Web Proxying to a WebLogic Cluster using the HTTPS protocol

Hi all,
I am recently involved into JWS proxying to WebLogic Cluster.
I don't have any technical problems at the moment but "conceptual" problems, that is:
- my jws proxy server should connect to a WebLogic Cluster through a Bea plugin configured wish SSL parameters;
- my jws proxy server should pass the incoming request using a load-balancing algorithm among the two nodes of the cluster, that are actually installed on two different machines;
- the jws proxy server doesn't seem to accept multiple certificates.
My question is: how can I configure my proxy plugin to route the incoming requests to my WebLogic Cluster using the https protocol? As a matter of fact, each certificate should be hostname dependent, and it looks like that the proxy plugin doesn't accept a multiple certificate configuration (and it should actually match the CN entry in the certificates with the actual hostnames of the nodes).
Any hint?
Thx a lot,
Luca

It is supported in 5.2
          - Prasad
          Wei Guan wrote:
          > As I knew of, secure proxying is not supported yet.
          > --
          > Cheers - Wei
          > Bob Kiep <[email protected]> wrote in message
          > news:8bvvc7$7uf$[email protected]..
          > > The NSAPI plugin cannot perform SSL proxying, as documented at the bottom
          > of
          > > this message (taken from
          > > http://www.weblogic.com/docs/admindocs/nsapi.html#background). When
          > > Weblogic is the proxy, can I do SSL? If someone could send me the link to
          > > where is states whether is SSL or not would be very helpful.
          > >
          > > "The plug-in is for an environment where NES serves static pages, and a
          > > Weblogic Server (operating in a different process, possibly on a different
          > > host) is delegated to serve dynamic pages (such as JSPs or pages generated
          > > by HTTP Servlets). The connection between WebLogic Server and the NSAPI
          > > plug-in is clear text http, not SSL. To the end user -- the browser -- the
          > > HTTP requests delegated to WebLogic appear to come from the same source as
          > > the static pages. In other words, WebLogic on the back-end is invisible.
          > > Additionally, the HTTP-tunneling facility of the WebLogic client-server
          > > protocol can operate through the plug-in, providing access to all WebLogic
          > > services (not just dynamic pages). "
          > >
          > >
          Cheers
          - Prasad
          

Similar Messages

  • EBS datasource in WebLogic cluster using the EBS dbc file

    Hi All
    Please let me know if someone has successfully created EBS datasource in WebLogic cluster using the EBS dbc file.
    I have successfully created the datasource with one managed server but I am getting 'OAuth Mashaling Failure' error while adding the second managed server to this datasource.
    Thanks

    Thanks Hussein
    Here is the complete error:
    [wlst] Caused by: weblogic.common.ResourceException: weblogic.common.ResourceException: OAUTH marshaling failure
    [wlst] at weblogic.jdbc.common.internal.PooledConnectionEnvFactory.createResource(PooledConnectionEnvFactory.java:133)
    [wlst] at weblogic.common.resourcepool.ResourcePoolImpl.makeResources(ResourcePoolImpl.java:1249)
    [wlst] at weblogic.common.resourcepool.ResourcePoolImpl.makeResources(ResourcePoolImpl.java:1166)
    [wlst] at weblogic.common.resourcepool.ResourcePoolImpl.start(ResourcePoolImpl.java:249)
    [wlst] at weblogic.jdbc.common.internal.ConnectionPool.doStart(ConnectionPool.java:1154)
    [wlst] at weblogic.jdbc.common.internal.ConnectionPool.start(ConnectionPool.java:154)
    [wlst] at weblogic.jdbc.common.internal.ConnectionPoolManager.createAndStartPool(ConnectionPoolManager.java:454)
    [wlst] at weblogic.jdbc.common.internal.ConnectionPoolManager.createAndStartPool(ConnectionPoolManager.java:372)
    [wlst] at weblogic.jdbc.module.JDBCModule.prepare(JDBCModule.java:255)

  • HTML 5 and the use of the HTTP protocol.

    In our company we upgraded to fms 4 and installed the apache that comes bundle up with the installation. We had it configure and now we can play videos in html 5 by using the http protocol. The question I have is, can we use https protocol instead of rtmps? I've been doing a lot of research and I found documentation that says to put a minus sign in front of port 443 (-443) in the fms.ini file in the ADAPTOR.HOSTPORT line but it also says that with this configuration port 443 will only recieve rtmps connections. My next step is to put the minus sign in front of the port number and restart the server and just try to establish connection using https to see if i works. Any ideas are definetly welcome.

    Hi,
    It is possible to serve the content via the Apache that bundles with the FMS.
    For that you need to eneble mos_ssl.so module in httpd.conf and create a virtual host and give appropriate parameters ( refer any document for ssl configuration in apache ). Also make sure that the 443 port is not used by any other service (eg : RTMPS ).
    Thanks.

  • How can I configuration MBean in weblogic server  using the console ?

    How can I configuration MBean in weblogic server using the console ?
    I hear people talking about mbeans in weblogic server I have look in the console I can not find where , or how to do it.
    can some body explain that or a link that explain it, how to do it on the console ?

    Hi,
    Registering Custom MBeans from Admin Console is not yet possible. But yes there are ways to Configure and Utilize Custom MBeans ...
    http://weblogic-wonders.com/weblogic/2010/02/16/registering-and-invoking-custommbeans/
    Thanks
    Jay SenSharma

  • Broken link- Creating WebLogic Domains Using the CW

    Hello!
    Create domains The Configuration Wizard guides you through the process of creating or
    extending a domain for your target environment. See Creating WebLogic
    Domains Using the Configuration Wizard.
    That link doesn't works... any idea where I could find the info?

    Check this one --- > http://download.oracle.com/docs/cd/E13179_01/common/docs102/confgwiz/index.html
    http://download.oracle.com/docs/cd/E13179_01/common/docs102/confgwiz/newdom.html#wp1080587
    Edited by: Renjan Thomas on Oct 15, 2009 1:36 AM

  • How to use the HTTP Analyzer with the embedded OC4J server?

    JDeveloper version: Studio Edition Version: 10.1.3.0.3.3412
    I have a web application, which I run in the embedded OC4J server.
    I tried to use the HTTP analyzer to inspect http requests and responses, but I could not make the analyzer work.
    I tried to setup the HTTP analyzer by looking at the help entry, but I could not make it work.
    If the HTTP analyzer works for you in the embedded OC4J server, please write the steps on how to setup the analyzer.
    (Maybe I could not make the correct settings about port numbers?)
    Thanks in advance,
    Regards,
    Turgay Zengin

    I was able to use the HTTP Analyzer by changing the proxy setting directly in Internet Options. Check the browser/proxy settings set in JDeveloper preferences and copy them to the Connections tab of Internet Options. See if that works for you.

  • Help! with creating a J2ME program using the http connectivity interface

    So this is what I have to do using the http connectivity interface:
    1.Creating two threads – one for communication (receiving and sending) and the other (main) thread will be for interaction with the user.
    2.The main thread will make use of three midlet forms. The first form will ask for web page address (URL) and separately for a delimiter which will separate the words in the URL document, the third form will display the ratio of all symbols on the page and the number of occurrences of the delimiter specified
    3.The second thread should perform http connectivity to the WWW, utilise the web page address supplied and connect to the appropriate web page and read its content, count all symbols on the chosen page, count the number of occurrences of the delimiter given as user input on the same form as the web page address, calculate the ratio between the two and pass this information to the first thread to display.
    I have many questions but my main concerns are:
    *1. How to communicate using HTTP interface within a thread*
    *2. What is a delimiter in the context above and how should it be implemented*
    I've been thrown in at the deep end with little programming experience with this assignment. If anyone can share a similar example or answer my concerns I'd be more than happy.
    Thanks in advance.

    thelane wrote:
    hi thanks for the response.
    As I said I have coded in other languages before, but this is a new for me in java. I needed to get it working quickley. Now I can clean up.
    I will have a look at method and see how I get on.
    ANy similiar examples would be great.
    Thanks.I can certainly give you a similar example.
    Say you have code such as this:
      int a = 10, b = 11;
      int temp = 1;
      for(int i = 2; i < a; ++i) {
       temp *= i;
      System.out.println(a + " factorial is " + temp);
      temp = 1;
      for(int i = 2; i < b; ++i) {
       temp *= i;
      System.out.println(b + " factorial is " + temp);Each section of code takes the factorial of the current variable an outputs it. The factorial code can be placed within a method to be called more easily, as such:
    public void factorial(int num) {
    int temp = 1;
    for(int i = 2; i < num; ++i) {
      temp *= i
    System.out.println(num + " factorial is " + temp);
    }Then, whenever you need to call it, you can just do so:
    int a=10,b=11,c=12;
    factorial(a);
    factorial(b);
    factorial(c);

  • Why is the https protocol used on all pages of arch wiki & forums ?

    I don't know if it's true, but I heard that the https protocol requires more server resources than http, maybe because the server has to encrypt the data before sending it to the client. Therefore, as far as I know, https is usually used only on web pages containing login forms, and others that transmit sensitive data. I'm not complaining about the wiki or forum performance, they're loading fast, but is there a reason for using https on all pages of arch wiki and arch forums ? Shouldn't https be used only for logins to the wiki and forums, and http for all other pages, just like archlinux home page ?
    Last edited by Chrys349 (2011-10-14 00:14:54)

    I don't know the specific reasons as far as Arch is concerned, but there is a trend... See for example the HTTPS Everywhere extension. Many sites started offering or forcing https (including Google.) This can help avoid censorship and eavesdropping, two things that are on the rise too in many countries.

  • How to read XML file kept on NON-SAP server using the Http URL ?

    Dear Experts,
    I am working on CRM2007 web UI. I need to read a XML file placed on a shared server location by a third party program. Then process that XML file into CRM and create a quotation using the data extracted from the file.
    All i have with me is the http URL that points to the location of the file.
    I am supposed to read the file , create quotation and at later point of time i would be asked to update the quotation and then generated new XML representing updated quotation and replace the XML file on shared server location with this new updated XML file.
    I know how to extract data from XML file into ABAP but i have no clue as to how to access the file on some other server using the http url i have and how to read it ?
    I searched on the forum and i found the codes for reading XML file that is located either on client machine OR on the Application server wheareas my file is on some other than sap application server.
    Please help me as its an urgent issue .
    Points will be rewarded for sure.
    Please help.
    Thanks in advance,
    Suchita.
    p.s. : the http url to the file location is like -->
    http://SomeServerDomain/SomeDirectory/file.xml

    hi,
    interesting task.
    to request the file by a http call you need to create an if_http_client object.
    More info is [here|http://help.sap.com/saphelp_nwmobile71/helpdata/en/e5/4d350bc11411d4ad310000e83539c3/frameset.htm]
    to parse the file you either have to work with the ixml packages ([info|http://help.sap.com/saphelp_nwmobile71/helpdata/en/47/b5413acdb62f70e10000000a114084/content.htm]) or you use an XSLT transformation ([info|http://help.sap.com/saphelp_nwmobile71/helpdata/en/a8/824c3c66177414e10000000a114084/content.htm]).
    uploading the final file isn't so easy. if you only have http, you should write a server script to allow uploading of the new file and copying it into the place of the old file. but you definitely need the script.
    now it's your take. depending on how experienced you are in ABAP and networking this might turn out to be easy or pretty complicated.
    have fun,
    anton

  • Options apart from using the http binding adapter

    In calling secured restful web services, what are the options apart from using the http binding adapter from BPEL/SOA 11.1.1.4.
    Pointers to examples highly appreciated.

    Hi,
    Have a look at this...
    http://technology.amis.nl/2009/12/15/the-oracle-soa-suite-11g-httpbinding-or-another-way-to-call-restful-services-from-soa-composite-applications/
    Cheers,
    Vlad

  • How to use the http sender adapter

    Hi,
    I'm trying to use the http sender adapter but not getting the result.
    1)  I've created the commnunication channel in Integration Directory.
    2)  I have my url:
    http://<server>:56000/sap/xi/adapter_plain?service=BS&namespace=urn%3Acompany%3Apoc&interface=interface
    3)  When i copy that url in a browser i get a login prompt. When i log in i get a message that navigation is cancelled.
    What steps do i need to do to use this url to send my xml message to the adapter engine. Do i need a special system user for this? Any other tools required? (i have httpclient but using that doesnt send messages to the adapter_plain; i think)
    I feel i'm just missing one little thing, but what is it.
    kr
    Robert

    Hello Team,
    I added the user name & pwd to query string & trying to access from IE and still getting blank page.
    Is this what is expected or there is something wrong in URL. I am able to send the XML from HTTP Test tool.
    My URL is :
    http://abc:50000/sap/xi/adapter_plain?namespace=urn:xyz.com:A_To_ERP_Payment_balance_Request&interface=SI_A_CHK_balance_OUT&service=BC_XX_XXX&sap-user=myuser&sap-password=mypassword&sap-client=001&sap-language=EN
    Please advice.

  • Is it possible to send a text message using the UDP protocol?

    Support doc
    http://www.adobe.com/support/director/multiuser/using_udp/using_udp02.html
    says to use the following format with connectToNetServer:
    errCode =
    gMultiuserInstance.connectToNetServer([#remoteAddress:
    "chatServer.myCompany.com", #logonInfo: [#userID: "Bob",
    #password:
    "MySecret", #movieID: "Tech Chat"], #mode: #smus,
    #localUDPPort: 1627,
    #localAddress: "123.45.67.89", #remoteTCPPort: 1626])
    But if I change the mode to #text, it still sends out
    messages as smus.
    In fact, if I leave out the UDP parameters altogether but
    still use the
    list parameters for connectToNetServer, it still always sends
    as smus.
    Sends as smus:
    errCode =
    gMultiuserInstance.connectToNetServer([#remoteAddress:
    "chatServer.myCompany.com", #logonInfo: [#userID: "Bob",
    #password:
    "MySecret", #movieID: "Tech Chat"], #mode: #text,
    #localUDPPort: 1627,
    #localAddress: "123.45.67.89", #remoteTCPPort: 1626])
    Sends as smus:
    errCode =
    gMultiuserInstance.connectToNetServer([#remoteAddress:
    "chatServer.myCompany.com", #logonInfo: [#userID: "Bob",
    #password:
    "MySecret", #movieID: "Tech Chat"], #mode: #text])
    Only the string parameter method can be made to send text
    messages.
    Sends as text:
    errCode = gMultiuserInstance.connectToNetServer("Bob",
    "MySecret",
    "chatServer.myCompany.com", 1626, "Tech Chat", 1)
    Am I missing something? Is this a known issue? Anyone have a
    work around?
    -Jeremy

    Drat!
    Thanks for the answer though.
    alchemist wrote:
    > The multiuserXtra supports either tcp text or tcp smus
    connections.
    > The ability to send udp messages was an expansion to the
    original mus
    > protocol/xtra and is valid only for muXtra instances
    already connected in
    > smus mode.
    > So, if you are asking if you can create a udp instance
    and use it at will
    > (exchange udp messages with some remote udp socket),
    then the answer is no.
    >
    >
    > "Jeremy Aker" <[email protected]> wrote in message
    > news:[email protected]...
    >> I'm really sorry that I wasn't clear enough. I'll
    repeat the questions
    >> more concisely.
    >> Is it possible to send a text message using the UDP
    protocol? If so, how?
    >> Is the bug I described in my original message (see
    below) really a bug or
    >> am I doing something wrong?
    >> If it's a bug, does anyone have a work around?
    >>
    >> alchemist wrote:
    >>> And the question is?
    >>>
    >>> "Jeremy Aker" <[email protected]> wrote in
    message
    >>> news:[email protected]...
    >>>> Support doc
    >>>>
    http://www.adobe.com/support/director/multiuser/using_udp/using_udp02.html
    >>>> says to use the following format with
    connectToNetServer:
    >>>> errCode =
    gMultiuserInstance.connectToNetServer([#remoteAddress:
    >>>> "chatServer.myCompany.com", #logonInfo:
    [#userID: "Bob", #password:
    >>>> "MySecret", #movieID: "Tech Chat"], #mode:
    #smus, #localUDPPort: 1627,
    >>>> #localAddress: "123.45.67.89",
    #remoteTCPPort: 1626])
    >>>>
    >>>> But if I change the mode to #text, it still
    sends out messages as smus.
    >>>> In fact, if I leave out the UDP parameters
    altogether but still use the
    >>>> list parameters for connectToNetServer, it
    still always sends as smus.
    >>>>
    >>>> Sends as smus:
    >>>> errCode =
    gMultiuserInstance.connectToNetServer([#remoteAddress:
    >>>> "chatServer.myCompany.com", #logonInfo:
    [#userID: "Bob", #password:
    >>>> "MySecret", #movieID: "Tech Chat"], #mode:
    #text, #localUDPPort: 1627,
    >>>> #localAddress: "123.45.67.89",
    #remoteTCPPort: 1626])
    >>>>
    >>>> Sends as smus:
    >>>> errCode =
    gMultiuserInstance.connectToNetServer([#remoteAddress:
    >>>> "chatServer.myCompany.com", #logonInfo:
    [#userID: "Bob", #password:
    >>>> "MySecret", #movieID: "Tech Chat"], #mode:
    #text])
    >>>>
    >>>> Only the string parameter method can be made
    to send text messages.
    >>>> Sends as text:
    >>>> errCode =
    gMultiuserInstance.connectToNetServer("Bob", "MySecret",
    >>>> "chatServer.myCompany.com", 1626, "Tech
    Chat", 1)
    >>>>
    >>>> Am I missing something? Is this a known
    issue? Anyone have a work
    >>>> around?
    >>>>
    >>>> -Jeremy
    >

  • Web Service wdsl file getting generated as a HTTPS protocol instead of HTTP

    Hi Experts,
    I have a   requirement
    I have created a web service in development client  which is used in interactive adobe form.
    After moving the web service to production only defination is getting generated.
    I have tried to manually create the service in SOAMANAGER , it is getting created as with https protocol.
    In development client it was created as a http protocol.
    Warm Regards
    Abhinav

    Hi Abhinav,
    I'm assuming you don't have a QA system in your landscape if you're transporting straight from Dev to Production. I'm also assuming this because if you transported to QA before production you would have noticed that 'only' the definition is always transported. You have to do the configuration again each time you transport your change, this is SAP default behaviour because each webservice is client dependant so SAP won't know which client this service will be relevant for in the environment you're transporting to.
    The HTTPS issue, this makes sense to me in the production environment. You don't normally have the HTTP protocol enabled in a production environment, only HTTPS for security reasons.
    In yout production environment, check Transaction Code SMICM --> Got (drop down menu) --> Services
    Check what protocols are active there (with a green tick). This will indicate whether the HTTP protocol in enabled in Prod or not.
    Regards, Trevor

  • Setting breakpoints/debug using the HTTP Analyzer web development

    I wonder if there is any way of setting breakpoints in a Web service class. For instance the method in the class shown in the tutorial "Building a POJO Annotation-Driven Service":
    package annotation;
    import javax.jws.WebMethod;
    import javax.jws.WebService;
    @WebService(serviceName = "HelloService")
    public class HelloService{
    public HelloService() {
    @WebMethod
    public String sayHello (String s) {
    return "Hello " + s;
    That is, while you run the HTTP Analyzerl, the code can be debugged by setting breakpoints etc.

    Hi, I'm just using the default setup for HTTP Analyzer and having no problem using it.
    Just make sure to run the HTTP Analyzer first before running or starting your app server (Integrated weblogic Server).

  • Exchange 2010 CAS proxy to Exchange 2013 CAS: Use the following link to open this mailbox with the best performance:

    Hello,
    I've installed Exchange 2013 into Exchange 2010 infrastructure
    [ single Exchange 2010 server; single AD site; AD = 2003 ],
    and moved one mailbox [ Test user ] to Exchange 2013.
    When I login internally through 2013 OWA to access mailboxes on 2010, then proxy works fine.
    When I login internally through 2010 OWA to access mailboxes on 2013, then a message appears:
        Use the following link to open this mailbox with the best performance: with link to 2013 OWA...
    What is wrong ?
    I've checked and changed settings by:
    Get-OwaVirtualDirectory, Set-OwaVirtualDirectory
    [PS] C:\work>Get-OwaVirtualDirectory -Identity 'ex10\owa (Default Web Site)' | fl server,name, *auth*,*redir*,*url*
    Server                        : EX10
    Name                          : owa (Default Web Site)
    ClientAuthCleanupLevel        : High
    InternalAuthenticationMethods : {Basic, Fba, Ntlm, WindowsIntegrated}
    BasicAuthentication           : True
    WindowsAuthentication         : True
    DigestAuthentication          : False
    FormsAuthentication           : True
    LiveIdAuthentication          : False
    AdfsAuthentication            : False
    OAuthAuthentication           : False
    ExternalAuthenticationMethods : {Fba}
    RedirectToOptimalOWAServer    : True
    LegacyRedirectType            : Silent
    Url                           : {}
    SetPhotoURL                   :
    Exchange2003Url               :
    FailbackUrl                   :
    InternalUrl                   : https://ex10.contoso.com/owa
    ExternalUrl                   : https://ex10.contoso.com/owa
    [PS] C:\work>Get-OwaVirtualDirectory -Identity 'ex13\owa (Default Web Site)' | fl server,name, *auth*,*redir*,*url*
    Server                        : EX13
    Name                          : owa (Default Web Site)
    ClientAuthCleanupLevel        : High
    InternalAuthenticationMethods : {Basic, Ntlm, WindowsIntegrated}
    BasicAuthentication           : True
    WindowsAuthentication         : True
    DigestAuthentication          : False
    FormsAuthentication           : False
    LiveIdAuthentication          : False
    AdfsAuthentication            : False
    OAuthAuthentication           : False
    ExternalAuthenticationMethods : {Fba}
    RedirectToOptimalOWAServer    : True
    LegacyRedirectType            : Silent
    Url                           : {}
    SetPhotoURL                   :
    Exchange2003Url               :
    FailbackUrl                   :
    InternalUrl                   : https://ex13.contoso.com/owa
    ExternalUrl                   :
    best regards Janusz Such

    Hi Janusz Such,
    Based on my knowledge, CAS proxy can only from later version to previous version.
    Some like CAS2013 to CAS2010/2007, CAS2013 to CAS2013. 
    Thanks
    If you have feedback for TechNet Subscriber Support, contact
    [email protected]
    Mavis Huang
    TechNet Community Support

Maybe you are looking for

  • Testing a base station

    There are various diagnostic and repair tools available to us Mac users for our Powerbooks and desktop systems, i.e. DiskWarrior, Tech Tool, the Apple Hardware Test, etc. But is there anything available for testing an Airport Extreme base station? I'

  • Airport Card no longer has acceptable range

    Ever since the early days of OS 10.4, my airport card range became incapable of connecting more than about 6 feet whereas previously it was able to make a reliable connection 40 feet away through several interior walls. My router is a D-Link DI-624.

  • Authorize-deauthorize circle

    Another member of my household recently purchased a 15" MacBook Pro POST mid-2010, that is, a laptop whose mini displayport outputs audio as well as video. I would like to display the videos purchased in iTunes from his laptop to our HDTV. We have th

  • EAP-TLS error message on ACS server

    Receving this message when client attempts authentication....Any idea or pointers on troubleshooting this? "EAP-TLS authentication failed during handshake"

  • Help ! Screen Capture sound every 30 seconds

    Hi all I need help! Last week in the middle of my work day nothing special, the system started playing the camera shutter / screen capture. I started timing between the shutter, every 30 seconds, very annoying - the camera shutter sound - same as the