Using the WLS 7.0 default realm can users/groups be added/deleted within a web app?

Question

If I use the default realm provided in WebLogic Server 7.0,
is it possible for me to programatically add/delete users/groups
from within a web application? Is there an API I can use to
add/delete users/groups from the embedded LDAP server? Or can
you only add/delete users/groups using the WebLogic Admin Console?

Answer 1

Tom,
The below is the program for creating a new user:
import weblogic.management.MBeanHome;
import weblogic.management.configuration.DomainMBean;
import weblogic.management.configuration.SecurityConfigurationMBean;
import weblogic.management.security.RealmMBean;
import
weblogic.management.security.authentication.AuthenticationProviderMBean;
import weblogic.management.security.authentication.UserEditorMBean;
import weblogic.management.security.authentication.GroupEditorMBean;
import weblogic.management.utils.InvalidParameterException;
import weblogic.management.utils.AlreadyExistsException;
import weblogic.servlet.security.ServletAuthentication;
import javax.naming.NamingException;
import javax.naming.Context;
import javax.naming.InitialContext;
MBeanHome mbh;
try{
Hashtable env = new Hashtable();
env.put( Context.INITIAL_CONTEXT_FACTORY,
"weblogic.jndi.WLInitialContextFactory" );
// use administrator account in order to create a user
env.put( Context.SECURITY_PRINCIPAL, "system" );
env.put( Context.SECURITY_CREDENTIALS, "weblogic" );
Context ctx = new InitialContext( env );
mbh = (MBeanHome)ctx.lookup( "weblogic.management.home.localhome" );
catch( NamingException e ){
throw new ServletException( e.toString() );
DomainMBean dmb = mbh.getActiveDomain();
SecurityConfigurationMBean scmb = dmb.getSecurityConfiguration();
RealmMBean rmb = scmb.findDefaultRealm();
AuthenticationProviderMBean providers[] = rmb.getAuthenticationProviders();
for( int i = 0; i < providers.length; i++ ){
if( providers[i] instanceof UserEditorMBean ){
UserEditorMBean uemb = (UserEditorMBean)providers;
uemb.createUser( username, password, "dynamically created user" );
hope this helps,
Koji
"Tom" <[email protected]> wrote in message
news:[email protected]...
>
If I use the default realm provided in WebLogic Server 7.0,
is it possible for me to programatically add/delete users/groups
from within a web application? Is there an API I can use to
add/delete users/groups from the embedded LDAP server? Or can
you only add/delete users/groups using the WebLogic Admin Console?