WebLogic 7 IPlanetAuthenticationProvider Performance

Hello!
I'm trying to use the IPlanteAuthenticationProvider of WLS7 to achieve
authentication and authorization. WLS7 is running on RedHat 7.x on a
P3/400/256MB and IPlanet 5.1 is running on SUN Ultra 10 with Solaris
9.
I get terrible performance of less than 1 successfull authentication
per second. No matter if SSL is used or not. An unrestricted Servlet
can be requested up to about 70 times per second on this hardware...
Does anyone have experience in Performance-Tuning the
IPlanetAuthenticationProvider? Or has anyone written one by himself?
What performance can be achieved?
Thnak you very much!
Thomas

Hi,
If you doubt your execute queue is the bottleneck,
you can always monitor it during the performance
test. If the idle threads of the default queue are often
down to 0, your system may need redesign.
Create another queue for your EJB and HTTP requests.
Leave the default queue for the basic I/O and the like.
Peace
lynchwu at truetel dot com dot tw
lynchwu at truetel dot com dot tw
"Claribel" <[email protected]> ¼¶¼g©ó¶l¥ó·s»D
:3f7cfaf5$[email protected]..
>
Hi,
We are running a weblogic 6.1SP3. We notice every time after runningweblogic
server a period of time, we experienced more slow down response from theserver.
Those requests will require to retrieve/insert/update data from our oracledatabase.
>
>
Our observation is when more delay caused on user requests, the statefulsession
beans seems to have abnormal handling on the request like swap to do otherrequest
during process one request. We just wonder in what circumstance thestateful bean
will swap like this so frequently? Is there any setting needs to beconfigured?
Like how to set the priority to do which process first or to avoid thestateful
bean swap to do other request?
By the way, will the problem is caused by the setting of execute Queue? Wehave
currently set to default value 15, do we need to tune the execute queue toimprove
the weblogic performance? Also, will this be the cause on the setting ofgarbage
collection? Any configuration requires to set? As currently what we willdo is
to restart our server after running a few days in order to keep theperformance
stable.

Similar Messages

WEBLOGIC JMS performance ?

hi ,
          I tried to find some numbers , about how much messages (in the diffrerent
          categories - ptp or pub/sub) can a weblogic server
          can stand - messages / sec , or some benchmarks,
          but i didn't find any on the web ..
          any one has any idea / link for such benchmark / performance test ???
          I would appriciate any answer !
          thanks!


1) Start with the "WebLogic JMS Performance Guide" white-paper
          on dev2dev.bea.com. This guide has no numbers, but
          it has general guidelines. Performance is not just
          numbers...
          2) General note:
          In 7.0+ JMS file stores, BEA provides 3 disk write policies.
          The default is "cache-flush", as that is transactionally safe
          in all cases. The policy may have a dramatic effect
          on performance. (WL JMS defaults to "cache-flush", IBM MQ
          always uses "direct" - as far as I know, and many smaller
          JMS players default to "disabled".)
          3) The book
          "J2EE Performance Testing with BEA WebLogic Server"
          by Peter Zadrozny, Philip Aston, Ted Osborne
          contains JMS numbers, and a benchmark tool. Keep
          in mind that the numbers here are all "producer
          limited". All the benchmarks are run with
          a single producer, so the numbers often show little
          scaling. (Most apps increase producer counts
          as they scale.)
          Tom, BEA
          Amir Ben-Amots wrote:
          > hi ,
          >
          > I tried to find some numbers , about how much messages (in the diffrerent
          > categories - ptp or pub/sub) can a weblogic server
          > can stand - messages / sec , or some benchmarks,
          >
          > but i didn't find any on the web ..
          >
          > any one has any idea / link for such benchmark / performance test ???
          >
          > I would appriciate any answer !
          >
          > thanks!
          >
          >

Weblogic server performance is very slow and memory consumption is 99%

I am facing one critical issue with the weblogic server..
The server performance is very slow and one of the process is consuming more that 99% of the memory. Bouncing the server is not resolving the issue.
Can see the memory usage below...
Tasks: 134 total, 2 running, 132 sleeping, 0 stopped, 0 zombie
Cpu(s):100.0%us, 0.0%sy, 0.0%ni, 0.0%id, 0.0%wa, 0.0%hi, 0.0%si, 0.0%st
Mem: 7990656k total, 7947652k used, 43004k free, 9164k buffers
Swap: 16386260k total, 4691704k used, 11694556k free, 56352k cached
PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
10263 oracle 24 0 10.9g 6.5g 14m S 99.2 85.3 34:31.52 java
7409 oracle 16 0 12764 768 508 S 0.3 0.0 0:16.45 top
Can some body help me on this.
Thanks in advance.
-Prasad

Use the weblogic forum-
WebLogic Server - Upgrade / Install / Environment / Migration

OSB: WebLogic lo4j performance issue

Hi
I have configured log4j on WebLogic server 11g.
Oracle Service Bus (OSB) uses this log4j file and writes log in AdminServer/logs/ApplicationLogs directory.
Log level is 'DEBUG' and quite a lot data is being logged.
lately i have noticed that server is running very slow.
any guidelines/links?
Thanks

If you feel that that excessive logging is the issue, then you can start by tune the WLS logging and compare the performance.
Go to WLS console > Servers > Servername > Logging > Advanced and set the following severity levels
‘Warning’ for “Log File” section;
‘Notice’ for “Standard out” section;
‘Warning’ for “Domain log broadcaster” section;
‘Error’ for “Memory buffer’’ section;
Then click on ‘HTTP’ tab in ‘Logging’ section. Uncheck the box “HTTP access log file enabled” if it is checked.If you still face issues, then please give more details of the domain and the services deployed.
Thanks,
Patrick

Monitoring WebLogic During Performance Test

I am running performance tests on our WebLogic Server and would like to be able
to pull the Thread Queue Length, Thread Queue Throughput and Java Heap % statistics
that are displayed in the WebLogic Console and put them in a text file every so
often during the test. This way I can use those statistics with others I collect.
I assume that if the console is able to display this information that it must
be available. Does anyone know how I could do this?
Thanks In Advance

"Dimitri" == Dimitri Rakitine <[email protected]> writes:
Dimitri> I don't know of a recommended way in 5.1. You may find this (crude)
Dimitri> example helpful in illustrating how to obtain runtime info from 5.1:
Dimitri> http://dima.dhs.org/misc/WLStats.jsp
Wow, thanks! I didn't realize how easy it was to get to some of this
information. This is a real help.
Dimitri> Also, there is a severinfo utility on http://developer.bea.com which
Dimitri> can be used to obtain server runtime information.
I couldn't find this utility. Any tips on how to find it on this site?
Thanks, this stuff is a real help.
-Ben
Dimitri> It is much easier in 6.x with it's JMX architecture.
Dimitri> Benjamin Simon <[email protected]> wrote:
>>>>>>> "Dimitri" == Dimitri Rakitine <[email protected]> writes:
Dimitri> It is certainly possible, but ways of doing this are
Dimitri> different for 5.1 and 6.x - which version do you use?
>> Ooh, this is something I want to be able to do. What's the recommended
>> way to do this for 5.1?
>> Thanks,
>> Ben
Dimitri> Robin Conklin <[email protected]> wrote:
>> >> I am running performance tests on our WebLogic Server and would like
>> >> to be able to pull the Thread Queue Length, Thread Queue Throughput
>> >> and Java Heap % statistics that are displayed in the WebLogic Console
>> >> and put them in a text file every so often during the test. This way
>> >> I can use those statistics with others I collect. I assume that if
>> >> the console is able to display this information that it must be
>> >> available. Does anyone know how I could do this?
>> >> Thanks In Advance
Dimitri> --
Dimitri> Dimitri
Dimitri> --
Dimitri> Dimitri

Bea Weblogic Server performance question.

Hello,
Im wondering if there are big performance difference between Bea Weblogic Server
versions.
I run BWS 5.1 and find it great, I ve tested the application on 6.0 and it seems
to run as good as 5.1, I ve tested with 6.1 and it works fine too.
And now is my question... is it big difference between WLS from 5.1, 6.0, 6.1,
7.0, 8.0, 8.1 ???
I dont need any "super-hyper" features just run a simple EJB (30-40 EJBs) application.
If there are big performance difference then there is a good reason to update
to the latest WLS. (Do you have any benchmark urls for this issue?)
Do I need to modify the EJBs if I want to upgrade from 5.1 to 8.1 ??
When I upgraded from 5.1 to 6.1 there was a little changes I ve to make in the
xml files.
Thanks for all your help!
/Sonny!

"Sonny" <[email protected]> wrote in message
news:3f0d6ca6$[email protected]..
|
| Hello,
|
| Im wondering if there are big performance difference between Bea Weblogic
Server
| versions.
| I run BWS 5.1 and find it great, I ve tested the application on 6.0 and it
seems
| to run as good as 5.1, I ve tested with 6.1 and it works fine too.
| And now is my question... is it big difference between WLS from 5.1, 6.0,
6.1,
| 7.0, 8.0, 8.1 ???
| I dont need any "super-hyper" features just run a simple EJB (30-40 EJBs)
application.
|
| If there are big performance difference then there is a good reason to
update
| to the latest WLS. (Do you have any benchmark urls for this issue?)
|
| Do I need to modify the EJBs if I want to upgrade from 5.1 to 8.1 ??
| When I upgraded from 5.1 to 6.1 there was a little changes I ve to make in
the
| xml files.
|
| Thanks for all your help!
|
| /Sonny!
As new versions release, there is differences in performance. One
significant point to note is the JVM versions that are supported which
significantly impact the application server performance. The new WLS 8.1 on
the newest released 1.4.2 JVM is damn good. The 1.4.1_0x JVMs have been
dramatically slower in tests that I've done. So even incremental releases
will make an impact.
In newer releases, code matures also. I also believe in 7.x they gave the
capability of clustering JVM more effectively.
anyway... good luck.
ken k

IPlanet - WebLogic bridge, performance

We are using iPlanet as a web server and weblogic as an application server. So, there is NSAPI plug-in,redirecting some requests coming from iPlanet to WebLogic. JSPs pages and servlets are served very fast via this plug-in, whereas static html pages and images are served very slow. Response time (in case of html pages and images) is very long. The weblogic.log file does not give us any errors, whereas /https-.../logs/errors file gives the following:
"flex log buffer overflow" - greater than 4096 characters
What can we do to decrease response time?
Actually we walked through parameters that can be passed into NSAPI plug-in, and we could not find anything in this plug-in related to buffer size.
Attached file is a copy of our obj.conf file
[obj.conf]

We were using the same configuration, and we got the same problems
And we got the solution :
you have to use the libproxy.so from the WL 51 SP8 , using this heavy
bugfixed library
the problems didn't occur.
Sasha Kretchetov wrote:
We are using iPlanet as a web server and weblogic as an application server. So, there is NSAPI plug-in,redirecting some requests coming from iPlanet to WebLogic. JSPs pages and servlets are served very fast via this plug-in, whereas static html pages and images are served very slow. Response time (in case of html pages and images) is very long. The weblogic.log file does not give us any errors, whereas /https-.../logs/errors file gives the following:
"flex log buffer overflow" - greater than 4096 characters
What can we do to decrease response time?
Actually we walked through parameters that can be passed into NSAPI plug-in, and we could not find anything in this plug-in related to buffer size.
Attached file is a copy of our obj.conf file
# Sun Netscape Alliance - obj.conf
# You can edit this file, but comments and formatting changes
# might be lost when the admin server makes changes.
Init fn="load-modules" funcs="wl-proxy,wl-init" shlib="/opt/iplanet/server4/plugins/libproxy.so"
Init fn="wl-init"
Init fn="flex-init" access="/opt/iplanet/server4/https-1212/logs/access" 3="fo" rmat.access="%Ses->client.ip% - %Req->vars.auth-user% [%SYSDATE%] \"%Req->reqpb.clf-request%\" %Req->srvhdrs.clf-status% %Req->srvhdrs.content-length%"
Init fn="load-types" mime-types="mime.types"
Init fn="load-modules" shlib="/opt/iplanet/server4/bin/https/lib/libNSServletPlugin.so" funcs="NSServletEarlyInit,NSServletLateInit,NSServletNameTrans,NSServletService" shlib_flags="(global|now)"
Init fn="NSServletEarlyInit" EarlyInit="yes"
Init fn="NSServletLateInit" LateInit="yes"
<Object name="default">
NameTrans fn="NSServletNameTrans" name="servlet"
NameTrans fn="pfx2dir" from="/servlet" dir="/opt/iplanet/server4/1212/servlet" name="ServletByExt"
NameTrans fn="pfx2dir" from="/ns-icons" dir="/opt/iplanet/server4/ns-icons" name="es-internal"
NameTrans fn="pfx2dir" from="/mc-icons" dir="/opt/iplanet/server4/ns-icons" name="es-internal"
NameTrans fn="pfx2dir" from="/help" dir="/opt/iplanet/server4/manual/https/ug" name="es-internal"
NameTrans fn="pfx2dir" from="/manual" dir="/opt/iplanet/server4/manual/https" name="es-internal"
NameTrans fn="document-root" root="/opt/iplanet/server4/1212"
PathCheck fn="unix-uri-clean"
PathCheck fn="check-acl" acl="default"
PathCheck fn="find-pathinfo"
PathCheck fn="find-index" index-names="index.html,home.html,index.htm"
ObjectType fn="type-by-extension"
ObjectType fn="force-type" type="text/plain"
Service method="(GET|HEAD)" type="magnus-internal/imagemap" fn="imagemap"
Service method="(GET|HEAD)" type="magnus-internal/directory" fn="index-common"
Service method="(GET|HEAD|POST)" type="*~magnus-internal/*" fn="send-file"
AddLog fn="flex-log" name="access"
</Object>
<Object name="cgi">
ObjectType fn="force-type" type="magnus-internal/cgi"
Service fn="send-cgi"
</Object>
<Object name="weblogic" ppath="*/Application1/*">
Service fn="wl-proxy" WebLogicHost="192.168.170.12" WebLogicPort="55205"
</Object>
<Object name="weblogic" ppath="*/Application2/*">
Service fn="wl-proxy" WebLogicHost="192.168.170.12" WebLogicPort="55205"
</Object>
<Object name="servlet">
ObjectType fn="force-type" type="text/html"
Service fn="NSServletService"
</Object>
<Object name="jsp092">
ObjectType fn="type-by-extension"
ObjectType fn="change-type" type="magnus-internal/jsp092" if-type="magnus-internal/jsp"
Service fn="NSServletService" type="magnus-internal/jsp092"
</Object>
<Object name="ServletByExt">
ObjectType fn="force-type" type="magnus-internal/servlet"
Service type="magnus-internal/servlet" fn="NSServletService"
</Object>
<Object name="es-internal">
PathCheck fn="check-acl" acl="es-internal"
</Object>
obj.conf
Content-Type:
text/plain
Content-Encoding:
base64

WebLogic Server Performance Monitor Console Extension

The win 32 download of this is in the unix compressed format tar.Z. After extracting the files using Winzip, i dont see any "win" installation directory. There are directories for UNIX flavors only. Where can i get the windows installable ?
I am using Win XP and WLS 8.1

There should be a setup.exe as well as a Win32 directory. The installer
should be smart enough to pickup which platform you are running and
install the appropriate binaries.
Paul.
sm <[email protected]> wrote:
The win 32 download of this is in the unix compressed format tar.Z. After
extracting the files using Winzip, i dont see any "win" installation
directory. There are directories for UNIX flavors only. Where can i
get the windows installable ?
I am using Win XP and WLS 8.1

Optimizing Bea Weblogic Server to improve performance

How do you optimize Bea Weblogic Server to improve performance?

WebLogic Server Performance and Tuning
http://edocs.bea.com/wls/docs81/perform/index.html

[BEA WEBLOGIC SERVER 5.1 sp8] performance pack load problem ....

Hi,
I am trying to use the weblogic server performance pack on BEA WEBLOGIC SERVER 5.1
sp8.
As explained in the following doc : http://www.weblogic.com/docs51/admindocs/tuning.html#performance%20packs
I use the following configuration :
weblogic.properties : weblogic.system.nativeIO.enable=true
LD_LIBRARY_PATH is set to "/bea/weblogic/wls510_sp8/lib/solaris"
Technical environement : SunOS 5.8 Generic_108528-06
But when I restart the server I have the following message :
"Mo Jun 03 18:19:06 CEST 2002:<A> <Posix Performance Pack> Could not initialize POSIX
Performance Pack.
Mo Jun 03 18:19:06 CEST 2002:<E> <Performance Pack> Unable to load performance pack,
using Java I/O."
Could you help me on this point, please ?

I think my Q is not clear. I shall explain how the application works. I am having application based on Swings and that is a website building program. User has options like ading an image into their site with an element called 'Image' available as part of the system. Then user can either select an image from the picture gallery provided or can upload his own image.
Now, if the user is uploading a picture that has space in name ( we use a servlet program to upload the image into user directory), it will get uploaded. But when the swing program tries to paint the image in the Image element ( It is essentially a JLabel ), the program is sending a request to the WL server. Since the URL contains space in name, server returns error. Even if do URL Encoding, it will add %20 in the URL and still WL will report error saying that file not found. It seems that WL is unable to process requests that has space in the URL.
If any one has any solution to this, please help..
Liju

Startup Steps performed by weblogic 6.1 SP5

Hi,
I am beginner and very new to weblogic. I am working on an application developed on weblogic 6.1 SP5. There is an issue where weblogic shut down. The server is a two node Cluster server. Weblogic shut down on one node and failed to startup on the second node as well, and we had to restart the server. Reading the logs, only thing we found was there were some thread dumps indicating that there was a deadlock condition due to which the threads were waiting and the server hung.
Could anyone suggest as to what can cause the server to hang?
Also, I wanted to know what are the basic operations that a weblogic server performs during startup like allocating memory, connecting to database etc or provide pointers to any references for weblogic?
Thanks
Minal

Hi,
I am beginner and very new to weblogic. I am working on an application developed on weblogic 6.1 SP5. There is an issue where weblogic shut down. The server is a two node Cluster server. Weblogic shut down on one node and failed to startup on the second node as well, and we had to restart the server. Reading the logs, only thing we found was there were some thread dumps indicating that there was a deadlock condition due to which the threads were waiting and the server hung.
Could anyone suggest as to what can cause the server to hang?
Also, I wanted to know what are the basic operations that a weblogic server performs during startup like allocating memory, connecting to database etc or provide pointers to any references for weblogic?
Thanks
Minal

Monitor weblogic cluster server performance

I am using "System Monitor" got from http://dev2dev.bea.com/utilitiestools/monitoring.html to monitor my weblogic server performance. For single server, it is working well.
However I can't use it to monitor the cluster server performance. For example:
server 1 and server 2 have clustered weblogic server - APPS listerning on port 8888. On server 1, I have admin server running on server 1 - ADMIN_SVR1 listerning on port 232.
I can dump the admin server Mbean information as:
$java com.iternum.jmx.monitor.SystemMonitor -url t3://localhost:232 -user admin -password xxxxx -mBeanType ExecuteQueueRuntime -of performance.txt
However I can't dump the cluster server performance data as following:
$java com.iternum.jmx.monitor.SystemMonitor -url t3://localhost:8888 -user admin -password xxxxxx -mBeanType ExecuteQueueRuntime -of performance.txt
Did I make any mistake? Do you have better tool to monitor weblogic performance?
Thanks in advance,
carl

how to attach GC file?

Weblogic.admin will have performance impact on live servers ?

Hi,
I am writing a tool to check weblogic server state as a seperate scrip, but just wants to know if I run every 4 hours this command (java weblogic.admin bla bla) on Live i.e Production servers, will it impact any weblogic server performance. as I have seen it takes some time to connect to weblogic and get the information.
I am planning to check only GETSTATE. Is tehre any way I can get the Health state also by using Weblogic.Admin?
Thanks,

hi all,
one of my customer is facing the performance issues on sql db. CPU allocated currently is 20 VCPU and it utilization shows very high.
Increasing VCPU would serve the purpose or any indexing or other best practices to be followed.
Please suggest
This topic first appeared in the Spiceworks Community

PL/SQL procedure is 10x slower when running from weblogic

Hi everyone,
we've developed a PL/SQL procedure performing reporting - the original solution was written in Java but due to performance problems we've decided to switch this particular piece to PL/SQL. Everything works fine as long as we execute the procedure from SQL Developer - the batch processing 20000 items finishes in about 80 seconds, which is a serious improvement compared to the previous solution.
But once we call the very same procedure (on exactly the same data) from weblogic, the performance seriously drops - instead of 80 seconds it suddenly runs for about 23 minutes, which is 10x slower. And we don't know why this happens :-(
We've profiled the procedure (in both environments) using DBMS_PROFILER, and we've found that if the procedure is executed from Weblogic, one of the SQL statements runs noticeably slower and consumes about 800 seconds (90% of the total run time) instead of 0.9 second (2% of the total run time), but we're not sure why - in both cases this query is executed 32742-times, giving 24ms vs. 0.03ms in average.
The SQL is
SELECT personId INTO v_personId FROM (
        SELECT personId FROM PersonRelations
        WHERE extPersonId LIKE v_person_prefix || '%'
) WHERE rownum = 1;Basically it returns an ID of the person according to some external ID (or the prefix of the ID). I do understand why this query might be a performance problem (LIKE operator etc.), but I don't understand why this runs quite fast when executed from SQL Developer and 10x slower when executed from Weblogic (exactly the same data, etc.).
Ve're using Oracle 10gR2 with Weblogic 10, running on a separate machine - there are no other intensive tasks, so there's nothing that could interfere with the oracle process. According to the 'top' command, the wait time is below 0.5%, so there should be no serious I/O problems. We've even checked JDBC connection pool settings in Weblogic, but I doubt this issue is related to JDBC (and everything looks fine anyway). The statistics are fresh and the results are quite consistent.
Edited by: user6510516 on 17.7.2009 13:46

The setup is quite simple - the database is running on a dedicated database server (development only). Generally there are no 'intensive' tasks running on this machine, especially not when the procedure I'm talking about was executed. The application server (weblogic 10) is running on different machine so it does not interfere with the database (in this case it was my own workstation).
No, the procedure is not called 20000x - we have a table with batch of records we need to process, with a given flag (say processed=0). The procedure reads them using a cursor and processes the records one-by-one. By 'processing' I mean computing some sums, updating other table, etc. and finally switching the record to processed=1. I.e. the procedure looks like this:
CREATE PROCEDURE process_records IS
    v_record records_to_process%ROWTYPE;
BEGIN
     OPEN records_to_process;
     LOOP
          FETCH records_to_process INTO v_record;
          EXIT WHEN records_to_process%NOTFOUND;
          -- process the record (update table A, insert a record into B, delete from C, query table D ....)
          -- and finally mark the row as 'processed=1'
     END LOOP;
     CLOSE records_to_process;
END process_records;The procedure is actually part of a package and the cursor 'records_to_process' is defined in the body. One of the queries executed in the procedure is the SELECT mentioned above (the one that jumps from 2% to 90%).
So the only thing we actually do in Weblogic is
CallableStatement cstmt = connection.prepareCall("{call ProcessPkg.process_records}");
cstmt.execute();and that's it - there is only one call to the JDBC, so the network overhead shouldn't be a problem.
There are 20000 rows we use for testing - we just update them to 'processed=0' (and clear some of the other tables). So actually each run uses exactly the same data, same code paths and produces the very same results. Yet when executed from SQL developer it takes 80 seconds and when executed from Weblogic it takes 800 seconds :-(
The only difference I've just noticed is that when using SQL Developer, we're using PL/SQL notation, i.e. "BEGIN ProcessPkg.process_records; END;" instead of "{call }" but I guess that's irrelevant. And yet another difference - weblogic uses JDBC from 10gR2, while the SQL Developer is bundled with JDBC from 11g.

Step-by-step custom Credential Mapping using weblogic 10.3 SSPI

Folks,
I am trying to implement custom Credential Mapping using weblogic 10.3 SSPI. Am sure that few of you have already implemented the same. But here my questions in reagrds with the implementation
Right now, I have below
1.MyCredentialMapperImpl implements CredentialMapperV2
1.Overridden getCredential and gerCredentials method.But I am not sure what are all the other methods , I should implement here.
2.MyCredentialMapperProviderImpl implements CredentialProviderV2
Questions.
1.How to get ContextHandler to pass as param in MyCredentialMapperImpl -->gerCredentials method.
2.Should I need set up a database after deploying the MBean ?
3.How do I execute above implementation ?
4.Can I see the SAML Token in my client ?
If possible Please send me the step-by-step custom Credential Mapping implementation.
Thanks in advance.
Ravi

Hi John,
I would like magic of course. However, in this case I want something special: my authentication provider uses special means and contents of headers, cookies and service from external identity management systems to determine the user's identity.
I do not want the application to present the login dialog! I want to derive the identity and the fact that the user is logged in from whatever the authentication provider returns in terms of Subject.
Ideally, the flow is something like:
- user accesses an unprotected resource - resource is shown, no interaction with authentication provider
- user presses a link or button that takes him/her to a protected resource
- the authentication provider is contacted to work with the identity asserter to establish the identity of the current user and create a subject object for this user
- the application can access the subject and principals
- ADF Security recognizes the identity and the roles (based on the principals) and coordinates access based on this.
the authentication method is client certificate. presumably this prompts WebLogic/OPS to use an identity asserter to work with custom headers and cookies ("... when you configure a web application to use CLIENT-CERT authentication. In this case, WebLogic can perform identity assertion based on values from request headers and cookies. If the header name or cookie name matches the active token type for the provider, the value is passed to the provider."). No login form should be presented to the user, as all information required to perform the authentication is already available.
I am trying to understand what I must do to have the ADF application adopt the subject set by the authentication provider - if anything?!
If you more ideas to share - I would love to hear them.
best regards,
Lucas

WebLogic 7 IPlanetAuthenticationProvider Performance

Similar Messages

Maybe you are looking for