56:43 CST 2001
acl.modify.weblogic.jndi.weblogic.qa=everyone
acl.reserve.weblogic.jdbc.connectionPool.oraPool=system,everyone
acl.list.weblogic.jndi.a2.b3=user_ulm,user_ulx,user_xlm,user_xlx
acl.unlockuser.weblogic.passwordpolicy=Administrator
group.VP=javajoe
acl.reset.weblogic.jdbc.connectionPool.testpool=system
acl.list.weblogic.jndi.weblogic=system
acl.admin.dynapool=system
acl.lockServer.weblogic.admin=system
acl.list.weblogic.jndi.weblogic.ejb=system
acl.modify.weblogic.jndi=everyone
acl.lookup.weblogic.jndi.a1.b1=system,user_d2,user_d3
acl.lookup.weblogic.jndi.a1.b1.c1=system,user_d3
acl.lookup.weblogic.jndi.a2.b3=system,user_ulm,user_ulx,user_uxm,user_uxx
acl.lookup.weblogic.jndi.weblogic.qa=everyone
acl.write.weblogic.workspace.logintest=logintest,system,everyone
acl.modify.weblogic.jndi.weblogic.jnditest=everyone
acl.list.weblogic.jndi.weblogic.rmi=everyone
acl.write.weblogic.workspace=system,everyone
user.pool_user=0xee1ccda7b117f5aaa9c9a184daa2cf3e8c0fd3b7
user.user_d3=0xc7c108a184c72f84885d39891958f364e72bad75
acl.unlockServer.weblogic.admin=system
user.user_d2=0x7af158321bbe45ad0e3b5162a51a349cfc2ab096
user.user_d1=0xc1a38c8365bd23821c36f7fdb28a14cccf179d45
user.javajoe=0x965d271d8f359a5c4c89ae790ec5a40c62138e21
acl.reset.weblogic.jdbc.connectionPool.jtstestpool=system
acl.lookup.weblogic.jndi.VISIBLE.PROTECTED=system
acl.modify.weblogic.jndi.a1.b1=system
group.Administrator=system,j2ee
acl.modify.weblogic.jndi.weblogic=system
acl.modify.weblogic.jndi.a2.b3=system,user_ulm,user_uxm,user_xlm,user_xxm
acl.reserve.weblogic.jdbc.connectionPool.testpool=system,everyone
acl.modify.weblogic.jndi.weblogic.ejb=system
user.jtajtajta=0x0383f8017ad0146b105fa32ae16c6b132eff6c8f
acl.reserve.weblogic.jdbc.connectionPool.jtstestpool=system,jtajtajta
user.wsUser4=0x1dddd9e6aadde8962c0a7d584584e47924fb21c1
acl.lookup.weblogic.jndi=everyone
user.wsUser3=0x1dddd9e6aadde8962c0a7d584584e47924fb21c1
user.wsUser2=0x1dddd9e6aadde8962c0a7d584584e47924fb21c1
acl.reserve.dynapool=system,pool_user
user.wsUser1=0x1dddd9e6aadde8962c0a7d584584e47924fb21c1
user.wsUser0=0x1dddd9e6aadde8962c0a7d584584e47924fb21c1
acl.modify.weblogic.jndi.weblogic.rmi=everyone
group.Manager=javajoe
user.user_xlx=0x72c273dddc7233e2235e97eccfcecafe6ddebaf8
acl.read.weblogic.workspace.logintest=logintest,system,everyone
group.Employee=j2ee
acl.execute.weblogic.servlet=system,everyone
acl.modify.weblogic.admin.acl=system
acl.lookup.weblogic.jndi.weblogic.ejb=system
acl.write.weblogic.workspace.guest=system,everyone,guest
user.user_xlm=0x72c273dddc7233e2235e97eccfcecafe6ddebaf8
acl.modify.weblogic.jndi.a1.b1.c1=system
acl.read.managedObject=system,guest
user.user_ulx=0x72c273dddc7233e2235e97eccfcecafe6ddebaf8
acl.lookup.weblogic.jndi.weblogic.rmi=everyone
user.user_xxm=0x72c273dddc7233e2235e97eccfcecafe6ddebaf8
user.logintest=0x1dddd9e6aadde8962c0a7d584584e47924fb21c1
acl.list.weblogic.jndi.weblogic.fileSystem=everyone
user.pool_nonuser=0xee1ccda7b117f5aaa9c9a184daa2cf3e8c0fd3b7
user.pool_creator=0xee1ccda7b117f5aaa9c9a184daa2cf3e8c0fd3b7
user.user_uxx=0x72c273dddc7233e2235e97eccfcecafe6ddebaf8
acl.list.weblogic.jndi=everyone
user.user_ulm=0x72c273dddc7233e2235e97eccfcecafe6ddebaf8
acl.read.weblogic.workspace.guest=system,everyone,guest
acl.lookup.weblogic.jndi.weblogic.fileSystem=everyone
user.invalidUser=0x86bea983a5a4aa62f2c6ef7f8762b5abb9c84ab3
user.user_uxm=0x72c273dddc7233e2235e97eccfcecafe6ddebaf8
acl.modify.weblogic.jndi.VISIBLE.PROTECTED=system
user.secuser2=0x1dddd9e6aadde8962c0a7d584584e47924fb21c1
user.secuser1=0x1dddd9e6aadde8962c0a7d584584e47924fb21c1
acl.lookup.weblogic.jndi.weblogic.jnditest=everyone
group.Administrators=system
user.validUser=0x86bea983a5a4aa62f2c6ef7f8762b5abb9c84ab3
user.j2ee=0xd4e2696c23a37d2e5bf74919fa6383323671b60f
acl.receive.weblogic.event.TOP.SECRET=system
acl.list.weblogic.jndi.VISIBLE.PROTECTED=system
acl.reset.weblogic.jdbc.connectionPool.oraPool=system
user.brown=0x1dddd9e6aadde8962c0a7d584584e47924fb21c1
user.system=0x991228123e0dda8b7483886b7d6646633e5af15e
acl.write.managedObject=system
acl.modify.weblogic.jndi.weblogic.fileSystem=everyone
acl.lookup.weblogic.jndi.weblogic=everyone
acl.read.weblogic.workspace.system=system,everyone
acl.admin.weblogic.jdbc.connectionPoolcreate=system,pool_creator
acl.shutdown.weblogic.admin=system
acl.write.weblogic.workspace.system=system,everyone
acl.reset.weblogic.jdbc.connectionPool=system
acl.read.weblogic.workspace=system,everyone
acl.boot.weblogic.server=system,everyone
acl.submit.weblogic.event.TOP.SECRET=system
startWenJing.sh:
#!/bin/sh
# $Id$
# This script can be used to start WebLogic Server. This script
ensures
# that the server is started using the config.xml file found in
this
# directory and that the CLASSPATH is set correctly. This script
contains
# the following variables:
# WL_HOME - The root directory of your WebLogic Server
# installation
# JAVA_HOME - Determines the version of Java used to start
# WebLogic Server. This variable must point to
the
# root directory of a JDK installation and will
be set
# for you by the WebLogic Server installer.
# See the WebLogic platform support
# page (http://e-docs.bea.com/wls/platforms/index.html)
# for an up-to-date list of supported JVMs on
your platform.
# JAVA_OPTIONS - Java command-line options for running the server.
# jDriver for Oracle users: This script assumes that native libraries
# required for jDriver for Oracle have been installed in the proper
# location and that your system LD_LIBRARY_PATH variable has been
set appropriately.
# Also note that this script default to the oci816_8 version of
the
# shared libraries. If this is not the version you need, please
adjust the
# LD_LIBRARY_PATH variable accordingly.
# For additional information, refer to Installing and Setting up
WebLogic
# Server (http://e-docs.bea.com/wls/docs60/install/index.html).
# Set user-defined variables.
JAVA_HOME=/home/jdk130
WL_HOME=/home/wlserver6.0
JAVA_OPTIONS="-ms64m -mx64m"
# Check that script is being run from the appropriate directory
if [ ! -f config.xml ]; then
echo "startWeblogic.sh: must be run from the config/wenjing directory."
1>&2
# Check for classes
elif [ ! -f $WL_HOME/lib/weblogic.jar ]; then
echo "The weblogic.jar file was not found in directory $WL_HOME/lib."
1>&2
# Check for JDK
elif [ ! -f $JAVA_HOME/bin/java ]; then
echo "The JDK wasn't found in directory $JAVA_HOME." 1>&2
else
cd ../..
# Grab some file descriptors.
maxfiles=`ulimit -H -n`
if [ ! $? -a "$maxfiles" != 1024 ]; then
if [ "$maxfiles" = "unlimited" ]; then
maxfiles=1025
fi
if [ "$maxfiles" -lt 1024 ]; then
ulimit -n $maxfiles
else
ulimit -n 1024
fi
fi
# Figure out how to use our shared libraries
case `uname -s` in
AIX)
if [ -n "$LIBPATH" ]; then
LIBPATH=$LIBPATH:$WL_HOME/lib/aix
else
LIBPATH=$WL_HOME/lib/aix
fi
export LIB_PATH
echo "LIBPATH=$LIBPATH"
HP-UX)
if expr "`uname -r`" : "..11..." > /dev/null 2>&1; then
hpsubdir=hpux11
elif expr "`uname -r`" : "..10..." > /dev/null 2>&1; then
hpsubdir=hpux10
fi
chmod a+x `find $WL_HOME/lib/$hpsubdir -name "*.sl" -print`
if [ -n "$SHLIB_PATH" ]; then
SHLIB_PATH=$SHLIB_PATH:$WL_HOME/lib/$hpsubdir
else
SHLIB_PATH=$WL_HOME/lib/$hpsubdir
fi
export SHLIB_PATH
echo "SHLIB_PATH=$SHLIB_PATH"
JAVA_OPTIONS="-classic $JAVA_OPTIONS"
IRIX)
if [ -n "$LD_LIBRARY_PATH" ]; then
LD_LIBRARY_PATH=$LD_LIBRARY_PATH:$WL_HOME/lib/irix
else
LD_LIBRARY_PATH=$WL_HOME/lib/irix
fi
export LD_LIBRARY_PATH
echo "LD_LIBRARY_PATH=$LD_LIBRARY_PATH"
LINUX)
if [ -n "$LD_LIBRARY_PATH" ]; then
LD_LIBRARY_PATH=$LD_LIBRARY_PATH:$WL_HOME/lib/linux
else
LD_LIBRARY_PATH=$WL_HOME/lib/linux
fi
export LD_LIBRARY_PATH
echo "LD_LIBRARY_PATH=$LD_LIBRARY_PATH"
OSF1)
if [ -n "$_RLD_LIST" ]; then
RLDLIST=$_RLD_LIST:$WL_HOME/lib/tru64unix
else
RLDLIST=$WL_HOME/lib/tru64unix
fi
export RLDLIST
echo "_RLD_LIST=$_RLD_LIST"
SunOS)
if [ -n "$LD_LIBRARY_PATH" ]; then
LD_LIBRARY_PATH=$LD_LIBRARY_PATH:$WL_HOME/lib/solaris:$WL_HOME/lib/solaris/oci816_8
else
LD_LIBRARY_PATH=$WL_HOME/lib/solaris:$WL_HOME/lib/solaris/oci816_8
fi
export LD_LIBRARY_PATH
echo "LD_LIBRARY_PATH=$LD_LIBRARY_PATH"
JAVA_OPTIONS="-hotspot $JAVA_OPTIONS"
echo "$0: Don't know how to set the shared library path for `uname
-s`. "
esac
CLASSPATH=$WL_HOME:$WL_HOME/lib/weblogic_sp.jar:$WL_HOME/lib/weblogic.jar:$WL_HOME/samples/eval/cloudscape/lib/cloudscape.jar:.
WLS_PW=weblogic
PATH=$WL_HOME/bin:$JAVA_HOME/jre/bin:$JAVA_HOME/bin:$PATH
java $JAVA_OPTIONS -classpath $CLASSPATH -Dweblogic.Domain=wenjing
-Dweblogic.Name=wenjingServer -Dbea.home=/home -Dcloudscape.system.home=/home/wlsserver6.0/samples/eval/cloudscape/data
-Djava.security.policy==/home/wlserver6.0/lib/weblogic.policy -Dweblogic.management.password=$WLS_PW
weblogic.Server
cd config/wenjing
fi
err msg:
LD_LIBRARY_PATH=/home/wlserver6.0/lib/solaris:/home/wlserver6.0/lib/solaris/oci816_8
Enter password to boot weblogic server:LD_LIBRARY_PATH=/home/wlserver6.0/lib/solaris:/home/wlserver6.0/lib/solaris/oci816_8
Starting WebLogic Server ....
<Feb 27, 2001 11:55:17 AM CST> <Notice> <Management> <Loading configuration
file ./config/wenjing/config.xml ...>
<Feb 27, 2001 11:55:19 AM CST> <Info> <Logging> <Only log messages
of severity "Error" or worse will be displayed in this window.
This can be changed at Admin Console> wenjing> Servers> wenjingServer>
Logging> Debugging> Stdout severity threshold>
<Feb 27, 2001 11:55:22 AM CST> <Emergency> <Server> <Unable to
initialize the server: 'Fatal initialization exception
Throwable: java.lang.SecurityException: Authentication for user
system denied in realm weblogic
java.lang.SecurityException: Authentication for user system denied
in realm weblogic
 at weblogic.security.acl.Realm.authenticate(Realm.java:209)
 at weblogic.security.acl.Realm.getAuthenticatedName(Realm.java:229)
 at weblogic.security.acl.internal.Security.authenticate(Security.java:113)
 at weblogic.security.SecurityService.initializeSuid(SecurityService.java:293)
 at weblogic.security.SecurityService.initialize(SecurityService.java:123)
 at weblogic.t3.srvr.T3Srvr.initialize(T3Srvr.java:343)
 at weblogic.t3.srvr.T3Srvr.run(T3Srvr.java:169)
 at weblogic.Server.main(Server.java:35)
'>
The WebLogic Server did not start up properly.
Exception raised: java.lang.SecurityException: Authentication for
user system denied in realm weblogic
java.lang.SecurityException: Authentication for user system denied
in realm weblogic
 at weblogic.security.acl.Realm.authenticate(Realm.java:209)
 at weblogic.security.acl.Realm.getAuthenticatedName(Realm.java:229)
 at weblogic.security.acl.internal.Security.authenticate(Security.java:113)
 at weblogic.security.SecurityService.initializeSuid(SecurityService.java:293)
 at weblogic.security.SecurityService.initialize(SecurityService.java:123)
 at weblogic.t3.srvr.T3Srvr.initialize(T3Srvr.java:343)
 at weblogic.t3.srvr.T3Srvr.run(T3Srvr.java:169)
 at weblogic.Server.main(Server.java:35)
Reason: Fatal initialization exception

We have four developers which makes up one develop team. Now we
want to develop together on one server, which is installed with
weblogic6.0 under solaris7. We want each developer can make his
own ejb separately on his own computer but all developers can deploy
their components on the server. In this case we need each developer
has separate environment on the sever. Even though I read all documents
of WebLogic6.0 I cannot find out a way to configure a proper develop
environment. Should I start several domains or should I start several
servers in one domain? I noticed that there are 3 default domains
after installing the weblogic6.0 and I can startup them concurrently
with configuring different port. I tried to create new domains
for each developer in the console. I copied “config.xml”,
“startxxxDomain.sh” and “fileRealm.properties”
to the new domain and changed the domainname in these files. But
finally I got an error message as the following files
config.xml:

<Domain
Name="wenjing"
>
<JTA
Name="wenjing"
/>
<ApplicationManager
Name="wenjing"
/>
<Security
Name="wenjing"
/>
<Server
AdministrationPort="0"
ListenAddress=""
ListenPort="8001"
Machine=""
Name="wenjingServer"
>
<ServerDebug
Name="wenjingServer"
/>
<WebServer
Name="wenjingServer"
/>
<KernelDebug
Name="wenjingServer"
/>
<SSL
Name="wenjingServer"
/>
<Log
Name="wenjingServer"
/>
</Server>
<Log
Name="wenjing"
/>
</Domain>
fileRealm.properties:
#Wed Feb 21 13:56:43 CST 2001
acl.modify.weblogic.jndi.weblogic.qa=everyone
acl.reserve.weblogic.jdbc.connectionPool.oraPool=system,everyone
acl.list.weblogic.jndi.a2.b3=user_ulm,user_ulx,user_xlm,user_xlx
acl.unlockuser.weblogic.passwordpolicy=Administrator
group.VP=javajoe
acl.reset.weblogic.jdbc.connectionPool.testpool=system
acl.list.weblogic.jndi.weblogic=system
acl.admin.dynapool=system
acl.lockServer.weblogic.admin=system
acl.list.weblogic.jndi.weblogic.ejb=system
acl.modify.weblogic.jndi=everyone
acl.lookup.weblogic.jndi.a1.b1=system,user_d2,user_d3
acl.lookup.weblogic.jndi.a1.b1.c1=system,user_d3
acl.lookup.weblogic.jndi.a2.b3=system,user_ulm,user_ulx,user_uxm,user_uxx
acl.lookup.weblogic.jndi.weblogic.qa=everyone
acl.write.weblogic.workspace.logintest=logintest,system,everyone
acl.modify.weblogic.jndi.weblogic.jnditest=everyone
acl.list.weblogic.jndi.weblogic.rmi=everyone
acl.write.weblogic.workspace=system,everyone
user.pool_user=0xee1ccda7b117f5aaa9c9a184daa2cf3e8c0fd3b7
user.user_d3=0xc7c108a184c72f84885d39891958f364e72bad75
acl.unlockServer.weblogic.admin=system
user.user_d2=0x7af158321bbe45ad0e3b5162a51a349cfc2ab096
user.user_d1=0xc1a38c8365bd23821c36f7fdb28a14cccf179d45
user.javajoe=0x965d271d8f359a5c4c89ae790ec5a40c62138e21
acl.reset.weblogic.jdbc.connectionPool.jtstestpool=system
acl.lookup.weblogic.jndi.VISIBLE.PROTECTED=system
acl.modify.weblogic.jndi.a1.b1=system
group.Administrator=system,j2ee
acl.modify.weblogic.jndi.weblogic=system
acl.modify.weblogic.jndi.a2.b3=system,user_ulm,user_uxm,user_xlm,user_xxm
acl.reserve.weblogic.jdbc.connectionPool.testpool=system,everyone
acl.modify.weblogic.jndi.weblogic.ejb=system
user.jtajtajta=0x0383f8017ad0146b105fa32ae16c6b132eff6c8f
acl.reserve.weblogic.jdbc.connectionPool.jtstestpool=system,jtajtajta
user.wsUser4=0x1dddd9e6aadde8962c0a7d584584e47924fb21c1
acl.lookup.weblogic.jndi=everyone
user.wsUser3=0x1dddd9e6aadde8962c0a7d584584e47924fb21c1
user.wsUser2=0x1dddd9e6aadde8962c0a7d584584e47924fb21c1
acl.reserve.dynapool=system,pool_user
user.wsUser1=0x1dddd9e6aadde8962c0a7d584584e47924fb21c1
user.wsUser0=0x1dddd9e6aadde8962c0a7d584584e47924fb21c1
acl.modify.weblogic.jndi.weblogic.rmi=everyone
group.Manager=javajoe
user.user_xlx=0x72c273dddc7233e2235e97eccfcecafe6ddebaf8
acl.read.weblogic.workspace.logintest=logintest,system,everyone
group.Employee=j2ee
acl.execute.weblogic.servlet=system,everyone
acl.modify.weblogic.admin.acl=system
acl.lookup.weblogic.jndi.weblogic.ejb=system
acl.write.weblogic.workspace.guest=system,everyone,guest
user.user_xlm=0x72c273dddc7233e2235e97eccfcecafe6ddebaf8
acl.modify.weblogic.jndi.a1.b1.c1=system
acl.read.managedObject=system,guest
user.user_ulx=0x72c273dddc7233e2235e97eccfcecafe6ddebaf8
acl.lookup.weblogic.jndi.weblogic.rmi=everyone
user.user_xxm=0x72c273dddc7233e2235e97eccfcecafe6ddebaf8
user.logintest=0x1dddd9e6aadde8962c0a7d584584e47924fb21c1
acl.list.weblogic.jndi.weblogic.fileSystem=everyone
user.pool_nonuser=0xee1ccda7b117f5aaa9c9a184daa2cf3e8c0fd3b7
user.pool_creator=0xee1ccda7b117f5aaa9c9a184daa2cf3e8c0fd3b7
user.user_uxx=0x72c273dddc7233e2235e97eccfcecafe6ddebaf8
acl.list.weblogic.jndi=everyone
user.user_ulm=0x72c273dddc7233e2235e97eccfcecafe6ddebaf8
acl.read.weblogic.workspace.guest=system,everyone,guest
acl.lookup.weblogic.jndi.weblogic.fileSystem=everyone
user.invalidUser=0x86bea983a5a4aa62f2c6ef7f8762b5abb9c84ab3
user.user_uxm=0x72c273dddc7233e2235e97eccfcecafe6ddebaf8
acl.modify.weblogic.jndi.VISIBLE.PROTECTED=system
user.secuser2=0x1dddd9e6aadde8962c0a7d584584e47924fb21c1
user.secuser1=0x1dddd9e6aadde8962c0a7d584584e47924fb21c1
acl.lookup.weblogic.jndi.weblogic.jnditest=everyone
group.Administrators=system
user.validUser=0x86bea983a5a4aa62f2c6ef7f8762b5abb9c84ab3
user.j2ee=0xd4e2696c23a37d2e5bf74919fa6383323671b60f
acl.receive.weblogic.event.TOP.SECRET=system
acl.list.weblogic.jndi.VISIBLE.PROTECTED=system
acl.reset.weblogic.jdbc.connectionPool.oraPool=system
user.brown=0x1dddd9e6aadde8962c0a7d584584e47924fb21c1
user.system=0x991228123e0dda8b7483886b7d6646633e5af15e
acl.write.managedObject=system
acl.modify.weblogic.jndi.weblogic.fileSystem=everyone
acl.lookup.weblogic.jndi.weblogic=everyone
acl.read.weblogic.workspace.system=system,everyone
acl.admin.weblogic.jdbc.connectionPoolcreate=system,pool_creator
acl.shutdown.weblogic.admin=system
acl.write.weblogic.workspace.system=system,everyone
acl.reset.weblogic.jdbc.connectionPool=system
acl.read.weblogic.workspace=system,everyone
acl.boot.weblogic.server=system,everyone
acl.submit.weblogic.event.TOP.SECRET=system
startWenJing.sh:
#!/bin/sh
# $Id$
# This script can be used to start WebLogic Server. This script
ensures
# that the server is started using the config.xml file found in
this
# directory and that the CLASSPATH is set correctly. This script
contains
# the following variables:
# WL_HOME - The root directory of your WebLogic Server
# installation
# JAVA_HOME - Determines the version of Java used to start
# WebLogic Server. This variable must point to
the
# root directory of a JDK installation and will
be set
# for you by the WebLogic Server installer.
# See the WebLogic platform support
# page (http://e-docs.bea.com/wls/platforms/index.html)
# for an up-to-date list of supported JVMs on
your platform.
# JAVA_OPTIONS - Java command-line options for running the server.
# jDriver for Oracle users: This script assumes that native libraries
# required for jDriver for Oracle have been installed in the proper
# location and that your system LD_LIBRARY_PATH variable has been
set appropriately.
# Also note that this script default to the oci816_8 version of
the
# shared libraries. If this is not the version you need, please
adjust the
# LD_LIBRARY_PATH variable accordingly.
# For additional information, refer to Installing and Setting up
WebLogic
# Server (http://e-docs.bea.com/wls/docs60/install/index.html).
# Set user-defined variables.
JAVA_HOME=/home/jdk130
WL_HOME=/home/wlserver6.0
JAVA_OPTIONS="-ms64m -mx64m"
# Check that script is being run from the appropriate directory
if [ ! -f config.xml ]; then
echo "startWeblogic.sh: must be run from the config/wenjing directory."
1>&2
# Check for classes
elif [ ! -f $WL_HOME/lib/weblogic.jar ]; then
echo "The weblogic.jar file was not found in directory $WL_HOME/lib."
1>&2
# Check for JDK
elif [ ! -f $JAVA_HOME/bin/java ]; then
echo "The JDK wasn't found in directory $JAVA_HOME." 1>&2
else
cd ../..
# Grab some file descriptors.
maxfiles=`ulimit -H -n`
if [ ! $? -a "$maxfiles" != 1024 ]; then
if [ "$maxfiles" = "unlimited" ]; then
maxfiles=1025
fi
if [ "$maxfiles" -lt 1024 ]; then
ulimit -n $maxfiles
else
ulimit -n 1024
fi
fi
# Figure out how to use our shared libraries
case `uname -s` in
AIX)
if [ -n "$LIBPATH" ]; then
LIBPATH=$LIBPATH:$WL_HOME/lib/aix
else
LIBPATH=$WL_HOME/lib/aix
fi
export LIB_PATH
echo "LIBPATH=$LIBPATH"
HP-UX)
if expr "`uname -r`" : "..11..." > /dev/null 2>&1; then
hpsubdir=hpux11
elif expr "`uname -r`" : "..10..." > /dev/null 2>&1; then
hpsubdir=hpux10
fi
chmod a+x `find $WL_HOME/lib/$hpsubdir -name "*.sl" -print`
if [ -n "$SHLIB_PATH" ]; then
SHLIB_PATH=$SHLIB_PATH:$WL_HOME/lib/$hpsubdir
else
SHLIB_PATH=$WL_HOME/lib/$hpsubdir
fi
export SHLIB_PATH
echo "SHLIB_PATH=$SHLIB_PATH"
JAVA_OPTIONS="-classic $JAVA_OPTIONS"
IRIX)
if [ -n "$LD_LIBRARY_PATH" ]; then
LD_LIBRARY_PATH=$LD_LIBRARY_PATH:$WL_HOME/lib/irix
else
LD_LIBRARY_PATH=$WL_HOME/lib/irix
fi
export LD_LIBRARY_PATH
echo "LD_LIBRARY_PATH=$LD_LIBRARY_PATH"
LINUX)
if [ -n "$LD_LIBRARY_PATH" ]; then
LD_LIBRARY_PATH=$LD_LIBRARY_PATH:$WL_HOME/lib/linux
else
LD_LIBRARY_PATH=$WL_HOME/lib/linux
fi
export LD_LIBRARY_PATH
echo "LD_LIBRARY_PATH=$LD_LIBRARY_PATH"
OSF1)
if [ -n "$_RLD_LIST" ]; then
RLDLIST=$_RLD_LIST:$WL_HOME/lib/tru64unix
else
RLDLIST=$WL_HOME/lib/tru64unix
fi
export RLDLIST
echo "_RLD_LIST=$_RLD_LIST"
SunOS)
if [ -n "$LD_LIBRARY_PATH" ]; then
LD_LIBRARY_PATH=$LD_LIBRARY_PATH:$WL_HOME/lib/solaris:$WL_HOME/lib/solaris/oci816_8
else
LD_LIBRARY_PATH=$WL_HOME/lib/solaris:$WL_HOME/lib/solaris/oci816_8
fi
export LD_LIBRARY_PATH
echo "LD_LIBRARY_PATH=$LD_LIBRARY_PATH"
JAVA_OPTIONS="-hotspot $JAVA_OPTIONS"
echo "$0: Don't know how to set the shared library path for `uname
-s`. "
esac
CLASSPATH=$WL_HOME:$WL_HOME/lib/weblogic_sp.jar:$WL_HOME/lib/weblogic.jar:$WL_HOME/samples/eval/cloudscape/lib/cloudscape.jar:.
WLS_PW=weblogic
PATH=$WL_HOME/bin:$JAVA_HOME/jre/bin:$JAVA_HOME/bin:$PATH
java $JAVA_OPTIONS -classpath $CLASSPATH -Dweblogic.Domain=wenjing
-Dweblogic.Name=wenjingServer -Dbea.home=/home -Dcloudscape.system.home=/home/wlsserver6.0/samples/eval/cloudscape/data
-Djava.security.policy==/home/wlserver6.0/lib/weblogic.policy -Dweblogic.management.password=$WLS_PW
weblogic.Server
cd config/wenjing
fi
err msg:
LD_LIBRARY_PATH=/home/wlserver6.0/lib/solaris:/home/wlserver6.0/lib/solaris/oci816_8
Enter password to boot weblogic server:LD_LIBRARY_PATH=/home/wlserver6.0/lib/solaris:/home/wlserver6.0/lib/solaris/oci816_8
Starting WebLogic Server ....
<Feb 27, 2001 11:55:17 AM CST> <Notice> <Management> <Loading configuration
file ./config/wenjing/config.xml ...>
<Feb 27, 2001 11:55:19 AM CST> <Info> <Logging> <Only log messages
of severity "Error" or worse will be displayed in this window.
This can be changed at Admin Console> wenjing> Servers> wenjingServer>
Logging> Debugging> Stdout severity threshold>
<Feb 27, 2001 11:55:22 AM CST> <Emergency> <Server> <Unable to
initialize the server: 'Fatal initialization exception
Throwable: java.lang.SecurityException: Authentication for user
system denied in realm weblogic
java.lang.SecurityException: Authentication for user system denied
in realm weblogic
 at weblogic.security.acl.Realm.authenticate(Realm.java:209)
 at weblogic.security.acl.Realm.getAuthenticatedName(Realm.java:229)
 at weblogic.security.acl.internal.Security.authenticate(Security.java:113)
 at weblogic.security.SecurityService.initializeSuid(SecurityService.java:293)
 at weblogic.security.SecurityService.initialize(SecurityService.java:123)
 at weblogic.t3.srvr.T3Srvr.initialize(T3Srvr.java:343)
 at weblogic.t3.srvr.T3Srvr.run(T3Srvr.java:169)
 at weblogic.Server.main(Server.java:35)
'>
The WebLogic Server did not start up properly.
Exception raised: java.lang.SecurityException: Authentication for
user system denied in realm weblogic
java.lang.SecurityException: Authentication for user system denied
in realm weblogic
 at weblogic.security.acl.Realm.authenticate(Realm.java:209)
 at weblogic.security.acl.Realm.getAuthenticatedName(Realm.java:229)
 at weblogic.security.acl.internal.Security.authenticate(Security.java:113)
 at weblogic.security.SecurityService.initializeSuid(SecurityService.java:293)
 at weblogic.security.SecurityService.initialize(SecurityService.java:123)
 at weblogic.t3.srvr.T3Srvr.initialize(T3Srvr.java:343)
 at weblogic.t3.srvr.T3Srvr.run(T3Srvr.java:169)
 at weblogic.Server.main(Server.java:35)
Reason: Fatal initialization exception

Info about AD Domain Controller to which I'm connected

Hi,
Is there a way to find the AD Domain Controller to which I'm connected ?
Some time I find the info in these file :
/Library/Preferences/OpenDirectory/DynamicData/Active Directory/<MYDOMAIN>.plist
under 'last used server' but this field is not always populated..
Is there any other place where find or some command to use ?? (or even more info about the previous plist file and how is created/populated.. i have several Macsac on same domain but not all computers have the file populated in the same way..)
Any help appreciated
Thanks
m.

Some added toolbar and anti-virus add-ons are known to cause
Firefox issues. '''Disable All of them.'''
Type '''about:preferences#advanced'''<Enter> in the address bar.
Under '''Advanced,''' Select '''Network.'''
Look for '''Configure How Firefox Connects''' and press the '''Settings''' button.
Check the settings.
Some problems occurs when your Internet security program was set
to trust the previous version of Firefox, but no longer recognizes your
updated version as trusted. Now how to fix the problem: To allow
Firefox to connect to the Internet again;
* Make sure your Internet security software is up-to-date (i.e. you are running the latest version).
* Remove Firefox from your program's list of trusted or recognized programs. For detailed instructions, see
'''[https://support.mozilla.org/en-US/kb/configure-firewalls-so-firefox-can-access-internet Configure firewalls so that Firefox can access the Internet.]''' {web link}

Changing domain-defined Timestamp data type to logical Date doesn't persist

Hi:
Version 3.1.0.691 on Windows 7 Enterprise 64-bit SP1
I imported a domain from Designer, and then imported a schema from a database, all into the same model, in that order. I then changed the data type on several columns from non-domain, logiical Date data types to Domain-defined Timestamp Wth Time Zone data types. After having done this, I decided that I wanted to leave them as they were and tried to change them back. I went into the relational model section for each table/column and de-selected the domain radio button, chose Logical, and then set the data type to Date. I clicked apply, OK, and then saved the entire model. I closed Data Modeler, re-opened it, and then checked the data type change. I found that the change from domain to logical was saved, but the data type remained as Timestamp With Time Zone instead of remaining as Date like I'd set it. I've tried changing from Timestamp With Time Zone to other data types and then to Date but it didn't work.
Am I doing something wrong or is this a bug?
Thanks!
Doc

Hi:
One final comment. I set the domain back to unknown and clicked appy, but left the Column Properties dialog box open. I then clicked the button next to Datatype (which showed UNKNOWN{Unknown}, changed the radio button from Domain to Logical Type, and then selected Date from the list box and clicked OK. Immediately after having clicked OK, the Logical Type dialog box remained open and the Logical Type value within the Logical Type dialog box reverted back to Unknown. I re-selected Date from the list box, clicked OK, and after this second try it kept the change without the "double clutch."
Doc

Set up mail with personal domain

Hi all,
I bought a domain in Godaddy, and its working properly with outlook.
My iPhones and all other devices are working perfectly with that email setups, now Im trying to setup that account into Mail but its doesn't recognise the email.
I already follow several tutorials but none worked.
Tried several imap, smtp ports domains....
Can anyone help me or tho whom I should ask help. Apple, Godaddy or Outlook, I'm confused now after several hours of trials.

You're welcome.
And ....
try these
Apple Mail: Setting up Workspace Email
Date Submitted: 3/2/15
Apple® Mail lets you check your Workspace Email accounts on your desktop.
This article uses information from Mac OS X 10.9.5, but previous versions use similar settings.
NOTE: After adding multiple email accounts to Apple Mail, you can toggle between them using the sidebar in the left.
BEFORE YOU START: To set up Apple Mail with your email, you need to know your POP or IMAP email server settings and ports. To find them, go to the Email Setup Center and write down the information that displays under Email Server Settings.
If you cannot log in to the Email Setup Center, it's possible that you have an Office 365 email address. If you do, see Setting up Office 365 in Apple Mail.
Apple Mail 10.9 and greater will not set up POP accounts with our Workspace Email. If your account does not offer IMAP support, we recommend upgrading to an account that does, using another email client, or using our Web-based email.
To Use Apple Mail with Your Email
Launch Mail.
From the Mail menu, select Add Accounts.
Select Add Other Mail Account, and then click Continue.
Complete the following fields, and then click Create:
Field
What to do...
Full Name
Enter the name you want to display you're sending emails from.
Email Address
Enter the email address you want to use.
Password
Enter your email account's password (more info).
Complete the following fields, and then click Next:
Field
What to do...
Account Type
Select IMAP.
Mail Server
Enter the incoming IMAP server name listed in Email Setup Center.
User Name
Enter your email address.
Password
Enter your email account's password.
Complete the following fields, and then click Create:
Field
What to do...
SMTP Server
Enter the outgoing server name listed in Email Setup Center.
User Name
Enter your email address.
Password
Enter your email account's password.
That's it. Go ahead and check your email. If you don't see any messages, click Get Mail. To make sure you can send messages, try composing an email and sending it to yourself.
If you're not receiving email messages or you can't send messages, see Troubleshooting Apple Mail Setup. Don't worry. There are a few things that can happen during the setup process. We'll help you investigate and fix them.

What is the "Search Domains" setting?

In WiFi settings, what is the purpose of the "Search Domains" setting?
This doesn't seem to be covered in the user guide and I couldn't turn up anything when searching several forums.

The search domains you enter in your Network preferences are automatically appended to names you type in Internet applications. For example, if you specify the search domain apple.com, typing “store” in your web browser takes you to store.apple.com.
There's no real need to change that setting, though.

Create separate dynamic distribution groups for each UPNs domain

Hi All,
we have several UPNs in our Domain and need to create separate distribution groups for each UPNs.
the command that I used is,
new-dynamicdistributiongroup -name GroupName -RecipientFilter {(UserPrincipalName -like‘*@connect.test.local’)}
but this returns an error saying "Exception setting "RecipientFilter": "Invalid filter syntax"
what is the exact way of creating distribution group in O365 by filtering the UPN domain name?
Many thanks

Hi All,
we have several UPNs in our Domain and need to create separate distribution groups for each UPNs.
the command that I used is,
New-DynamicDistributionGroup -Name "All Students" -Alias "All_Students" -PrimarySmtpAddress "[email protected]" -RecipientFilter {(UserPrincipalName -like ‘*@connect.test.local’)}
new-dynamicdistributiongroup -name AllStudents -RecipientFilter {(UserPrincipalName -like '*@connect.test.local')}

Manage several sites

Hi, I would like to know if it is possible to create and manage several sites (with different domain, login page, etc.) from a single instance of the Oracle Portal. If not, do I have to create a new instance for each new portal?
I would really appreciate any information or location where I may find in-depth information.
Thanks in advance, Juan.

Perhaps I was not clear in my first post...
I have one MobileMe (.mac) account, which I currently have five sites hosted on. These sites were built in iWeb '08. I have had no problems with hosting multiple sites on MobileMe, so I'm not sure what you mean when you say that this is not possible.
I have built a sixth site in iWeb '09 on a different computer than my other five sites are built/stored on. I would like to publish this site to my MobileMe account as well - just add it to the roster, if you like. It has a different name than my other sites, so presumably if I sign into my MobileMe account on that computer, it would publish the site alongside the others, correct? I just don't want to publish this new site and for some reason have it delete the other five sites already being hosted.

Multiple Realms - What good are they?

If I create multiple realms in WL7 domain, how are they used by the server
to auth/auth a user? Is the default realm always used and the other realms
used only in case of failure?
Is there a way to configure an enterprise application to use a particular
realm for its auth/auth? Or do all applications always use the default
realm. It would be cool if weblogic-application.xml had a <default-realm>
element.
-Greg
Check out my WebLogic 6.1 Workbook for O'Reilly EJB Third Edition
www.amazon.com/exec/obidos/ASIN/1931822468 or www.titan-books.com

"Greg Nyberg" <greg.nyberg.at.objectpartners.com> wrote:
If I create multiple realms in WL7 domain, how are they used by the server
to auth/auth a user? I newer managed to get any more that 1 security realm active at one time. (WL 6.1)
I think it is not really possible.
Please someone prove me to be wrong.

Migrating to all 2012R2 Domain Controllers

Hello All,
I am in an environment where we have multiple sites each with its own domain controller. Each is set up with several roles which include domain controller, dns server, and dhcp server. We want to replace each domain controller including the primary domain
controller which runs the fsmo roles with new machines running server 2012R2. I have been reading a lot about the migration tool which seems pretty straight forward. My question is what would be the best way to perform such an undertaking? I was thinking promote
a new server to a dc one at a time and migrate from the old one at the site to the new one. Any advice for a newbie?
Thanks,
Dylan

Hi Dylan,
In addition to Milos’s information, providing link for migrating roles to server 2012 R2.
1. Migrate Roles and Features to Windows Server 2012 R2
2. Migrating the Server 2008 R2 FSMO DC to a Server
2012 R2 DC
Hope it helps!
Thanks.

Issue calling BPEL process in other domains

I just moved my code from the development environment to test and I found an issue where the BPEL processes can't call one another if they reside in a different domain. There's no issue in calling a BPEL process from another BPEL process if they are in the same domain, but it just doesn't work if they are in different domains. The odd thing is that I'm not getting any errors either. I looked at the BPEL admin and everything seems to be consistent with what's in the development environment where everything works, so is there somewhere else I should look? thanks in advance.

Are your domain names in lower case? There are several problems when using domain names which contain uppercase letters.
Andre

Several realms in a domain?

Similar Messages

Maybe you are looking for