Turning on security debugging in weblogic 8.1

Hi,
I was wondering if anyone knew how to turn on weblogic server debugging for the
security framework so I can get an idea of what is being done with my custom security
provider.
Thanks,
Trevor.

https://www.sys-con.com/weblogic/articleprint.cfm?id=246
Anant Kadiyala wrote:
Trevor,
Try this....
In the Server section of the config.xml, there should be a <ServerDebug> Tag.
Make the following mods (as necessary)
Name ="myTestServer"
DebugSecurityAtn="true" DebugSecurityRealm="true" DebugSecurityRoleMap="true"
Now, when you start the server next time, a bunch of <Debug> messages show up
in your console. You might want to turn this off and rotate your WebLogic.log.
WebLogic.log gets HUGE in no time!
One of the BEA articles talk about this, but can't seem to find the url at this
point.
-anant
"Trevor Nielsen" <[email protected]> wrote:
Hi,
I was wondering if anyone knew how to turn on weblogic server debugging
for the
security framework so I can get an idea of what is being done with my
custom security
provider.
Thanks,
Trevor.

Similar Messages

How can I enable remote debug in weblogic to use with Rational RSA IDE?

How can I enable the remote debugging technique so that I can work with my IDE.
I use RSA by IBM as the IDE
What should be the changes in the setdomainenv or startweblogic?
I use 10.3
Please help.. ur help is appreciable...

Hi,
I did not make any console adjustments for debugging on my WebLogic 10.3.2.0 - however I am running in development mode on an "adminServer" (an option during the install)
In the console there is a debug setup page - that seems to have no effect for me (I can always debug) - so either it is a combination of development mode and/or the startWeblogic script from the Eclipse plugin.
However, these debug settings are likely for debugging into the server - you only want to debug your own app code right?
On the console page goto
http://localhost:7001/console/console.portal?_nfpb=true&_pageLabel=ServerDebugPage
servers | AdminServer | configuration-debug | expand weblogic
I see...
"Use this page to define debug settings for this server.
Debug settings for this Server
EnableDisableClear Showing 1 to 2 of 2 Previous Next
Debug Scopes and Attributes State
default Disabled
weblogic Disabled
EnableDisableClear Showing 1 to 2 of 2 Previous Next
Try expanding the whole tree and selecting the root to enable everything.
You will see the following
10-Dec-2009 11:53:46 o'clock AM EST> <Warning> <Management> <BEA-141239> <The non-dynamic attribute DebugAbbreviation on weblogic.management.configuration.ServerDebugMBeanImpl@47a32e1b([base_domain]/Servers[AdminServer]/ServerDebug[AdminServer]) has been changed. This may require redeploying or rebooting configured entities>
<10-Dec-2009 11:53:46 o'clock AM EST> <Warning> <Management> <BEA-141238> <A non-dynamic change has been made which affects the server AdminServer. This server must be rebooted in order to consume this change.>
<10-Dec-2009 11:53:46 o'clock AM EST> <Warning> <netuix> <BEA-423420> <Redirect is executed in begin or refresh action. Redirect url is /console/console.portal?_nfpb=true&_pageLabel=ServerDebugPage.>
When I debug WebLogic 10.3.2.0 from Eclipse 3.5 EE - I see the following in my server startup log which includes the "-Xdebug -Xnoagent -Xrunjdwp:transport=dt_socket,address=8453" you mentioned.
Starting WLS with line:
c:\opt\wls10320\JROCKI~1.5-3\bin\java -jrockit -Xdebug -Xnoagent -Xrunjdwp:transport=dt_socket,address=8453,server=y,suspend=n -Djava.compiler=NONE -Xms512m -Xmx512m -Dweblogic.Name=AdminServer -Djava.security.policy=C:\opt\wls10320\WLSERV~1.3\server\lib\weblogic.policy -Xverify:none -ea -da:com.bea... -da:javelin... -da:weblogic... -ea:com.bea.wli... -ea:com.bea.broker... -ea:com.bea.sbconsole... -Dplatform.home=C:\opt\wls10320\WLSERV~1.3 -Dwls.home=C:\opt\wls10320\WLSERV~1.3\server -Dweblogic.home=C:\opt\wls10320\WLSERV~1.3\server -Dweblogic.management.discover=true -Dwlw.iterativeDev= -Dwlw.testConsole= -Dwlw.logErrorsToConsole= -Dweblogic.ext.dirs=c:\opt\wls10320\patch_wls1032\profiles\default\sysext_manifest_classpath weblogic.Server
Listening for transport dt_socket at address: 8453
The server process listening on debug portl 8453 ooks like this
Oracle WebLogic Server 11gR1 PatchSet 1 at localhost [Oracle WebLogic Launch Configuration]
     BEA JRockit(R)[localhost:8453]
          Thread [Main Thread] (Running)
          Daemon Thread [Timer-0] (Running)
          Daemon Thread [Timer-1] (Running)
          Daemon Thread [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] (Running)
          Daemon Thread [weblogic.time.TimeEventGenerator] (Running)
          Daemon Thread [JMAPI event thread] (Running)
          Daemon Thread [weblogic.timers.TimerThread] (Running)
          Daemon Thread [[ACTIVE] ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'] (Running)
          Daemon Thread [Thread-7] (Running)
          Daemon Thread [ExecuteThread: '0' for queue: 'weblogic.socket.Muxer'] (Running)
          Daemon Thread [ExecuteThread: '1' for queue: 'weblogic.socket.Muxer'] (Running)
I hit a breakpoint and see
Daemon Thread [[ACTIVE] ExecuteThread: '13' for queue: 'weblogic.kernel.Default (self-tuning)'] (Suspended (breakpoint at line 56 in ApplicationService))
     ApplicationService_5ptwty_Impl(ApplicationService).insertObjects(List<Cell>) line: 56
     NativeMethodAccessorImpl.invoke0(Method, Object, Object[]) line: not available [native method]
     NativeMethodAccessorImpl.invoke(Object, Object[]) line: 39
     DelegatingMethodAccessorImpl.invoke(Object, Object[]) line: 25
     Method.invoke(Object, Object...) line: 597
     AopUtils.invokeJoinpointUsingReflection(Object, Method, Object[]) line: 310
     ReflectiveMethodInvocation.invokeJoinpoint() line: 182
     ReflectiveMethodInvocation.proceed() line: 149
     DelegatingIntroductionInterceptor.doProceed(MethodInvocation) line: 131
     DelegatingIntroductionInterceptor.invoke(MethodInvocation) line: 119
     ReflectiveMethodInvocation.proceed() line: 171
     MethodInvocationVisitorImpl.visit() line: 37
     EnvironmentInterceptorCallbackImpl.callback(MethodInvocationVisitor) line: 55
     EnvironmentInterceptor.invoke(MethodInvocation) line: 50
     ReflectiveMethodInvocation.proceed() line: 171
     ExposeInvocationInterceptor.invoke(MethodInvocation) line: 89
     ReflectiveMethodInvocation.proceed() line: 171
     DelegatingIntroductionInterceptor.doProceed(MethodInvocation) line: 131
     DelegatingIntroductionInterceptor.invoke(MethodInvocation) line: 119
     ReflectiveMethodInvocation.proceed() line: 171
     JdkDynamicAopProxy.invoke(Object, Method, Object[]) line: 204
     $Proxy68.insertObjects(List) line: not available
     ApplicationService_5ptwty_ApplicationServiceLocalImpl.insertObjects(List<Cell>) line: 306
     FrontController.generateGlider(PrintWriter) line: 240
thank you
/michael
http://www.eclipselink.org

When I try to go to a a game on facebook and try to turn off security, I says that the page is being directed in such a way that it would not complete. This is constant. Can you help me?

When I log into facebook it takes me to the https version and not http. the https version is secure and when you play a game it will ask if you want to termporarily turn the secure feature off. When I do I consistantly get a message that says they (I don't know if it is you or facebook, but it's a firefox message) cannot do this as it was being directed in such a manner that it would not complete. I have to go back to the main facebook page and redo whatever many times before it will do it correctly. Once I get into the http end, as long as I do not log off facebook, I won't have the issue. But, if I logout of facebook, I have to go through the process repeatedly. I wish I could get my acct back to http and not https, but facebook's help is useless.

This issue can be caused by corrupted cookies.
"Remove Cookies" from sites causing problems:
* Tools > Options > Privacy > Cookies: "Show Cookies"
*http://support.mozilla.com/kb/Cookies
*http://support.mozilla.com/kb/Deleting+cookies
*http://kb.mozillazine.org/Cookies

How to use security roles in Weblogic server?

Hello Gurus,
I am new to Weblogic server and I am trying to investigate how to make
use of security roles in weblogic server (5.1.0). Can anyone point me
to some documentation. Specifically, I am looking for instance level,
and method level security and how to use it.
Thanks for taking your time to read this e-mail.
Thank You all in advance,
Hari.

You should read the security information in the Servlet 2.2 specification
that WL 5.1 implements:
http://java.sun.com/products/servlet/download.html
Chapter 11 deals with declarative and programmatic security, and includes a
section on roles:
11.4 Roles
A role is an abstract logical grouping of users that is defined by the
Application Developer or
Assembler. When the application is deployed, these roles are mapped by a
Deployer to security
identities, such as principals or groups, in the runtime environment.
A servlet container enforces declarative or programmatic security for the
principal associated with
an incoming request based on the security attributes of that calling
principal. For example,
1. When a deployer has mapped a security role to a user group in the
operational environment. The
user group to which the calling principal belongs is retrieved from its
security attributes. If the
principal's user group matches the user group in the operational environment
that the security
role has been mapped to, the principal is in the security role.
2. When a deployer has mapped a security role to a principal name in a
security policy domain, the
principal name of the calling principal is retrieved from its security
attributes. If the principal is
the same as the principal to which the security role was mapped, the calling
principal is in the
security role.
Cameron Purdy
http://www.tangosol.com
"Hari" <[email protected]> wrote in message
news:[email protected]..
Hello Gurus,
I am new to Weblogic server and I am trying to investigate how to make
use of security roles in weblogic server (5.1.0). Can anyone point me
to some documentation. Specifically, I am looking for instance level,
and method level security and how to use it.
Thanks for taking your time to read this e-mail.
Thank You all in advance,
Hari.

Can't update iOS 8 on my iPhone5 through iTunes on Windows 8 (error 3004, 3194). Updated host file, opened port 80, 443; turned off security system and firewall, etc. But nothing works. How to solve this problem?

Can't update iOS 8 on my iPhone5 through iTunes on Windows 8 (error 3004, 3194). Updated host file, opened port 80, 443; turned off security system and firewall, etc. But nothing works. How to solve this problem?

Hi the_mad_movies,
It seems like this article will be the best option for addressing this issue:
Error 3194, Error 17, or "This device isn't eligible for the requested build"
http://support.apple.com/kb/ts4451
Thanks for coming to the Apple Support Communities!
Cheers,
Braden

Create , delete "security roles" in weblogic console - sample Security providers

Hi Everyone:
Weblogic gave out sample Security Providers for version 7.0 and 8.1. In
those sample Security Provider , the author of codes used property files as
Security Providers Database, however he/she didn't show how to create a
Manageable Sample Role Mapping Provider or Manageable Sample Authentication
Provider, so Administrator of weblogic console can create and delete
"security roles" in weblogic console.
Have anyone known how to do that?
Ming Qin

"ming qin" <[email protected]> wrote in message news:[email protected]..
Hi Everyone:
Weblogic gave out sample Security Providers for version 7.0 and 8.1.In
those sample Security Provider , the author of codes used property filesas
Security Providers Database, however he/she didn't show how to create a
Manageable Sample Role Mapping Provider or Manageable SampleAuthentication
Provider, so Administrator of weblogic console can create and delete
"security roles" in weblogic console.
Have anyone known how to do that?
I would ask in the weblogic.developer.interest.management.console newsgroup.
>
Ming Qin

How do i turn off secure browsing

how do i turn off secure browsing in firefox 7?
some sites give me an error and wont show the full content because its on.

Do you mean that you get an untrusted error page because of a certificate problem?
* https://support.mozilla.com/kb/Secure+Connection+Failed
Which particular error do you get?
Can you attach a screenshot?
*http://en.wikipedia.org/wiki/Screenshot
Use a compressed image type like PNG or JPG to save the screenshot and make sure that you do not exceed the maximum file size (1 MB).

Setting secure flag on weblogic (5.1) session cookie.

Hello All,
          I need to set secure flag on weblogic session cookie. I am not able to
          find any property in weblogic.properties file to set the secure flag for
          session cookie.
          Does anybody has any idea how to achieve this.?
          Thanks
          Nitin


The best way to reduce GC is to change you application to use less memory. Serious.
There are a number of JVM options for GC. I can't tell you what will work best
for your application.
25 seconds is way too long for a GC. Is the OS paging? You may wish to invest
in additional memory.
Mike Reiche
vijendran <[email protected]> wrote:
Hi,
I am running a load test which will simulate 100 users. when i tried
to simulate i found that GC is happening often even though i set the
heap to 512 MB., and that too some time it takes upto 25 secs. for a
GC to complete. Please advise on how to increase the performance for
more number of users (without clustering weblogic) and to avoid GC happening
often.
Regards
Vijendran

Embedded OC4J Server - Turn off BC4J debugging

Hi all,
I am just switching over from Eclipse(Rational RAD) to JDeveloper and using BC4J. I am struggling a bit with the embedded server under 10.1.2. The console messages roll off the top. Argh.. I want to shut down as much unnecessary logging as possible. BC4J put MANY messages out there. I see a reference to adding -Djbo.debugoutput to the start command in order to turn off the debugging messages. I cannot find where the embedded server is started. It is NOT started from C:\jdev1012\jdev\bin\start-oc4j.bat. Can anyone help with this?
Thanks,
--Amy Smith

Only reason for 10.1.2 is that I just joined the company 6 weeks ago and they had not upgraded to 10.1.3. I very much want to do that but was left with some work that was overdue and can't take the time right now as I understand there are some differences that may make migration difficult...
Sigh ... I am missing IDE functionality from Eclipse that is in 10.1.3.
...Thanks for the help
---Amy

Conf. a Win2K Security Realm on WebLogic

     Hi! I'm having some problems configuring a security realm in WebLogic
server 6.0sp1.
     I'd like that WebLogic use the Windows2000 security realm as the
default security (it can be used as the secondary security realm
if it's the only way).
We've been trying to make it work for the last two (business) days
with no hope of being successfull at all.
     We are using the BEA documentation 'Managing Security' as reference,
and we have some doubts about what's in there.
First doubt:     The documentation says that we need to create new
security realm of the type Windows NT. OK, we did it. But we are
not sure about how to fill the filed Primary Domain. The documentation
says to put the host and port of the computer where User and Groups
are defined for the NT domain. I'm using the same computer for
both (NT domain and Web Logic), so I put the host name (babalu).
Wich port should I put?
Second doubt:     The documentation says to create a systerm user on
the NT domain using NT administrative tools, names it 'system'
and set some stuff for it. But windows 2000 already has a user
with that name (SYSTE, but capitalized) and the property that I
should set on it doesn't exist! By the way, on the system user
user that windows2000 has I wasn't able to set any property.
Last doubt (maybe should be the first one) : Does WebLogic 6.0sp1
support Security Realms from Windows 2000? Or I need to download
another plugin or somethign like that?
     Thanks for Reading and (hope) Answering my qusetions!
Roberto Giordano Barra

Hi! Thanks for the answer. I'll try to run WebLogic as a service.
In fact, I tried it before but I wasn't able to. I started the
service by hand, but I wasn't able to access the server. So, I
click on the 'remove web logic as service'(something like that)
in the WebLogic program group. Ok, it was removed. But when I tried
to put it back I didn't find no funny button to help me! Could
you help me with that?
Another thing. If I use NT Realm as a Caching Realm I'll be
able to see the NT user and users groups with the Web Logic management
GUI ?
Thanks once again,
Roberto Giordano Barra
"arthur" <[email protected]> wrote:
>
Hi,
By saying win2k I am assuming you mean creating an NT
realm.
Do not bother specifying a port, just put the server name.
You have to ensure that you are running the weblogic server
as
a NT service if you want to use the NTrealm.
Make sure under Caching Realm you specify the NTrealm.
That should be it.
Hope this helps.
Regards,
-Arthur
"Roberto Giordano Barra" <[email protected]> wrote:
     Hi! I'm having some problems configuring a security
realm in WebLogic
server 6.0sp1.
     I'd like that WebLogic use the Windows2000 securityrealm
as the
default security (it can be used as the secondary security
realm
if it's the only way).
We've been trying to make it work for the last two (business)
days
with no hope of being successfull at all.
     We are using the BEA documentation 'Managing Security'
as reference,
and we have some doubts about what's in there.
First doubt:     The documentation says that we need to create
new
security realm of the type Windows NT. OK, we did it.
But we are
not sure about how to fill the filed Primary Domain.The
documentation
says to put the host and port of the computer where User
and Groups
are defined for the NT domain. I'm using the same computer
for
both (NT domain and Web Logic), so I put the host name
(babalu).
Wich port should I put?
Second doubt:     The documentation says to create a systerm
user on
the NT domain using NT administrative tools, names it
'system'
and set some stuff for it. But windows 2000 already has
a user
with that name (SYSTE, but capitalized) and the property
that I
should set on it doesn't exist! By the way, on the system
user
user that windows2000 has I wasn't able to set any property.
Last doubt (maybe should be the first one) : Does WebLogic
6.0sp1
support Security Realms from Windows 2000? Or I needto
download
another plugin or somethign like that?
     Thanks for Reading and (hope) Answering my qusetions!
Roberto Giordano Barra

Secure JSESSIONID for Weblogic running HTTP behind load balancers

We run multiple Weblogic application servers behind a load balancer. We use an SSL accelerator to avoid encrypt/decrypt functions on the CPUs hosting Weblogic. Our Weblogic servers are running version 10.3.
Here is my conundrum:
1) For security purposes, we want the cookie JSESSIONDID to be secure.
2) Weblogic doesn't seem to want to allow me to set this secure flag as there is no HTTPS on Weblogic.
3) Network performance dictates that we don't want to run weblogic using https.
Any suggestions to get JSESSIONID set as secure and http-only on a Weblogic server that is not running https?
Thanks.

We run multiple Weblogic application servers behind a load balancer. We use an SSL accelerator to avoid encrypt/decrypt functions on the CPUs hosting Weblogic. Our Weblogic servers are running version 10.3.
Here is my conundrum:
1) For security purposes, we want the cookie JSESSIONDID to be secure.
2) Weblogic doesn't seem to want to allow me to set this secure flag as there is no HTTPS on Weblogic.
3) Network performance dictates that we don't want to run weblogic using https.
Any suggestions to get JSESSIONID set as secure and http-only on a Weblogic server that is not running https?
Thanks.

TS1398 Ipod touch won't and never did connect. Turned off security to router. Went through troubleshooting list. Circle lines seem as if trying to connect. IP adress is obtained. Never does connect in a usable way??????????????????????????????????????????

Ipod touch won't and never did connect. Turned off security to router. Went through troubleshooting list. Circle lines seem as if trying to connect. IP adress is obtained. Never does connect in a usable way??????????????????????????????????????????????

Does the ext directory have the php_oci8.dll? In the original steps the PHP dir is renamed. In the given php.in the extension_dir looks like it has been updated correctly. Since PHP distributes php_oci8.dll by default I reckon there would be a very good chance that the problem was somewhere else. Since this is an old thread I don't think we'll get much value from speculation.
-- cj

Help reqd to config.Eclipse + Lombaz for debugging on Weblogic 8.1

By: c srini
Help-Eclipse Lombaz config -debug on Weblogic [ reply ]
2005-07-12 21:31
Require help to configure my project in Eclipse with Lmbaz onto Weblogic 8.1.
Following is a brief scenario of my problem:
I have an existing web-based project that i need to import into Eclipse.
I have Eclipse 3.0 and Lombaz 3.0.1. I use this with Weblogic 8.1, JDK 1.4.2 and Ant.
My project requires some environment xml files to be loaded and i have them set in the classpath.
I am unable to import the project and start it in the remote debugging perspective.
Can you please help me import my project into Eclipse and to use Eclipse with Lombaz for debugging on Weblogic?
The following is a part of what i have in my build file.
This shows the diorectory structure as it exists in my project and the build directories(from which the war is created)
<property name="src-root" value="C:/my-project" />
<javac srcdir="${src-root}/src"
<target name="copyfiles" depends="init">
<fileset dir="${src-root}/js" >
<fileset dir="${src-root}/css" >
<fileset dir="${src-root}/images" >
<fileset dir="${src-root}/html" >
<fileset dir="${src-root}/jsp" >
<fileset dir="${src-root}/letters" >
<fileset dir="${src-root}/envXML" >
<copy todir="${build}/WEB-INF" >
<fileset dir="${src-root}/DD" >
</fileset>
</copy>
<copy todir="${build}/WEB-INF" >
<fileset dir="${src-root}/tld" >
</fileset>
</copy>
<target name="init">
<mkdir dir="${build}" />
<mkdir dir="${build}/css" />
<mkdir dir="${build}/js" />
<mkdir dir="${build}/images" />
<mkdir dir="${build}/template" />
<mkdir dir="${build}/RMDEnv" />
<mkdir dir="${build}/RMDTemp" />
<mkdir dir="${build}/RMDLog" />
<mkdir dir="${build}/RMDLog/AppLog" />
<mkdir dir="${build}/RMDLogLog/DebugLog" />
<mkdir dir="${build}/WEB-INF" />
<mkdir dir="${build}/WEB-INF/classes" />
<mkdir dir="${build}/WEB-INF/lib" />

</target>

good that you posted the SoniqMQ params.
You have configured WLS to look for the Local JNDI names in the MQ params.
You need to use
"SonicMQSampleQ1" for destination-jndi-name
AND
"SonicMQQueueConnectionFactory" for connection-factory-jndi-name
Hope this helps.
Thanks and regards,
Pazhanikanthan. P

Help please - I can't update my ipad software as always get network connections issues - have turned off security!!

help please - I can't update my ipad software as always get network connections issues - have turned off security!!

I would try updating through a computer. Just make sure that your computer has the latest itunes

Trying to turn off "secure browsing" when I go to FaceBook to play games. This problem started after updating FF.

When I go to FaceBook to play games, FF will ask me if I want to "turn off secure browsing." Yes or I can't play the games. However, it will not let me do a thing except browse the site in "secure browsing" mode. I never had this problem until I updated FF. I have to us IE to play games on FB now. I hate IE. It's so slow and a pain in the backside.
Thanks
Rhea Krussell

In the upper right hand corner of facebook, 1. click the drop down menu next to home. 2. Click on 'Account Settings' from the menu. Now, on the right side, 3. click the option 'Security'. 4. The option to turn off secure browsing will be the second on down on the list in the main part of your screen. Hope this helps.

Turning on security debugging in weblogic 8.1

Similar Messages

Maybe you are looking for