Unlocking user in RDBMS realm of portal

Hi All,
Does any body know where the information of a user being locked is stored in case
oif RDBMS Realm ? In portal server, some user is locked b'coz of wrong password
and I tried unlocking from weblogic console, but didn't work. Does any body having
any idea on this ?
Any suggestion is welcome.
TIA,
Sudarson

Similar Messages

Problem creating user in RDBMS realm Using com.bea.wlpi.rdbmsrealm.RDBMSRealm

Hi,
I am currently using WLI 2.0 SP2 installation. Here is a very unusual thing I
noticed. Can somebody tell me what is going on ???
1 : I have set up the security realm as indicated in the config.xml file. As far
as I understand, the caching realm entry has attribute pointing to the wlpiRDBMSRealm,
which is a RDBMS implementation from the WLI 2.0 SP2 distribution.
2: I start the server, open the WLS console, and create a new user through the
console. I get no error message and it seems to work fine. ( I also click on the
save it to database link, and it returns with msg that cache is refreshed ).
3: I see an entry in the fileRealm.properties file, but no record is inserted
in the WLSUSER table in the database.
Since the RDBMS realm (from WLI distribution) is defined as basic
realm implementation, should it not insert entry into the database, instead of
the file realm.
Is this a general problem ( any RDBMS realm ) or is it specific to the WLI ?
Is there anything that I have not configured here that is causing this behavior
Is it just refreshing the cache instead of inserting record in DB ?
Why should it insert entry into fileRealm.properties ?
Thanks,
Girish
[noaa1.zip]

Hi,
I turned on the caching realm through the WLS Console, (Security).
After this I get a very unusual error, which seems to be comming
from the RDBMS implementation class (from WLI 2.0 SP2 distribution).
Here is the msg that I get while WLS server boots (the WLS server boots ok, but
WLPI does not initialize) ....
Unable to initialize WebLogic Process Integrator:
SQL Exception: ResultSet not open, operation 'next' not permitted. Verify that
autocommit is OFF.
at c8e.k.j.l_(Unknown Source)
at c8e.k.j.l_(Unknown Source)
at c8e.k.j.j_(Unknown Source)
at c8e.k.n.checkIfClosed(Unknown Source)
at c8e.k.n.movePosition(Unknown Source)
at c8e.k.n.movePosition(Unknown Source)
at c8e.k.n.next(Unknown Source)
at com.bea.wlpi.rdbmsrealm.RDBMSDelegate.getGroup(RDBMSDelegate.java:425)
at com.bea.wlpi.rdbmsrealm.RDBMSRealm.getGroup(RDBMSRealm.java:235)
at weblogic.security.acl.CachingRealm.getGroup(CachingRealm.java:1120)
at weblogic.ejb20.deployer.SecurityRoleMapping.lookupPrincipal(SecurityRoleMapping.java:243)
at weblogic.ejb20.deployer.SecurityRoleMapping.getSecurityRolePrincipals(SecurityRoleMapping.java:96)
at weblogic.ejb20.deployer.SecurityRoleMapping.getSecurityRolePrincipals(SecurityRoleMapping.java:128)
at weblogic.ejb20.deployer.SecurityRoleMapping.isPrincipalInAnyRole(SecurityRoleMapping.java:174)
at weblogic.ejb20.deployer.MethodInfoImpl.checkAccess(MethodInfoImpl.java:214)
at weblogic.ejb20.internal.MethodDescriptor.checkAccess(MethodDescriptor.java:285)
at weblogic.ejb20.internal.BaseEJBObject.preInvoke(BaseEJBObject.java:90)
at weblogic.ejb20.internal.StatelessEJBObject.preInvoke(StatelessEJBObject.java:55)
at com.bea.wlpi.server.plugin.PluginManagerCfgBeanEOImpl.init(PluginManagerCfgBeanEOImpl.java:1301)
at com.bea.wlpi.server.initlistener.InitListenerBean.onMessage(InitListenerBean.java:151)
at weblogic.ejb20.internal.MDListener.execute(MDListener.java:221)
at weblogic.ejb20.internal.MDListener.onMessage(MDListener.java:175)
at weblogic.jms.client.JMSSession.onMessage(JMSSession.java:1933)
at weblogic.jms.client.JMSSession.execute(JMSSession.java:1892)
at weblogic.kernel.ExecuteThread.execute(ExecuteThread.java:137)
at weblogic.kernel.Kernel.execute(Kernel.java:250)
at weblogic.jms.client.JMSSession.pushEnvelope(JMSSession.java:1779)
at weblogic.jms.client.JMSCallback.pushEnvelope(JMSCallback.java:69)
at weblogic.jms.frontend.FESession.execute(FESession.java:1972)
<Aug 22, 2001 11:56:01 AM MDT> <Notice> <WebLogicServer> <WebLogic Server started>
at weblogic.kernel.ExecuteThread.execute(ExecuteThread.java:137)
at weblogic.kernel.ExecuteThread.run(ExecuteThread.java:120)
--------------- nested within: ------------------
com.bea.wlpi.rdbmsrealm.RDBMSException: caught SQL exception - with nested exception:
[SQL Exception: ResultSet not open, operation 'next' not permitted. Verify that
autocommit is OFF.]
at com.bea.wlpi.rdbmsrealm.RDBMSRealm.getGroup(RDBMSRealm.java:242)
<Aug 22, 2001 11:56:01 AM MDT> <Notice> <WebLogicServer> <ListenThread listening
on port 7101>
at weblogic.security.acl.CachingRealm.getGroup(CachingRealm.java:1120)
at weblogic.ejb20.deployer.SecurityRoleMapping.lookupPrincipal(SecurityRoleMapping.java:243)
at weblogic.ejb20.deployer.SecurityRoleMapping.getSecurityRolePrincipals(SecurityRoleMapping.java:96)
at weblogic.ejb20.deployer.SecurityRoleMapping.getSecurityRolePrincipals(SecurityRoleMapping.java:128)
at weblogic.ejb20.deployer.SecurityRoleMapping.isPrincipalInAnyRole(SecurityRoleMapping.java:174)
at weblogic.ejb20.deployer.MethodInfoImpl.checkAccess(MethodInfoImpl.java:214)
at weblogic.ejb20.internal.MethodDescriptor.checkAccess(MethodDescriptor.java:285)
at weblogic.ejb20.internal.BaseEJBObject.preInvoke(BaseEJBObject.java:90)
at weblogic.ejb20.internal.StatelessEJBObject.preInvoke(StatelessEJBObject.java:55)
at com.bea.wlpi.server.plugin.PluginManagerCfgBeanEOImpl.init(PluginManagerCfgBeanEOImpl.java:1301)
at com.bea.wlpi.server.initlistener.InitListenerBean.onMessage(InitListenerBean.java:151)
at weblogic.ejb20.internal.MDListener.execute(MDListener.java:221)
at weblogic.ejb20.internal.MDListener.onMessage(MDListener.java:175)
at weblogic.jms.client.JMSSession.onMessage(JMSSession.java:1933)
at weblogic.jms.client.JMSSession.execute(JMSSession.java:1892)
at weblogic.kernel.ExecuteThread.execute(ExecuteThread.java:137)
at weblogic.kernel.Kernel.execute(Kernel.java:250)
at weblogic.jms.client.JMSSession.pushEnvelope(JMSSession.java:1779)
at weblogic.jms.client.JMSCallback.pushEnvelope(JMSCallback.java:69)
at weblogic.jms.frontend.FESession.execute(FESession.java:1972)
at weblogic.kernel.ExecuteThread.execute(ExecuteThread.java:137)
at weblogic.kernel.ExecuteThread.run(ExecuteThread.java:120)
"Girish Gupte" <[email protected]> wrote:
>
>
>
Hi,
I am currently using WLI 2.0 SP2 installation. Here is a very unusual
thing I
noticed. Can somebody tell me what is going on ???
1 : I have set up the security realm as indicated in the config.xml file.
As far
as I understand, the caching realm entry has attribute pointing to the
wlpiRDBMSRealm,
which is a RDBMS implementation from the WLI 2.0 SP2 distribution.
2: I start the server, open the WLS console, and create a new user through
the
console. I get no error message and it seems to work fine. ( I also click
on the
save it to database link, and it returns with msg that cache is refreshed
3: I see an entry in the fileRealm.properties file, but no record is
inserted
in the WLSUSER table in the database.
Since the RDBMS realm (from WLI distribution) is defined as basic
realm implementation, should it not insert entry into the database, instead
of
the file realm.
Is this a general problem ( any RDBMS realm ) or is it specific to the
WLI ?
Is there anything that I have not configured here that is causing this
behavior
Is it just refreshing the cache instead of inserting record in DB ?
Why should it insert entry into fileRealm.properties ?
Thanks,
Girish

Creating New Users for RDBMS realm

I am currently creating new users in the RDBMS realm
by an EJB that will insert into the "Users" table. Is this
the correct way to create users or should I be calling
methods on classes in examples.security.RDBMSRealm?
Thanks
Bill.

Thanks a lot for the guideline.
I can able to create multiple users using Import option of the user administration but i have one more question regarding the same.
What about the password setting of these newly created users. Or can the set the password field in test file?? Because when we export the user, it is not showing any Password field.
Thanks & Regards,
Prashant

Creating Users with RDBMS realm

"I am currently creating new users in the RDBMS realm by an EJB that inserts into

<BLOCKQUOTE><font size="1" face="Verdana, Arial">quote:</font><HR>Originally posted by [email protected]:
Ralf,
Your syntax looks right so it migth be something else. Could you please post the full example and I'll try it out here.<HR></BLOCKQUOTE>
Sure:
<?xml version = '1.0' standalone = 'yes'?>
<SimpleUser>
<UserName>eclark</UserName>
<Password>ifs</Password>
<DistinguishedNameSuffix>.ambiguity.com</DistinguishedNameSuffix>
<AdminEnabled>false</AdminEnabled>
<HomeFolderRoot>/home</HomeFolderRoot>
<EmailAddressSuffix>@ambiguity.com</EmailAddressSuffix>
<PrimaryUserProfileAcl refType="name">Private</PrimaryUserProfileAcl>
</SimpleUser>
Without the PrimaryUserProfileAcl-Tag, the example works fine and the user is created; but when including the tag, I get the 21000-Error. Our iFS-version is 1.0.8, maybe it's a bug that is fixed in version 1.1?

Portal Users using server realm

Does anyone know to config users in server realm for portal?
many thanks!

"Cat Wong" <[email protected]> wrote:
>
Does anyone know to config users in server realm for portal?
many thanks!Trying adding this line to your start weblogic script
set JAVA_OPTIONS=%JAVA_OPTIONS% -Dcom.bea.p13n.usermgmt.AuthenticationProviderName=beaAuthenticator
where beaAuthenticator is your custom authentication provider.
Andy

Delegated User Admin with only UNLOCK USER Permission.

Hi
i need to create a Delegated User Adminwho will have only UNLOCK USER Action Permission in the Portal UME.
I tried the UME Action UME.Manage_User_Passwords
but it contains LOCK Permission also.
Is there any action to acheive this ?
Regards
Rajendra

Rajendrakumar,
You are correct! The option provided by me is not applicable for EP 7.0.
Still you have options to implement the required functionalities:
You can implement the portal component or Webdynpro application for unlocking users. Use UME API for this.
or
Try to Export the unlock user component from a EP 6.0 Environment and import it into EP 7.0.
Ram

RDBMS Realm - Locking users

I am using the Rdbms Realm to control the access to my servlets.
Does anyone know how can I lock a user when he reach the maximum numbers of
retries ?
Thanks in advance
Alejandro

a> Does anyone know how can I lock a user when he reach the maximum
a> numbers of retries ?
You'll need to customise the RDBMS realm so that it keeps track of
this information for you.
<b

Not caching user in caching realm

Hi
Using Rdbms realm and have enabled caching with the
weblogic.security.realm.cache.user.size=121
weblogic.security.realm.cache.tt.positive=500
I have set a method be accessed by particular group/role as part of that i am doing
BasicRealm realm = Security.getRealm();System.out.println("the class is " + realm.getClass());
Enumeration users = ((CachingRealm)realm).getUsers();
while(users.hasMoreElements()) {
system.out.println("user name is" + users.nextElement().getName());
As expected the realm name is CachingRealm but the user name are system,everyone and guest.Why its not printing any other
username

I am having the same problem. I thought i have specified all the caching properties
except the TTL stuff. I though i would use the default for the TTL. Can u please
post me what properties you set to make it work.
regards,
Jegan
"Nirmala" <[email protected]> wrote:
>
I have added all the caching properties in the properties
Now its able to cache user
thanks
Nirmala
"Nirmala" <[email protected]> wrote:
Hi
Using Rdbms realm and have enabled caching with the
weblogic.security.realm.cache.user.size=121
weblogic.security.realm.cache.tt.positive=500
I have set a method be accessed by particular group/role as part of thati am doing
BasicRealm realm = Security.getRealm();System.out.println("the class is" + realm.getClass());
Enumeration users = ((CachingRealm)realm).getUsers();
while(users.hasMoreElements()) {
system.out.println("user name is" + users.nextElement().getName());
As expected the realm name is CachingRealm but the user name are system,everyoneand guest.Why its not printing any other
username

Updating one user in Caching realm

Hi,
I am wondering if it is possible at all to update only one user in the cache,
or is it only possible to update the whole cache?
Thank you in advance,
Rolle

I am having the same problem. I thought i have specified all the caching properties
except the TTL stuff. I though i would use the default for the TTL. Can u please
post me what properties you set to make it work.
regards,
Jegan
"Nirmala" <[email protected]> wrote:
>
I have added all the caching properties in the properties
Now its able to cache user
thanks
Nirmala
"Nirmala" <[email protected]> wrote:
Hi
Using Rdbms realm and have enabled caching with the
weblogic.security.realm.cache.user.size=121
weblogic.security.realm.cache.tt.positive=500
I have set a method be accessed by particular group/role as part of thati am doing
BasicRealm realm = Security.getRealm();System.out.println("the class is" + realm.getClass());
Enumeration users = ((CachingRealm)realm).getUsers();
while(users.hasMoreElements()) {
system.out.println("user name is" + users.nextElement().getName());
As expected the realm name is CachingRealm but the user name are system,everyoneand guest.Why its not printing any other
username

Disscuss of using RDBMS Realm

Hi,
Now maybe eveyone knows that the RDBMS Realm provided by weblogic 6.0 isn't production
ready, and miss some functions, for examples, change password, or add group no.
It is suprised for me that weblogic didn't support these basic functions of RDBMSRealm
and didn't provide suitable documentation for implementing this RDBMS Realm.
So I ask for help that if everyone know how to implement one function: changeCredential.
I know the weblogic.management.configuration.Uer object has this method (User.changeCredential(oldPass,
newPass)). I know I have to provide one additional database schema for updating
user password. I know I should add a method in the RDBMSDelegate and RDBMSRealm
classes. But I don't the suitable method signature, and couldn't find internal
method call when the user click the "change" button changing password in the Console.
Thank you very much for any idea or help. Also I'd like to deeply discuss other
security issues.
Is any project use the RDBMS realm?
By the way, if anyone try to directly update the database tables as a means to
implement this issues. I have tried this approach, and it seems work fine except
for some catching delay. Can anyone tell me if this is an effective method?
Thx

This RDBMS Realm issue is really bother me too. I was wondering if anyone use the
RDBMS Realm for production. it is difficult to find what the architecture the
RealmMBean object and RealmManager is. Any idea let me know. Good luck.
"andy Zhong" <[email protected]> wrote:
>
Hi,
Now maybe eveyone knows that the RDBMS Realm provided by weblogic 6.0
isn't production
ready, and miss some functions, for examples, change password, or add
group no.
It is suprised for me that weblogic didn't support these basic functions
of RDBMSRealm
and didn't provide suitable documentation for implementing this RDBMS
Realm.
So I ask for help that if everyone know how to implement one function:
changeCredential.
I know the weblogic.management.configuration.Uer object has this method
(User.changeCredential(oldPass,
newPass)). I know I have to provide one additional database schema for
updating
user password. I know I should add a method in the RDBMSDelegate and
RDBMSRealm
classes. But I don't the suitable method signature, and couldn't find
internal
method call when the user click the "change" button changing password
in the Console.
Thank you very much for any idea or help. Also I'd like to deeply discuss
other
security issues.
Is any project use the RDBMS realm?
By the way, if anyone try to directly update the database tables as a
means to
implement this issues. I have tried this approach, and it seems work
fine except
for some catching delay. Can anyone tell me if this is an effective method?
Thx

Groups within groups in RDBMS Realm

I can see how the supplied RDBMS Realm schema supports groups that contain
groups: you simply store a group name as the gm_member field in the
groupmembers table.
Does weblogic or the RDBMS Realm implementation in particular provide any
special support for the concept of nested groups? What I mean is, I want to
make a call like isUserInGroup(String userName, String groupName) and get
back true if the user is either in the specified group or is in some group
that is nested inside of the specified group.
I can write my own little routine to recursively expand the groupmembers and
determine if the user is contained in the specified group, but I wonder if
that is reinventing the wheel.
Thanks!

Thanks for the helpful response, Terry! That was exactly the info I needed.
John
Terry <[email protected]> wrote in message
news:[email protected]..
RDBMSGroup's isMember method is inherited from the FlatGroup class, theAPI
of which is athttp://www.weblogic.com/docs51/classdocs/javadocs/index.html.
I quote
isMember
public boolean isMember(java.security.Principal member)
Returns true if the passed principal is a member of the group. This method
does a recursive search, so if a principal belongs to a group which is a
member of this group, true is returned.
So it looks like somebody already thought of that 'wheel' thing you were
talking about, and you don't have to bother
terry
John Lindwall <[email protected]> wrote in message
news:3a67b151$[email protected]..
I can see how the supplied RDBMS Realm schema supports groups that
contain
groups: you simply store a group name as the gm_member field in the
groupmembers table.
Does weblogic or the RDBMS Realm implementation in particular provideany
special support for the concept of nested groups? What I mean is, Iwant
to
make a call like isUserInGroup(String userName, String groupName) and
get
back true if the user is either in the specified group or is in somegroup
that is nested inside of the specified group.
I can write my own little routine to recursively expand the groupmembersand
determine if the user is contained in the specified group, but I wonder
if
that is reinventing the wheel.
Thanks!

Security realm, WebLogic Portal 7.0 and Windows NT 4.0

Hello!
My name is Miriam Serrano i and I write to request aid.
I am working with WebLogic Portal version 7.0 and I need to make a Security realm
with
Windows NT 4.0 server.
In the console of weblogic if I see the NT users ,
but when I want to make enter the application of stockportal
single access with administrators and not with the other users
of the Portal groups, as I can enter with NT groups?
as I can make the security realm with Portal(users and groups)
and windows NT 4.0? exists a document?
it already makes the procedures of Security Realm with Windows NT?
but as I bind with Weblogic Portal to it?
Can I help me?
thanks

Hello!
My name is Miriam Serrano i and I write to request aid.
I am working with WebLogic Portal version 7.0 and I need to make a Security realm
with
Windows NT 4.0 server.
In the console of weblogic if I see the NT users ,
but when I want to make enter the application of stockportal
single access with administrators and not with the other users
of the Portal groups, as I can enter with NT groups?
as I can make the security realm with Portal(users and groups)
and windows NT 4.0? exists a document?
it already makes the procedures of Security Realm with Windows NT?
but as I bind with Weblogic Portal to it?
Can I help me?
thanks

If user locked (backend) then from portal i m not able to send data

If user locked (backend) then from portal i m not able to send data
both user are same in front end and backend.
But once user is unlocked i am able to send data from portal to backend...
Regards
Ruturaj

Hi
Since you are in CUA landscape(as u said portal and r3 user are same) unless and utill you unlock it data will not be process.
[Help|What's the right user to access;
BR
Satish Kumar

How to setup RDBMS Realm.

Hi
Can some one tell me the basic steps to setup RDBMS Realm for resouces like
pool, Servlets and EJB. I am trying to use the weblogic example code.
Thanks in advance!!!
jtaneja

Please look into the previous posting of yours.
-utpal
"Amit" <[email protected]> wrote in message
news:[email protected]..
>
Hi,
I want to store user id, password, roles in the DB tables and providewebbased
forms to create/modify user.
How do I implement security relam for users stored in the DB table?
Thanks and Regards,
Amit

Example of RDBMS Realm

Hi,
I have just started out with EJB & weblogic security. I want to make a RDBMS realm in weblogic that connects to oracle dBase. Since I am new to security, I was wondering if anyone out there knew what fields would be added to a table that manages user?. Also how does a table manage ACLs? And last but not least, I noticed that when I was creating a RDBMS realm in weblogic console there is a tab that mentions that I have to write schema properties...what is this and what do I place in it. I have read all of the weblogic docs and there is nothing that addresses theses questions. I would really appreciate any help I can get.
Thank you,
Jay.
P.S I am using weblogic 6.0 with sp1

Is this a continuation of http://forum.java.sun.com/thread.jsp?forum=60&thread=159878
It sure looks like it.
Have you read this weblogic doc http://e-docs.bea.com/wls/docs61/adminguide/cnfgsec.html#1052867

Unlocking user in RDBMS realm of portal

Similar Messages

Maybe you are looking for