Weblogic Roles and policies

Team,
I want to give access to my developers of the admin console to see the messages in the Queue.
For that...
1. Click on environment --> Services --> Messages --> JMS Modules --> My JMS Module --> My queue --> Monitoring --> Select JMS Module!JMSServer@My queue
Show Messages.
We can see messages successfully only if login as administrator.
But for any other role it throws an exception on the console
Access not allowed for subject: principals=[devuser, Operators, Monitors, Deployers, AppTesters], on ResourceType: JMSDestinationRuntime Action: execute, Target: getMessages
weblogic.management.NoAccessRuntimeException: Access not allowed for subject: principals=[devuser, Operators, Monitors, Deployers, AppTesters], on ResourceType: JMSDestinationRuntime Action: execute, Target: getMessages
Any suggestions..

Yes. Using weblogic console, only Admins can monitor a queue. I suggest you use any monitoring tool to monitor the queues.

Similar Messages

  • Confusion on Roles and Policies

    Dear Friends,
         Now i try to understand the what is weblogic and how its component are working .But i have confused with the roles and policies concept in security realm.My Scenario:I have created the one user and assign this user to the monitoring group.Then i want this user to start and stop servers also.So i create the role and policy in managed server security option.But it is not working .I know this is very simple question but i stuck this in many days even i referring the document..I am not able to put my post on security space .So please guide me for creating the roles and policies with example scenario or any documents
    Thanks & Regards,
    Ove.
    Message was edited by: Ove

    the oracle documentation explains this question:
    https://docs.oracle.com/cd/E57014_01/wls/WLACH/taskhelp/security/UseRolesAndPoliciesToSecureResources.html
    https://docs.oracle.com/middleware/1212/wls/ROLES/understdg.htm#ROLES120
    Check this link too:
    https://thecattlecrew.wordpress.com/2014/08/07/it-security-part-7-weblogic-server-roles-role-mapping-and-configuring-a-role-mapping-provider/

  • How to pull Roles and Policies from backend using SQL query in OIA

    Hello,
    I have Roles and Policies defined in OIA with mapping each other and there is no direct extract report from OIA Web console.
    Is there any oracle SQL query by which we can get the data and filter the Policies based on the role ?
    Note: We have one Role having more than one Polcies defined in OIA.
    Appreciate your help.
    Thanks

    I am quoting this from MOS Doc Id "Why would multiple session records be present in the User Sessions screen in P6 Web, and why might some of them have different IP addresses? (Doc ID 1600172.1)"
    Multiple sessions show up for users since different sections of P6 Web have their own sessions associated with them. If a user is authorized to use multiple areas of the software they will have multiple sessions each time they log in. Additionally, if users are closing their browsers before logging out of P6 Web Access you might see some past sessions still appearing in the list. These will eventually be cleared out by background jobs, however you can also reset the sessions in the software by clicking the "Reset User" link (Administer > User Sessions > Manage User Sessions), or by choosing the "Reset All Users" link (Administer > User Sessions > Manage User Sessions) to do this for all past sessions.
    Multiple IP addresses for sessions can happen when a user logs in from different machines. For example, a person may login at their desk, but then go to a colleagues workstation to discuss a project, and log in from there. Doing so will leave them with multiple IP addresses in the session records.
    Hope this helps
    Regards,
    Sachin Gupta

  • Unable to expand Roles n policies after enabling Active directory security

    I am running weblogic 10.3 on Linux and integrated console security with Microsoft AD.
    Below error occurs when I tried to expand roles and policies.
    Please help.
    Message: weblogic.management.utils.NotFoundException: [Security:090311]Failed to set resource expression
    Stack Trace: com.bea.console.exceptions.ManagementException: weblogic.management.utils.NotFoundException: [Security:090311]Failed to set resource expression at com.bea.console.actions.security.roles.RoleTableAction.createRoleNode(RoleTableAction.java:678) at com.bea.console.actions.security.roles.RoleTableAction.expandGlobalRolesNode(RoleTableAction.java:208) at com.bea.console.actions.security.roles.RoleTableAction.expandNode(RoleTableAction.java:193) at com.bea.console.actions.security.roles.RoleTableAction.execute(RoleTableAction.java:102) at org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:431) at org.apache.beehive.netui.pageflow.PageFlowRequestProcessor.access$201(PageFlowRequestProcessor.java:97) at org.apache.beehive.netui.pageflow.PageFlowRequestProcessor$ActionRunner.execute(PageFlowRequestProcessor.java:2044) at org.apache.beehive.netui.pageflow.interceptor.action.internal.ActionInterceptors.wrapAction(ActionInterceptors.java:91) at org.apache.beehive.netui.pageflow.PageFlowRequestProcessor.processActionPerform(PageFlowRequestProcessor.java:2116) at com.bea.console.internal.ConsolePageFlowRequestProcessor.processActionPerform(ConsolePageFlowRequestProcessor.java:255) at org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:236) at org.apache.beehive.netui.pageflow.PageFlowRequestProcessor.processInternal(PageFlowRequestProcessor.java:556) at org.apache.beehive.netui.pageflow.PageFlowRequestProcessor.process(PageFlowRequestProcessor.java:853) at org.apache.beehive.netui.pageflow.AutoRegisterActionServlet.process(AutoRegisterActionServlet.java:631) at org.apache.beehive.netui.pageflow.PageFlowActionServlet.process(PageFlowActionServlet.java:158) at com.bea.console.internal.ConsoleActionServlet.process(ConsoleActionServlet.java:256) at org.apache.struts.action.ActionServlet.doGet(ActionServlet.java:414) at com.bea.console.internal.ConsoleActionServlet.doGet(ConsoleActionServlet.java:133) at org.apache.beehive.netui.pageflow.PageFlowUtils.strutsLookup(PageFlowUtils.java:1199) at com.bea.portlet.adapter.scopedcontent.ScopedContentCommonSupport.executeAction(ScopedContentCommonSupport.java:686) at com.bea.portlet.adapter.scopedcontent.ScopedContentCommonSupport.renderInternal(ScopedContentCommonSupport.java:266) at com.bea.portlet.adapter.scopedcontent.StrutsStubImpl.render(StrutsStubImpl.java:107) at com.bea.netuix.servlets.controls.content.NetuiContent.preRender(NetuiContent.java:292) at com.bea.netuix.nf.ControlLifecycle$6.visit(ControlLifecycle.java:428) at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:727) at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739) at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739) at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739) at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739) at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739) at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739) at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739) at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739) at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739) at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739) at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739) at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739) at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739) at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739) at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739) at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739) at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739) at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739) at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739) at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739) at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739) at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739) at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739) at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739) at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739) at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739) at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739) at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739) at com.bea.netuix.nf.ControlTreeWalker.walkRecursivePreRender(ControlTreeWalker.java:739) at com.bea.netuix.nf.ControlTreeWalker.walk(ControlTreeWalker.java:146) at com.bea.netuix.nf.Lifecycle.processLifecycles(Lifecycle.java:395) at com.bea.netuix.nf.Lifecycle.processLifecycles(Lifecycle.java:361) at com.bea.netuix.nf.Lifecycle.runOutbound(Lifecycle.java:208) at com.bea.netuix.nf.Lifecycle.run(Lifecycle.java:162) at com.bea.netuix.servlets.manager.UIServlet.runLifecycle(UIServlet.java:388) at com.bea.netuix.servlets.manager.UIServlet.doPost(UIServlet.java:258) at com.bea.netuix.servlets.manager.UIServlet.doGet(UIServlet.java:211) at com.bea.netuix.servlets.manager.UIServlet.service(UIServlet.java:196) at com.bea.netuix.servlets.manager.SingleFileServlet.service(SingleFileServlet.java:251) at javax.servlet.http.HttpServlet.service(HttpServlet.java:820) at com.bea.console.utils.MBeanUtilsInitSingleFileServlet.service(MBeanUtilsInitSingleFileServlet.java:54) at weblogic.servlet.AsyncInitServlet.service(AsyncInitServlet.java:130) at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227) at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125) at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:292) at weblogic.servlet.internal.TailFilter.doFilter(TailFilter.java:26) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:42) at weblogic.servlet.internal.RequestEventsFilter.doFilter(RequestEventsFilter.java:27) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:42) at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3496) at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321) at weblogic.security.service.SecurityManager.runAs(Unknown Source) at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2180) at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2086) at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1406) at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201) at weblogic.work.ExecuteThread.run(ExecuteThread.java:173) Caused by: weblogic.management.utils.NotFoundException: [Security:090311]Failed to set resource expression at com.bea.security.providers.xacml.entitlement.RoleManager.getRole(RoleManager.java:134) at weblogic.security.providers.xacml.authorization.XACMLRoleMapperImpl.getRoleExpression(XACMLRoleMapperImpl.java:499) at weblogic.security.providers.xacml.authorization.XACMLRoleMapperMBeanImpl.getRoleExpression(XACMLRoleMapperMBeanImpl.java:389) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) at java.lang.reflect.Method.invoke(Method.java:597) at weblogic.management.jmx.modelmbean.WLSModelMBean.invoke(WLSModelMBean.java:437) at com.sun.jmx.interceptor.DefaultMBeanServerInterceptor.invoke(DefaultMBeanServerInterceptor.java:836) at com.sun.jmx.mbeanserver.JmxMBeanServer.invoke(JmxMBeanServer.java:761) at weblogic.management.jmx.mbeanserver.WLSMBeanServerInterceptorBase$16.run(WLSMBeanServerInterceptorBase.java:447) at weblogic.management.jmx.mbeanserver.WLSMBeanServerInterceptorBase.invoke(WLSMBeanServerInterceptorBase.java:445) at weblogic.management.mbeanservers.internal.SecurityInterceptor.invoke(SecurityInterceptor.java:443) at weblogic.management.mbeanservers.internal.AuthenticatedSubjectInterceptor$10$1.run(AuthenticatedSubjectInterceptor.java:582) at weblogic.management.mbeanservers.internal.AuthenticatedSubjectInterceptor$10.run(AuthenticatedSubjectInterceptor.java:580) at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:363) at weblogic.management.mbeanservers.internal.AuthenticatedSubjectInterceptor.invoke(AuthenticatedSubjectInterceptor.java:573) at weblogic.management.jmx.mbeanserver.WLSMBeanServer.invoke(WLSMBeanServer.java:307) at javax.management.remote.rmi.RMIConnectionImpl.doOperation(RMIConnectionImpl.java:1426) at javax.management.remote.rmi.RMIConnectionImpl.access$200(RMIConnectionImpl.java:72) at javax.management.remote.rmi.RMIConnectionImpl$PrivilegedOperation.run(RMIConnectionImpl.java:1264) at javax.management.remote.rmi.RMIConnectionImpl.doPrivilegedOperation(RMIConnectionImpl.java:1366) at javax.management.remote.rmi.RMIConnectionImpl.invoke(RMIConnectionImpl.java:788) at javax.management.remote.rmi.RMIConnectionImpl_WLSkel.invoke(Unknown Source) at weblogic.rmi.internal.ServerRequest.sendReceive(ServerRequest.java:174) at weblogic.rmi.internal.BasicRemoteRef.invoke(BasicRemoteRef.java:222) at javax.management.remote.rmi.RMIConnectionImpl_1030_WLStub.invoke(Unknown Source) at javax.management.remote.rmi.RMIConnector$RemoteMBeanServerConnection.invoke(RMIConnector.java:978) at weblogic.management.jmx.MBeanServerInvocationHandler.doInvoke(MBeanServerInvocationHandler.java:544) at weblogic.management.jmx.MBeanServerInvocationHandler.invoke(MBeanServerInvocationHandler.java:380) at $Proxy70.getRoleExpression(Unknown Source) at com.bea.console.actions.security.roles.RoleTableAction.createRoleNode(RoleTableAction.java:671) ... 81 more

    <?xml version='1.0' encoding='UTF-8'?>
    <domain xmlns="http://www.bea.com/ns/weblogic/920/domain" xmlns:sec="http://www.bea.com/ns/weblogic/90/security" xmlns:wls="http://www.bea.com/ns/weblogic/90/security/wls" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.bea.com/ns/weblogic/90/security/wls http://www.bea.com/ns/weblogic/90/security/wls.xsd http://www.bea.com/ns/weblogic/920/domain http://www.bea.com/ns/weblogic/920/domain.xsd http://www.bea.com/ns/weblogic/90/security/xacml http://www.bea.com/ns/weblogic/90/security/xacml.xsd http://www.bea.com/ns/weblogic/90/security http://www.bea.com/ns/weblogic/90/security.xsd">
    <name>ABC</name>
    <domain-version>10.0.1.0</domain-version>
    <security-configuration>
    <name>ABC</name>
    <realm>
    <sec:authentication-provider xsi:type="wls:default-authenticatorType">
    <sec:control-flag>OPTIONAL</sec:control-flag>
    <wls:propagate-cause-for-login-exception>false</wls:propagate-cause-for-login-exception>
    </sec:authentication-provider>
    <sec:authentication-provider xsi:type="wls:default-identity-asserterType">
    <sec:active-type>AuthenticatedUser</sec:active-type>
    </sec:authentication-provider>
    <sec:authentication-provider xsi:type="wls:active-directory-authenticatorType">
    <sec:name>MYSECURITY</sec:name>
    <sec:control-flag>OPTIONAL</sec:control-flag>
    <wls:propagate-cause-for-login-exception>false</wls:propagate-cause-for-login-exception>
    <wls:host>ad.win.XYZ.com</wls:host>
    <wls:port>3210</wls:port>
    <wls:user-name-attribute>SamAccountName</wls:user-name-attribute>
    <wls:principal>CN=ABC (APPLICATION),OU=Service Accounts,OU=Infrastructure Solutions,OU=USPC,DC=americas,DC=win,DC=xyz,DC=com</wls:principal>
    <wls:user-base-dn>DC=americas,DC=win,DC=xyz,DC=com</wls:user-base-dn>
    <wls:credential-encrypted>{3DES}3gr1b24C1+ZescfrcJGfTA==</wls:credential-encrypted>
    <wls:user-from-name-filter>(&amp;(SamAccountName=%u)(objectclass=user))</wls:user-from-name-filter>
    <wls:cache-size>3200</wls:cache-size>
    <wls:group-base-dn>DC=americas,DC=win,DC=xyz,DC=com</wls:group-base-dn>
    <wls:bind-anonymously-on-referrals>true</wls:bind-anonymously-on-referrals>
    <wls:all-groups-filter>(objectclass=group)</wls:all-groups-filter>
    <wls:group-membership-searching>limited</wls:group-membership-searching>
    </sec:authentication-provider>
    <sec:role-mapper xmlns:xac="http://www.bea.com/ns/weblogic/90/security/xacml" xsi:type="xac:xacml-role-mapperType"></sec:role-mapper>
    <sec:authorizer xmlns:xac="http://www.bea.com/ns/weblogic/90/security/xacml" xsi:type="xac:xacml-authorizerType"></sec:authorizer>
    <sec:adjudicator xsi:type="wls:default-adjudicatorType"></sec:adjudicator>
    <sec:credential-mapper xsi:type="wls:default-credential-mapperType"></sec:credential-mapper>
    <sec:cert-path-provider xsi:type="wls:web-logic-cert-path-providerType"></sec:cert-path-provider>
    <sec:cert-path-builder>WebLogicCertPathProvider</sec:cert-path-builder>
    <sec:name>myrealm</sec:name>
    </realm>
    <default-realm>myrealm</default-realm>
    <credential-encrypted>{3DES}Da9bWdtd5q7ah0l1OlmgTprs5EsrhL0siPsTNKzMDOasnQwrpgSVnAKFIdM3O/CjsXOzrq2fBACcbtup4aQCbNpjynWFUDB1</credential-encrypted>
    <node-manager-username>system</node-manager-username>
    <node-manager-password-encrypted>{3DES}IwjibsnAdGEU/pYi+0n1bg==</node-manager-password-encrypted>
    </security-configuration>
    <server>
    <name>AdminServer</name>
    <log>
    <file-name>logs/AdminServer.log</file-name>
    <rotation-type>byTime</rotation-type>
    <number-of-files-limited>true</number-of-files-limited>
    <file-count>7</file-count>
    <file-time-span>24</file-time-span>
    <rotation-time>00:00</rotation-time>
    <rotate-log-on-startup>true</rotate-log-on-startup>
    <logger-severity>Info</logger-severity>
    <log-file-severity>Info</log-file-severity>
    <stdout-severity>Info</stdout-severity>
    <domain-log-broadcast-severity>Notice</domain-log-broadcast-severity>
    <memory-buffer-severity>Trace</memory-buffer-severity>
    <log4j-logging-enabled>false</log4j-logging-enabled>
    <redirect-stdout-to-server-log-enabled>true</redirect-stdout-to-server-log-enabled>
    <domain-log-broadcaster-buffer-size>1</domain-log-broadcaster-buffer-size>
    </log>
    <listen-port>25000</listen-port>
    <server-debug>
    <debug-scope>
    <name>default</name>
    <enabled>true</enabled>
    </debug-scope>
    <debug-scope>
    <name>weblogic</name>
    <enabled>true</enabled>
    </debug-scope>
    </server-debug>
    <listen-address></listen-address>
    </server>
    <server>
    <name>ABC_server1</name>
    <ssl>
    <enabled>false</enabled>
    </ssl>
    <log>
    <file-name>logs/AdminServer.log</file-name>
    <number-of-files-limited>true</number-of-files-limited>
    <file-count>7</file-count>
    <file-time-span>24</file-time-span>
    <rotation-time>00:00</rotation-time>
    <rotate-log-on-startup>true</rotate-log-on-startup>
    <logger-severity>Info</logger-severity>
    <log-file-severity>Info</log-file-severity>
    <stdout-severity>Info</stdout-severity>
    <domain-log-broadcast-severity>Notice</domain-log-broadcast-severity>
    <memory-buffer-severity>Trace</memory-buffer-severity>
    <log4j-logging-enabled>false</log4j-logging-enabled>
    <redirect-stdout-to-server-log-enabled>true</redirect-stdout-to-server-log-enabled>
    <domain-log-broadcaster-buffer-size>1</domain-log-broadcaster-buffer-size>
    </log>
    <listen-port>25010</listen-port>
    <listen-port-enabled>true</listen-port-enabled>
    <web-server>
    <web-server-log>
    <number-of-files-limited>false</number-of-files-limited>
    </web-server-log>
    </web-server>
    <listen-address></listen-address>
    <java-compiler>javac</java-compiler>
    <client-cert-proxy-enabled>false</client-cert-proxy-enabled>
    </server>
    <server>
    <name>ABC_server2</name>
    <log>
    <file-name>logs/AdminServer.log</file-name>
    <number-of-files-limited>true</number-of-files-limited>
    <file-count>7</file-count>
    <file-time-span>24</file-time-span>
    <rotation-time>00:00</rotation-time>
    <rotate-log-on-startup>true</rotate-log-on-startup>
    <logger-severity>Info</logger-severity>
    <log-file-severity>Info</log-file-severity>
    <stdout-severity>Info</stdout-severity>
    <domain-log-broadcast-severity>Notice</domain-log-broadcast-severity>
    <memory-buffer-severity>Trace</memory-buffer-severity>
    <log4j-logging-enabled>false</log4j-logging-enabled>
    <redirect-stdout-to-server-log-enabled>true</redirect-stdout-to-server-log-enabled>
    <domain-log-broadcaster-buffer-size>1</domain-log-broadcaster-buffer-size>
    </log>
    <listen-port>25020</listen-port>
    <web-server>
    <web-server-log>
    <number-of-files-limited>false</number-of-files-limited>
    </web-server-log>
    </web-server>
    <listen-address></listen-address>
    </server>
    <server>
    <name>ABC_server4</name>
    <log>
    <file-name>logs/AdminServer.log</file-name>
    <number-of-files-limited>true</number-of-files-limited>
    <file-count>7</file-count>
    <file-time-span>24</file-time-span>
    <rotation-time>00:00</rotation-time>
    <rotate-log-on-startup>true</rotate-log-on-startup>
    <logger-severity>Info</logger-severity>
    <log-file-severity>Info</log-file-severity>
    <stdout-severity>Info</stdout-severity>
    <domain-log-broadcast-severity>Notice</domain-log-broadcast-severity>
    <memory-buffer-severity>Trace</memory-buffer-severity>
    <log4j-logging-enabled>false</log4j-logging-enabled>
    <redirect-stdout-to-server-log-enabled>true</redirect-stdout-to-server-log-enabled>
    <domain-log-broadcaster-buffer-size>1</domain-log-broadcaster-buffer-size>
    </log>
    <listen-port>25040</listen-port>
    <web-server>
    <web-server-log>
    <number-of-files-limited>false</number-of-files-limited>
    </web-server-log>
    </web-server>
    <listen-address></listen-address>
    </server>
    <server>
    <name>ABC_server5</name>
    <ssl>
    <enabled>false</enabled>
    </ssl>
    <log>
    <file-name>logs/AdminServer.log</file-name>
    <number-of-files-limited>true</number-of-files-limited>
    <file-count>7</file-count>
    <file-time-span>24</file-time-span>
    <rotation-time>00:00</rotation-time>
    <rotate-log-on-startup>true</rotate-log-on-startup>
    <logger-severity>Info</logger-severity>
    <log-file-severity>Info</log-file-severity>
    <stdout-severity>Info</stdout-severity>
    <domain-log-broadcast-severity>Notice</domain-log-broadcast-severity>
    <memory-buffer-severity>Trace</memory-buffer-severity>
    <log4j-logging-enabled>false</log4j-logging-enabled>
    <redirect-stdout-to-server-log-enabled>true</redirect-stdout-to-server-log-enabled>
    <domain-log-broadcaster-buffer-size>1</domain-log-broadcaster-buffer-size>
    </log>
    <machine xsi:nil="true"></machine>
    <listen-port>25050</listen-port>
    <cluster xsi:nil="true"></cluster>
    <web-server>
    <web-server-log>
    <number-of-files-limited>false</number-of-files-limited>
    </web-server-log>
    </web-server>
    </server>
    <server>
    <name>ABC_server6</name>
    <log>
    <file-name>logs/AdminServer.log</file-name>
    <number-of-files-limited>true</number-of-files-limited>
    <file-count>7</file-count>
    <file-time-span>24</file-time-span>
    <rotation-time>00:00</rotation-time>
    <rotate-log-on-startup>true</rotate-log-on-startup>
    <logger-severity>Info</logger-severity>
    <log-file-severity>Info</log-file-severity>
    <stdout-severity>Info</stdout-severity>
    <domain-log-broadcast-severity>Notice</domain-log-broadcast-severity>
    <memory-buffer-severity>Trace</memory-buffer-severity>
    <log4j-logging-enabled>false</log4j-logging-enabled>
    <redirect-stdout-to-server-log-enabled>true</redirect-stdout-to-server-log-enabled>
    <domain-log-broadcaster-buffer-size>1</domain-log-broadcaster-buffer-size>
    </log>
    <listen-port>25060</listen-port>
    <web-server>
    <web-server-log>
    <number-of-files-limited>false</number-of-files-limited>
    </web-server-log>
    </web-server>
    <listen-address></listen-address>
    </server>
    <server>
    <name>ABC_server7</name>
    <log>
    <file-name>logs/AdminServer.log</file-name>
    <number-of-files-limited>true</number-of-files-limited>
    <file-count>7</file-count>
    <file-time-span>24</file-time-span>
    <rotation-time>00:00</rotation-time>
    <rotate-log-on-startup>true</rotate-log-on-startup>
    <logger-severity>Info</logger-severity>
    <log-file-severity>Info</log-file-severity>
    <stdout-severity>Info</stdout-severity>
    <domain-log-broadcast-severity>Notice</domain-log-broadcast-severity>
    <memory-buffer-severity>Trace</memory-buffer-severity>
    <log4j-logging-enabled>false</log4j-logging-enabled>
    <redirect-stdout-to-server-log-enabled>true</redirect-stdout-to-server-log-enabled>
    <domain-log-broadcaster-buffer-size>1</domain-log-broadcaster-buffer-size>
    </log>
    <listen-port>25070</listen-port>
    <web-server>
    <web-server-log>
    <number-of-files-limited>false</number-of-files-limited>
    </web-server-log>
    </web-server>
    <listen-address></listen-address>
    </server>
    <server>
    <name>ABC_server8</name>
    <log>
    <file-name>logs/AdminServer.log</file-name>
    <number-of-files-limited>true</number-of-files-limited>
    <file-count>7</file-count>
    <file-time-span>24</file-time-span>
    <rotation-time>00:00</rotation-time>
    <rotate-log-on-startup>true</rotate-log-on-startup>
    <logger-severity>Info</logger-severity>
    <log-file-severity>Info</log-file-severity>
    <stdout-severity>Info</stdout-severity>
    <domain-log-broadcast-severity>Notice</domain-log-broadcast-severity>
    <memory-buffer-severity>Trace</memory-buffer-severity>
    <log4j-logging-enabled>false</log4j-logging-enabled>
    <redirect-stdout-to-server-log-enabled>true</redirect-stdout-to-server-log-enabled>
    <domain-log-broadcaster-buffer-size>1</domain-log-broadcaster-buffer-size>
    </log>
    <listen-port>25080</listen-port>
    <web-server>
    <web-server-log>
    <number-of-files-limited>false</number-of-files-limited>
    </web-server-log>
    </web-server>
    <listen-address></listen-address>
    </server>
    <server>
    <name>ABC_server10</name>
    <log>
    <file-name>logs/AdminServer.log</file-name>
    <number-of-files-limited>true</number-of-files-limited>
    <file-count>7</file-count>
    <file-time-span>24</file-time-span>
    <rotation-time>00:00</rotation-time>
    <rotate-log-on-startup>true</rotate-log-on-startup>
    <logger-severity>Info</logger-severity>
    <log-file-severity>Info</log-file-severity>
    <stdout-severity>Info</stdout-severity>
    <domain-log-broadcast-severity>Notice</domain-log-broadcast-severity>
    <memory-buffer-severity>Trace</memory-buffer-severity>
    <log4j-logging-enabled>false</log4j-logging-enabled>
    <redirect-stdout-to-server-log-enabled>true</redirect-stdout-to-server-log-enabled>
    <domain-log-broadcaster-buffer-size>1</domain-log-broadcaster-buffer-size>
    </log>
    <listen-port>25100</listen-port>
    <web-server>
    <web-server-log>
    <number-of-files-limited>false</number-of-files-limited>
    </web-server-log>
    </web-server>
    <listen-address></listen-address>
    </server>
    <server>
    <name>ABC_server9</name>
    <log>
    <file-name>logs/AdminServer.log</file-name>
    <number-of-files-limited>true</number-of-files-limited>
    <file-count>7</file-count>
    <file-time-span>24</file-time-span>
    <rotation-time>00:00</rotation-time>
    <rotate-log-on-startup>true</rotate-log-on-startup>
    <logger-severity>Info</logger-severity>
    <log-file-severity>Info</log-file-severity>
    <stdout-severity>Info</stdout-severity>
    <domain-log-broadcast-severity>Notice</domain-log-broadcast-severity>
    <memory-buffer-severity>Trace</memory-buffer-severity>
    <log4j-logging-enabled>false</log4j-logging-enabled>
    <redirect-stdout-to-server-log-enabled>true</redirect-stdout-to-server-log-enabled>
    <domain-log-broadcaster-buffer-size>1</domain-log-broadcaster-buffer-size>
    </log>
    <listen-port>25090</listen-port>
    <web-server>
    <web-server-log>
    <number-of-files-limited>false</number-of-files-limited>
    </web-server-log>
    </web-server>
    <listen-address></listen-address>
    </server>
    <server>
    <name>ABC_server3</name>
    <log>
    <file-name>logs/AdminServer.log</file-name>
    <number-of-files-limited>true</number-of-files-limited>
    <file-count>7</file-count>
    <file-time-span>24</file-time-span>
    <rotation-time>00:00</rotation-time>
    <rotate-log-on-startup>true</rotate-log-on-startup>
    <logger-severity>Info</logger-severity>
    <log-file-severity>Info</log-file-severity>
    <stdout-severity>Info</stdout-severity>
    <domain-log-broadcast-severity>Notice</domain-log-broadcast-severity>
    <memory-buffer-severity>Trace</memory-buffer-severity>
    <log4j-logging-enabled>false</log4j-logging-enabled>
    <redirect-stdout-to-server-log-enabled>true</redirect-stdout-to-server-log-enabled>
    <domain-log-broadcaster-buffer-size>1</domain-log-broadcaster-buffer-size>
    </log>
    <listen-port>25030</listen-port>
    <web-server>
    <web-server-log>
    <number-of-files-limited>false</number-of-files-limited>
    </web-server-log>
    </web-server>
    <server-debug>
    <debug-scope>
    <name>default</name>
    <enabled>true</enabled>
    </debug-scope>
    <debug-scope>
    <name>weblogic</name>
    <enabled>true</enabled>
    </debug-scope>
    </server-debug>
    <listen-address></listen-address>
    </server>
    <embedded-ldap>
    <name>ABC</name>
    <credential-encrypted>{3DES}RhnPr+8XsDxhU8rgpPiikqpyeP74wxX/T2mnALX9oFI=</credential-encrypted>
    </embedded-ldap>
    <configuration-version>10.0.1.0</configuration-version>
    <configuration-audit-type>logaudit</configuration-audit-type>
    <app-deployment>
    <name>ABC25090</name>
    <target>ABC_server9</target>
    <module-type>ear</module-type>
    <source-path>/home/arajpoot/working/default-app/dist/ABC.9.5.0.ear</source-path>
    <security-dd-model>DDOnly</security-dd-model>
    </app-deployment>
    <app-deployment>
    <name>ABC25080</name>
    <target>ABC_server8</target>
    <module-type>ear</module-type>
    <source-path>/home/aherleka/working/default-app/dist/ABC.10.1.0.ear</source-path>
    <security-dd-model>DDOnly</security-dd-model>
    </app-deployment>
    <app-deployment>
    <name>ABC25030</name>
    <target>ABC_server3</target>
    <module-type>ear</module-type>
    <source-path>/home/rprajapa/working/default-app/dist/ABC.10.1.0.ear</source-path>
    <security-dd-model>DDOnly</security-dd-model>
    </app-deployment>
    <app-deployment>
    <name>ABC25060</name>
    <target></target>
    <module-type>ear</module-type>
    <source-path>/home/xyin/working/default-app/dist/ABC.10.1.0.ear</source-path>
    <sub-deployment>
    <name>/</name>
    <target></target>
    </sub-deployment>
    <security-dd-model>DDOnly</security-dd-model>
    <staging-mode>nostage</staging-mode>
    </app-deployment>
    <app-deployment>
    <name>ABC25010</name>
    <target>ABC_server1</target>
    <module-type>ear</module-type>
    <source-path>/home/payadav/working/default-app/dist/ABC.10.1.0.ear</source-path>
    <security-dd-model>DDOnly</security-dd-model>
    </app-deployment>
    <app-deployment>
    <name>ABC25050</name>
    <target>ABC_server5</target>
    <module-type>ear</module-type>
    <source-path>/home/nchanda1/working/default-app/dist/ABC.10.0.3.ear</source-path>
    <security-dd-model>DDOnly</security-dd-model>
    </app-deployment>
    <app-deployment>
    <name>ABC8070</name>
    <target>ABC_server7</target>
    <module-type>ear</module-type>
    <source-path>/home/irakshit/working/default-app/dist/ABC.10.1.0.ear</source-path>
    <security-dd-model>DDOnly</security-dd-model>
    </app-deployment>
    <app-deployment>
    <name>ABC8020</name>
    <target>ABC_server2</target>
    <module-type>ear</module-type>
    <source-path>/home/wchou/working/default-app/ABC.ear</source-path>
    <security-dd-model>DDOnly</security-dd-model>
    </app-deployment>
    <app-deployment>
    <name>ABC8100</name>
    <target>ABC_server10</target>
    <module-type>ear</module-type>
    <source-path>/home/amulik/working/default-app/dist/ABC.9.5.0.ear</source-path>
    <security-dd-model>DDOnly</security-dd-model>
    </app-deployment>
    <app-deployment>
    <name>ABC8040</name>
    <target>ABC_server4</target>
    <module-type>ear</module-type>
    <source-path>/home/nchanda1/working/default-app/dist/ABC.10.0.3.ear</source-path>
    <security-dd-model>DDOnly</security-dd-model>
    </app-deployment>
    <admin-server-name>AdminServer</admin-server-name>
    <jdbc-system-resource>
    <name>ABCCDWDataSource</name>
    <target>ABC_server9,ABC_server8,ABC_server3,ABC_server1,ABC_server5,ABC_server7,ABC_server2,ABC_server10,ABC_server4,ABC_server6</target>
    <descriptor-file-name>jdbc/ABCCDWDataSource-2021-jdbc.xml</descriptor-file-name>
    </jdbc-system-resource>
    <jdbc-system-resource>
    <name>ABCCDWDataSource_coper</name>
    <target>ABC_server9,ABC_server8,ABC_server3,ABC_server1,ABC_server5,ABC_server7,ABC_server2,ABC_server10,ABC_server4,ABC_server6</target>
    <descriptor-file-name>jdbc/ABCCDWDataSource_coper-9655-jdbc.xml</descriptor-file-name>
    </jdbc-system-resource>
    <jdbc-system-resource>
    <name>ABCOracleDS</name>
    <target>ABC_server9,ABC_server8,ABC_server3,ABC_server1,ABC_server5,ABC_server7,ABC_server2,ABC_server10,ABC_server4,ABC_server6</target>
    <descriptor-file-name>jdbc/ABCOracleDS-5997-jdbc.xml</descriptor-file-name>
    </jdbc-system-resource>
    <jdbc-system-resource>
    <name>ABCReportDataSource</name>
    <target>ABC_server9,ABC_server8,ABC_server3,ABC_server1,ABC_server5,ABC_server7,ABC_server2,ABC_server10,ABC_server4,ABC_server6</target>
    <descriptor-file-name>jdbc/ABCReportDataSource-6033-jdbc.xml</descriptor-file-name>
    </jdbc-system-resource>
    <jdbc-system-resource>
    <name>ABC_NEON_DATASOURCE</name>
    <target>ABC_server9,ABC_server8,ABC_server3,ABC_server1,ABC_server5,ABC_server7,ABC_server2,ABC_server10,ABC_server4,ABC_server6</target>
    <descriptor-file-name>jdbc/ABC_NEON_DATASOURCE-9653-jdbc.xml</descriptor-file-name>
    </jdbc-system-resource>
    <jdbc-system-resource>
    <name>ABCRDRDS</name>
    <target>ABC_server9,ABC_server8,ABC_server3,ABC_server1,ABC_server5,ABC_server7,ABC_server2,ABC_server10,ABC_server4,ABC_server6</target>
    <descriptor-file-name>jdbc/ABCRDRDS-5401-jdbc.xml</descriptor-file-name>
    </jdbc-system-resource>
    <jdbc-system-resource>
    <name>ABCtest</name>
    <target>ABC_server6</target>
    <descriptor-file-name>jdbc/ABCtest-jdbc.xml</descriptor-file-name>
    </jdbc-system-resource>
    <jdbc-system-resource>
    <name>ABCreport</name>
    <target>ABC_server6</target>
    <descriptor-file-name>jdbc/ABCreport-jdbc.xml</descriptor-file-name>
    </jdbc-system-resource>
    </domain>

  • LDAP groups and WebLogic Roles - Urgent ( weblogic 6.1 sp1, iPLanet 5.1)

    I have 2 questions and these are very urgent :-
    1. Where the mapping can be defined between LDAP groups and WebLogic Roles. I have
    2 groups in iPLanet :- Contarctors and employees and I have 2 security roles in weblogic:-
    contractactors and employess. How do I map LDAP group contractors to weblogic security
    Role contractors? Similarly for employees ?
    2. I have not defined contarctors and employeees under People container in IPlanet.
    e.g. The RDN for contractor is
    uid=1234,ou=dir,dc=orams,dc=com
    Can I still use the defualt security realm of weblogic (the WebLogic Security Realm
    under People ) OR I have to write my own custom code ?
    3. I am planning to use Roles insetad of groups to manage the logical grouping in
    iPLant. Can I still use the groups in WebLogic security realm ( in the configuratin
    parameters ?)
    This is very urgent ....so if any of you can throw any hints that will be greatly
    appreciated.
    --Sunita

    Hi Ariel,
    The driver is bundled with the product in WLS 6.1sp1. you don't have to
    download any additional driver. Use it as you normally would only thing to
    remember is if you are trying to write standalone java code then you have to
    have weblogic.jar in your classpath. For the rest of the info follow the wls
    docs for 6.1
    HTH
    sree
    "Ariel" <[email protected]> wrote in message
    news:3bb4a643$[email protected]..
    We want to connect our Weblogic 6.1 sp1 server to a SQLServer 2000 db. We
    downloaded the JDriver from bea.com, but all the istructions that camewith
    it are for WLserver 5.1.
    What has to be done to do this with 6.1 sp1?
    Thanks,
    Ariel

  • Weblogic.jws.Policies.class is missing in weblogic.jar and wlfullclient.jar

    Hi,
    I am trying to upgrade Weblogic from 9.1 to 10.3.2 or 10.3.3
    In Weblogic 9.1, our application used weblogic.jar in our classpath.
    After we installed Weblogic 10.3.3, the new weblogic.jar can be found in: <WLS_HOME>\wlserver_10.3\server\lib
    However, some class files are missing and we realized we need to manually generate wlfullclient.jar and use this jar file instead.
    Reference: http://download.oracle.com/docs/cd/E12840_01/wls/docs103/client/jarbuilder.html
    The problem is that in Weblogic 10.3.3, the following class files are missing inside weblogic.jar and wlfullclient.jar
    - import weblogic.jws.Policies
    - import weblogic.jws.Policy
    Hence, our application is getting an "The import weblogic.jws.Policies cannot be resolved" error in our code.
    I look inside both weblogic.jar and wlfullclient.jar, weblogic.jws.Policies and weblogic.jws.Policy cannot be found.
    This is not an issue in Weblogic 10.3.2. These two classes can be found in wlfullclient.jar
    Any idea where I can find these class files for Weblogic 10.3.3 or something we are doing is incorrectly?
    Thanks
    Toan

    Hi,
    This missing classes can be found inside the JAR : *"E:\bea10_3_3\wlserver_10.3\server\lib\wseeclient.jar"* As well as inside *"E:\bea10_3_3\wlserver_10.3\server\lib\wls-api.jar"*
    Thanks
    Jay SenSharma
    http://weblogic-wonders.com/weblogic/webservices/ (WebLogic Wonders Are Here)

  • OAM manage roles and Authorization in WebLogic integration

    Hi
    Had anyone done weblogic integration where OAM manages roles and Authorization?
    I could read in Oracle WebLogic integration document that,
    "The Security Provider only supports authentication for portals."
    I wanted to figure out if anyone has done this before or Is it possible to delegate role management and Authorization responsibility to OAM?
    Thanks
    Kiran Thakkar

    Thanks for the quick response.
    Thanks
    Kiran Thakkar

  • How can you create a weblogic ID and restrict access within weblogic?

    for e.g. I would like to create an account 'x' in weblogic and give this user access to only 'security realms' within weblogic and NO other functionality.
    Is this possible?
    Thanks.

    In OBIEE 11g the weblogic roles follow the same type of logic as we all have come to enjoy from role based security.
    There are some default roles in WLS such as Deployer, Administrator, etc. defined by default in web logic.
    You can create a WebLogic user using the DefaultProider, Security Realm > Realm > User >New ...
    and then add that user to a group or directly to a new Policy Role.
    Take a look at the "Administrators" Group for an example of how it relates to the global "Admin" role under the Role & Policies tab.
    Finally, I don't think that you can isolate just the Security Realm for a Web Logic user. Take a look at this document to see what aspects you can provide privileges on,
    http://download.oracle.com/docs/cd/E14571_01/web.1111/e13747/types.htm#i1241945
    Cheers,
    Christian
    http://www.artofbi.com

  • Security-role and security-role-assignment not working in WL7.0

    Hello all..
    Some EJB components that worked fine in WebLogic 6.1 no longer work in
    WL7.0. It has to do with the security-role and security-role-assignment
    descriptor elements no longer allowing anonymous users to be included in the
    authorization for a bean.
    For example, in WL6.1 placing these items in ejb-jar.xml:
    <assembly-descriptor>
    <security-role>
    <role-name>Employees</role-name>
    </security-role>
    <method-permission>
    <role-name>Employees</role-name>
    <method>
    <ejb-name>CustomerEJB</ejb-name>
    <method-name>*</method-name>
    </method>
    </method-permission>
    and mapping WebLogic default users to this role in weblogic-ejb-jar.xml:
    <security-role-assignment>
    <role-name>Employees</role-name>
    <principal-name>guest</principal-name>
    <principal-name>system</principal-name>
    </security-role-assignment>
    worked fine for clients creating their context using a simple
    InitialContext() constructor without specifying SECURITY_PRINCIPAL or
    SECURITY_CREDENTIALS. These users were basically "guest" to WebLogic, and
    the security-role-assignment element above told WebLogic that "guest" was in
    the Employees role for purposes of this EJB archive.
    Worked in WL6.1, no longer works in WL7.0. Client receives typical
    permission exception:
    java.rmi.AccessException: Security violation: insufficient permission to
    access method 'create'
    If I explicity connect as "system" things are fine, or I can create a new
    user in the default realm in WebLogic, put a matching <principal-name>
    element in the section above, and connect as that user. Note that if I leave
    off the <security-role> section completely, or set the required role name to
    "everyone", the anonymous access works fine. Apparently the anonymous user
    is a member of "everyone" behind the scenes even though "everyone" does not
    appear in the realm list of groups or roles.
    So, my question boils down to this: Is there a "magic" username in WL7 like
    "guest" was in WL6.1 that can be mapped to the required role name, or must
    every client connection use a true weblogic-created user with appropriate
    role assignments used to map it to the required role name.
    -Greg
    P.S. Note that none of the EJB examples provided with WL used
    <security-role>..
    Check out my WebLogic 6.1 Workbook for O'Reilly EJB Third Edition
    www.amazon.com/exec/obidos/ASIN/1931822468 or www.titan-books.com

    Below are the screen shots for PFCG:

  • Issues with test-all role and browser security

    WLS 10.3.5
    I have a deployed application on Linux using a SQLAuthentication and Authorization - all is well here.
    I have setup all the security (without the test-all role) and I cannot access any of the system.
    If I put the test-all role in - I can access the system.
    I have verified the user has all the roles (I used the example bean to display the user and roles on the menu page) and the test-all role is not in the list.
    I have the menu setup to not display items unless the user has the role (this is working fine - SecurityContext.inRole(rolelist).
    So the context is fine.
    I used jazn-data to set the same roles in the taskflows - this is not working at all unless the test-all role is set - I get authorization errors - not authorized).
    Have I missed something in this?
    I have also noticed that if I close the browser (X) without logging out and come back into the system the authentication is totally bypassed and I go back in as the same user as before.
    Is there some way to destroy the previous context every time the welcome screen is executed.

    Add the following parameters to the Run options for the ViewController project:
    -Djps.auth.debug=true -Djps.auth.debug.verbose=true
    Then restart WebLogic, run the app and watch the console - you'll see all the security evaluations take place which should help you to identify the problem.

  • Associate roles and permissions to users that existe on a database

    Hi,
    i want realise a secure authentification i used ADF Configuration but i found out that i cant bring my users from my database. i can just create new users with roles in Jdeveloper.
    do you how we can bring users to Jdeveloper and associate to them roles and permission ?

    i found this tutorial that is that what i did :
    1. Start up weblogic server (Run .. Start Server Instance)
    2. Log on to weblogic console ( http://localhost:7101/console/ )
    3. Use default username/password weblogic/weblogic1
    4. Create a datasource to connect to the schema where the authenticating database tables are (Services .. JDBC .. Data Sources)
    5. Use unique name for datasource. Use JINDI name of jdbc/
    6. Enter database name, schema name and password and test
    7. Add new Authentication provider (Security Realms .. myrealm .. Providers .. New)
    8. Enter datasource name, type SQLAuthenticator click Ok
    9. Going back into provider, change control flag to Sufficient
    10. Select Provider Specific tab and choose Plaintext passwords, password algorithm SHA-1
    11. Shut down weblogic
    12. Edit config.xml file in JDEV_DIR/system11.1.1.2.36.55.36/DefaultDomain/config and replace sql authenticator sql statements with those from web blog
    13. Restart weblogic.
    14. Go to users/groups tab in securty realm and view users and groups imported from database
    15. Set control flag for other providers to "Sufficient"
    source : http://brent.hmdclinical.com/2010/03/using-database-tables-as-weblogic.html
    but the step 12 i dont know what i need to change and with what ?

  • Weblogic Admin and Managed Server start using boot.properties and LDAP Acc.

    Hello - Can any one please tell me if Weblogic 10.3.x can be started using boot.properties file and by using a user account from the External LDAP (OID) server?
    I have configured the Weblogic server and have added a LDAP authenticator.
    The Group in OID is mapped to the Admin role in Weblogic so that the user can start and stop the server.
    LDAP users can successfully authenticate and access WLS console.
    We would like to remove Default Authenticator (Embeded LDAP) from the list of available providers for our security releam.
    Thank you.

    Tested and got it worked.

  • Doubt about Role and Policy

    Hi everyone,
    I have a doubt about role and policy,
    I'm using OBIEE11.1.1.5, I try to creating role R1 by creating like BIConsumer.
    then I go to policies interface,Edit 'BIConsumer' policy,
    I find only one role 'BIConsumer' under grantee.
    so I'd like to ask why 'R1' is not under policy 'BIConsumer' while R1 has permission like role BIConsumer ???
    thanks in advance!

    Application policies are sets of java permissions that are associated with a principal which is BIConsumer role in this case which grants permissions necessary to use, or to consume, content created by other users.
    So when you try to create like BIConsumer, you are not modifying the existing BIConsumer principal policy( which you should never do) but instead trying to create one similar grants like it.
    Usually as long as you are not dealing with BI Publisher, Financial Reporting and Real-Time Decisions application security permissions restriction, you would not have to modify any of these policies and use the default ones.
    Hope this helps. Pls mark if it does.
    Thanks,
    SVS

  • Authorization standards and policies

    hello guru's
    i am junior security guy. i am in starting stage of implementing  security. please let me know the
    Authorisation standards and policies for implementing. <removed_by_moderator>
    authorizations
    thanks
    Ramesh
    Edited by: Julius Bussche on Feb 2, 2008 1:29 PM

    Hi Ramesh,
    Welcome to the world of SAP BASIS.Keep this in your mind if you are going to handle SAP roles and authorization project :-
    Every company have different authorization policies there is no single document available for this but you may no need to that much worry because if you are Jr. basis consultant then you may not have to design the authorization policies and also
    there should be one Sr. for each module who will tell you the required authorization objects or the set of transactions needed for the consultants under him.you just have to execute what they say.for this you need to run T-code - PFCG.
    just study the concept of master role ,derived role.
    just Ask if you have any doubt in roles and authorizations.
    Best of Luck  !
    Regards,
    Rohit

  • Configuring roles and users (adf security) application context wise.

    Dear All,
    I referred this tutorial (http://biemond.blogspot.com/2008/12/using-database-tables-as-authentication.html) which shows how to hook up adf security with database schema but at domain level which will be common to all applications in that domain. I want to make it different to each application. (i.e each application will use differene database schema for storing user credientials i.e enterprise roles,application roles and users.)
    Can any one please point me to proper way..
    Regards,
    Santosh
    jdev 11.1.1.2.0

    Dear Frank,
    <i>
    Instead you have a single identity management system and have the application policies being different for the applications.Using ADF Security, users and groups can have different privileges in different applications
    </i>
    suppose i have 3 applications that use adf security, the users will be common to all applications. right..?Roles and group can be different for applications.
    application polices means roles and group..?
    So how it(application polices) can be made different for applications? is it inbuilt or some configurations needed ?. Can you point me to some blogs or tutorials for more reference.
    Bet: Incase i hook up adf security with database schema.
    Regards,
    Santosh.

Maybe you are looking for

  • Unable to see DNG files in Photoshop CS2

    Hi: I am using Photoshop CS2 in Windows XP Pro and have *.CR2 pictures taken with Canon EOS 40D. I downloaded Camera_Raw_3.7.zip and extracted Camera Raw.8bi to C:\Program Files\Common Files\Adobe\Plug-Ins\CS2\File Formats I downloaded Adobe DNG Conv

  • How to link text-boxes in Pages 5.2?

    How do you link text-boxes in Pages 5.2?

  • WHY is my iMac so SLOW with my Airport Extreme?!?!?

    I have an iMac G5 and an Airport  Extreme base station.  I just opened Safari on the iMac and in the time it took for it to open the Apple home page I was able to go to my backpack, dig out my HP Netbook, turn it on, log in to Windows, open Safari, a

  • XML Forms and URL links in RenderListItem Form

    Hello everyone, I'm new at XML Forms and trying to do my first forms. I have this scenario: - user fills several entry fields in "Edit" Form, 2 of them include URL Links. - Every new entry in "RenderListItem" Form lists fields "Title" and URL1 URL2.

  • Abstract class and a static method

    Can i call a static method within an abstract class ?