Authentication PKI (CAC) of the client app WebLogic

Has anyone done the customer technical (Common Access Card) Weblogic app? Can someone point me to document?
We have a Weblogic application that is authenticated through LDAP. I have an obligation for the activation of the PKI client authentication.

Published by: user12220476 on May 8, 2010 09:37

Authentication based on PKI, if I'm not mistaken is certificate-based authentication.
You can do this by configuring 2 Way SSL with the Weblogic Server.

WebLogic Server validates the certificate sent by the client.

To know which configurations are required on WLS, go through this post.

http://secure-zone.blogspot.com/2009/10/configuring-two-way-SSL-between-client.html

You get an idea.

Tags: Fusion Middleware

Similar Questions

  • List of fixes included in the client light weblogic 8.1.5 8.1.6

    Hello

    Where can I get a list of the fixes included in 8.1.5 and 8.1.6 the weblogic jms client updates?

    Thanks in advance.

    Generally, it is in the section known and fixed issues:
    http://eDOCS.BEA.com/WLS/docs81/notes/issues.html#1296016

    I see nothing specific to JMS there but then you may have to contact Support to get the complete list of fixes.

  • Direct connection VMAgent: black / activity of the Client - logs show authentication error - please help

    If anyone has experience with this, I would appreciate the help.  I have tried everything I can find for three days, and it still does not.  I think I have a problem of local authentication on the Agent of the view.  The user is included in the Remote Desktop user group and the view group Agent direct connection to users.  There is no errors in the event logs, but there are errors in the logs VDM.  The suspect is the user 'WIN7B\user' unauthorized (non-local admin).  I can't find a solution to solve this error.  The firewall is disabled.

    Symptoms: Horizon View Client makes the initial connection logon sound, black screen, time-out.  User is logged on to the remote computer after failure of connection of Horizon view, then part of the logon process ends.

    Capture of logs on the Agent computer:

    2015-12 - T 11, 14: 21:16.102 - 06:00 DEBUG (04DC-0E10) < MessageFrameWorkDispatch > [MessageFrameWork] added worker MessageFrameWork, Name = PCoIPVChan-APP (3608), Description = PCoIPVChan, channel = 0000000003F0E960

    2015-12 - T 11, 14: 21:16.102 - 06:00 DEBUG (0E18-0A3C) < 2620 > [TPAutoConnect] pcoip_vchan_plugin_app_init2(): loan on the session 1

    2015-12 - T 11, 14: 21:16.102 - 06:00 DEBUG (04DC - 0 C 84) < MessageChannel ReceiveThread > [MessageFrameWork] 'WIN7B\user' unauthorized (non-local admin) user, tail = PCoIPVChan-SVR (1) tip = MESSAGE_IPC

    2015-12 - T 11, 14: 21:16.102 - 06:00 DEBUG (04DC - 0 C 84) < MessageChannel ReceiveThread > [MessageFrameWork] 'WIN7B\user' unauthorized (non-local admin) user, tail = PCoIPVChan-SVR (1) tip = MESSAGE_IPC

    2015-12 - T 11, 14: 21:16.102 - 06:00 DEBUG (04DC - 0 C 84) < MessageChannel ReceiveThread > [MessageFrameWork] 'WIN7B\user' unauthorized (non-local admin) user, tail = PCoIPVChan-SVR (1) tip = MESSAGE_IPC

    2015-12 - T 11, 14: 21:16.102 - 06:00 DEBUG (0E18 - 110 C) < VChanConnectionMonitor > [TPAutoConnect] VChanConnectionMonitor(): failed to get the ID of process PCoIP (err = IPC_ERROR)

    2015-12 - T 11, 14: 21:16.102 - 06:00 DEBUG (04DC - 0 C 84) < MessageChannel ReceiveThread > [MessageFrameWork] 'WIN7B\user' unauthorized (non-local admin) user, tail = PCoIPVChan-SVR (1) tip = MESSAGE_IPC

    What works:

    RDP by Horizon View Client and RDP Windows Client connections.

    Installed on the server:

    ESXi 6.0

    Windows 7 64 bit

    And the following VMWare products:

    file.png

    Installed on the Client:

    Office Window 8.1

    file.png

    What I'm trying to demonstrate:

    file.png

    Portscan on Agent computer:

    PORTSTATE SERVICE

    135/tcp open msrpc

    139/tcp open netbios-ssn

    443/tcp open https

    445/tcp open microsoft-ds

    554/tcp open rtsp

    2869/tcp open icslap

    3389/tcp open ms-wbt-server

    4000/tcp open remoteanything

    5357/tcp open wsdapi

    9427/tcp open unknown

    10243/tcp open unknown

    22443/tcp open unknown

    32111/tcp open unknown

    MAC address: 00: 0C: 29:92:C9:CF (VMware)

    The full debug log file is attached.

    It certainly works in other environments, so it must be something to do with your specific configuration.

    I know that in the beginning, it has not been enough video RAM configured and certainly causes a PCoIP black screen.

    2015-12 - 10T 14: 29:07.819 - 06:00 INFO (1074-041 C) [wsnm_xmlapi] video driver name = VMware SVGA 3D

    2015-12 - 10T 14: 29:07.819 - 06:00 INFO (1074-041 C) [wsnm_xmlapi] Version of the video driver = 8.15.1.32

    2015-12 - 10T 14: 29:07.819 - 06:00 INFO (1074-041 C) [wsnm_xmlapi] video = 8 MB RAM

    It seems that this problem has been corrected, because later we see:

    2015-12 - 10T 14: 56:55.626 - 06:00 INFO (04DC - 09C 4) [wsnm_xmlapi] video = 128 MB RAM

    I also see that the modified host name:

    2015-12 - 10T 15: 03:27.050 - 06:00 WARN (04 B 0-0858) [wsnm_xmlapi] default SSL server certificate is not for this host name. The name may have changed.

    VADC itself automatically corrects the server SSL certificate, but maybe it's the other parts of the Agent posed problems that we see:

    2015-12 - 11T 09: 16:15.351 - 06:00 WARN (04EC-0CB4) authentication ticket error [MessageFrameWork]

    2015-12 - 11T 09: 16:15.351 - 06:00 WARN (04EC-0CB4) [MessageFrameWork] unable to accept the connection, authentication failed

    This does not refer to the authentication of the user customer Horizon (which is successful). This authentication is internal within the messaging system.

    Given previous problems with this Setup, I can only suggest you uninstall VADC and Agent, restart, and then reinstall the Agent and the VADC. Don't change video RAM or change the name of host/computer name.

    Let us know if that fixes it.

  • Approach new (and amazingly illogical) blackBerry client app in the world of BB

    A week or two ago, I started to see a lot less critical being represented in the client world BB for all applications, the number of existing comments indicated for this app on its title bar. For example, the title implies that there are 8 comments, but only 2 are presented. I thought it was a bug, so I pointed out to BlackBerry. Today, I got a response. Guess what...

    It turns out that it is a result of recent 'great idea' BlackBerry looking are now only to those whose phones have the same ID of device than the examiner. In other words, if you have for example the Z30 thereafter you will see comments made by Z30 users only. Forget about being able to read the comments from for example the owners Z10, Z3 or Leap.

    What a stupid idea. How an application is different between for example Z30 and Leap, or between the Q5 and Q10. This is the same application that runs on the same OS on almost identical devices. Why target more users access to customers so that there is usually so little of them in any case. If an application has several comments, but none of them for example a Z10 user then Z10 users will see NONE.

    It is understandable that the comments of another platform/OS are not for another OS (for example the comments of the Playbook is not for phones BB10) that most limit the visibility of comments to a specific MODEL of PHONE only is just crazy. No other app store does such a silly thing.

    When a new phone model comes out, it probably means that the people who buy it will see really ANY reviews of ANY applications until they have begin to post comments on this phone model themselves. And even if the new phone is not really different from existing models, like for example the jump of the Z30, which means that all applications to look and are working on it, just as they do on the Z30.

    I think that I don't have to explain how a very limited number of comments displayed for a specific phone model will affect sales of the app. On each new version of phone model, all providers must actually BEGIN to COLLECT the COMMENTS FROM SCRATCH for this phone model.   In the case of some of my apps, even if they have several comments, sometimes none of them has been presented for example a user Z3 or Leap, but until recently Z3 or Leap users could see them again while now they see NO CRITICISM of these applications either.

    Thanks to all those have commented here.  I did the product team BlackBerry World aware of the concerns expressed here on the comments filtering, and they agreed with the points that you all did.  There is an update to the BlackBerry World Server are planned for next week, and this behavior will be restored with this update.  So, you should see all the comments that appear again in a few weeks (update + time for cache refresh).

  • ANyConnect Client certificate authentication and verify the Client against the Microsoft AD using DAP via LDAP domain membership

    Hello

    as described in the title one want to connect with AnyConnect Secure Mobility Client 3.0.2052 ASA 5540 Version 8.4 and licence Premium SSL.

    Customers using Maschine certificate to authenticate to ASA. It works very well.

    Now, I want to install a DAP to check the customer against the Microsoft AD using LDAP. I have configured the LDAP server in see ASA:

    AAA-Server LDAP protocol ldap
    AAA-Server LDAP (inside) host ldap.com
    LDAP-base-dn DC = x DC = x, DC = x DC = com
    LDAP-scope subtree
    LDAP-login-password *.
    LDAP-connection-dn *.
    microsoft server type

    I see that it works if I test via the testbotton server in ASDM and I also see in CLI "debugging ldap 255". But if I configure in DAP: AAA attribute ID:memberOf = Membre_domaine I can't see any request to the LDAP server as I try to connect with the Client und does not correspond to the DAP.

    No idea where the problem lies?

    Thanks in advance

    Hi Klaus,

    DAP will not make any call LDAP itself, it will only act based on the attributes received LDAP via the LDAP authentication or authorization.

    So you will need to enable the LDAP authorization in the tunnel - or connect to groups.

    Once you have, you can either use DAP or a map attribute LDAP for accept/deny access, see the example of these two methods.

    HTH

    Herbert

  • Work of fine WebLogic Server machine url same p6 eppm primavera also works in server but the client lan both URLs machine works not

    Work of fine WebLogic Server machine url same p6 eppm primavera also works in server but the client lan both URLs machine works not

    When I install weblogic and eppm works in client machine only 10 minutes after does not always work in Server

    Thanks for the reply,

    I solved that

    Eppm proxy server is enabled, so I remove the proxy in internet option, it works very well in all the URLs of web client machine p6

  • I have just downloaded/subscriber to photoshop and paid the annual fee.  Following purchase, my very first time to load the Client creative Cloud, the app closed and will not reopen.  I can't locate the original location of the purchase binding, so now I'

    I have just downloaded/subscriber to photoshop and paid the annual fee.  Following purchase, my very first time to load the Client creative Cloud, the app closed and will not reopen.  I can't locate the original location of the purchase link, so now that I'm just try the 'free download' option.  Still crashes the Client Creative.  I upgraded to Yosemite.  Same thing.  There, anyone have a suggestion for me?  Thanks in advance.  Frustrated and at $119.

    Login on Adobe.com with your user ID and the password manage you account to see if your subscription is here. If it's usr Adobe cleaner for the installation of the creative Cloud Desktop application.  It allows to download, install and enable you to creative cloud applications.

    The Adobe Creative Cloud Cleaner tool allows to solve installation problems

    Download Adobe Creative cloud apps | Free trial of Adobe CC

  • I downloaded the free app Adobe Content Viewer, but when I try to connect, I get an error message "authentication failure". What should I do to fix?

    I downloaded the free app Adobe Content Viewer, but when I try to connect, I get an error message "authentication failure". What should I do to fix this?

    Did you go digitalpublishing.acrobat.com, connect with the Adobe ID and accept the terms of use? If this is not the case, do using a computer. You can't do this from a mobile device. This is not an automatic process, you must do it manually.

  • How to prevent the download wsdl in the service client web weblogic

    Hello

    I have a problem with the service client web weblogic. My workplace:

    WebLogic server 8.1
    Windows XP SP2
    JDK 1.4

    I use the weblogic tool to generate the client jar file in the wsdl file.

    < target name = "customer generate" >
    < wsdl = "ACCESS.wsdl" clientgen
    packageName = "xxxxxx.client"
    clientJar = "${customer} / ${AccessClient_jar_file}" "
    keepGenerated = 'true '.
    saveWSDL = 'true '.
    / >

    < javac srcdir = "${source}.
    DESTDIR = "${client}.
    includes = "" * / AccessClient.java ">"
    < classpath >
    < pathelement path = "${customer} / ${AccessClient_jar_file}" / >
    < / classpath >
    < / javac >
    < / target >

    After this, I create a java client to call the service deployed on the server.

    Public Shared Sub main (String [] argv)
    throws the Exception
    {
    int transactionId = 100;
    int id = 1000;

    Of the overall message JAXM plant
    System.setProperty ("javax.xml.soap.MessageFactory", "weblogic.webservice.core.soap.MessageFactoryImpl");
    Of the plant of global JAX - RPC service
    System.setProperty ("javax.xml.rpc.ServiceFactory", "weblogic.webservice.core.rpc.ServiceFactoryImpl");

    AccessServicePorts ws = new AccessServicePorts_Impl(argv[0]);
    AccessService port = ws.getAccessService ();

    Resources - create
    Resource = new Resource();
    resource.setRES_CD ("Create ResCo");
    resource.setCODE_CODE ("code_cod");
    resource.setRES_TYPE ("Resource type");
    resource.setCOMMON_FIELD (common);
    AccessDefaultResult resultItems = port.createResource (resource);
    System.out.println ("createResource:" + resultItems);
    }

    I find that this web service always client issue 2 http requests to call a web service method deployed in the server.

    1 reqeust http:

    GET/AccessEpol/EpolServiceSoap? WSDL HTTP/1.1
    User-Agent: Java/1.4.2_08
    Host: 127.0.0.1:8001
    Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q =. 2
    Connection: keep-alive

    the result is the wsdl that is downloaded from the server.

    2nd http request is the actual web service request.

    The question is how could eliminate demand http (1) because it is really useless. I use different customer web service as axis 1.x, axis customer never has the http request to download the wsdl from the server.

    I read the weblogic web service document. Do it mentions that put saveWSDL = "true" in the clientgen Ant task. the default value for saveWSDL is true already. I tried saveWSDL = 'false' also. None of them can eliminate the 1st http request.


    appreciate for any answer to my question?

    I think that you must use the constructor arg - No. of the AccessServicePorts_Impl to use local client jar WSDL.

    Please try this and it should fix the problem...

    ----------------------
    AccessServicePorts ws = new AccessServicePorts_Impl();
    AccessService port = ws.getAccessService ();
    -------------------

    Jayesh
    Yagna Sys.

  • Is it possible to send the response to the client with the SOAP header containing the user information in JAX - WS?

    Hello

    I use JDev 11.1.1.7.0 and Weblogic 10.3.

    I have a JAX - WS based web service on which authentication and authorization was in place and operational.

    The SOAP request carries information of SOAP header with the token of user name and password for authentication. Similarly the SOAP response can also transport header to the client information? So that the customer who receives the answer happens to knowledge of who he actually received the answer.

    Thanks in advance.

    Hi Harsha,

    Is quite easy to define soap headers in a response message soap envelope. No need to use handlers either. Please find the link that would be useful below.

    You must use the WebParam property and set the modes for messages (IN, OUT, INOUT) and you can pass multiple values JAX WS service using "javax.xml.ws.Holder".

    http://tomee.Apache.org/examples-trunk/WebService-holder/Readme.html

    Please find the sample and put interfaces implement the Web service for the same.

    Interface:

    @WebMethod (operationName = "GetItemDetails", action = "http://xmlns.org/ItemService/GetItemDetails/V1")

    Public Sub getItemDetails)

    @WebParam (name = "ItemCandListServiceMessage", targetNamespace = "http://xmlns.org/ItemCandList", partName is "ItemRequest" mode = Mode.IN) ItemCandListServiceMessageCmplxType itemRequest,.

    @WebParam (name = "ItemServiceMessage", targetNamespace = "http://xmlns.org/Item", partName is "ItemResponse" mode = Mode.OUT) owner itemResponse,.

    @WebParam (name = "ItemSOAPHeader", targetNamespace = "http://xmlns.org/ItemSOAPHeader", "ItemSOAPHeader" = partName, header = true, mode = Mode.INOUT) holder itemSOAPHeader)

    throws ItemFaultMessage

    ;

    Implementation:

    public void getItemDetails (ItemCandListServiceMessageCmplxType itemRequest, door itemResponse, door itemSOAPHeader) throw {ItemFaultMessage}

    itemResponse.value = objectFactory.createItemServiceMessageCmplxType ();

    itemSOAPHeader.value.setRequestId ("response");

    itemResponse.value = itemServiceBean.getItemDetails (itemRequest, itemSOAPHeader.value, itemResponse.value);

    }

  • Process Scheduler running SQR report gets the Client HTTP response Code 401 Unauthorized error

    People,

    Hello. I'm under PeopleTools 8,53 Oracle Linux 5 with Oracle 11 g 1 material database.

    Process scheduler run reports SQR and get the error message as below:

    Error of the client Http Response Code: 401 - non authorized. Transfer HTTP error.

    My report node information is below:

    URLID: http://ip_address:port/p/psreports/ch

    Home directory: /psreports

    Resource URI: SchedulerTransfer/ch

    Login ID: PS

    Password: mypass

    PeopleTools > IntegrationBroker > Configuration of integration > nodes: authentication option is selected password.

    The 2 roles, ReportDistAdmin and ProcessSchedulerAdmin are granted to the user PS

    Someone tell the error above due to incorrect or misspelled path for report repository in the configuration.properties file.

    I see no error in my configuration.

    My question is:

    Can any help folk to solve 'Error Http 401 - transfer HTTP error response Code' unauthorized customer?

    Thanks in advance.

    I think there might help:

    E-RD: transfer report error: Client Error Code: 401 - Unauthorized (63.59) (Doc ID 623250.1)

    E-RD: what are the steps to configure basic authentication for the repository of reports on PT 8,4 x using Weblogic? (Doc ID 970572.1)

    Also if you use this with test the load on load balancer balancer.

    Kind regards

    RAM

  • Verification of the users belonging to the Group spasfic weblogic server

    I built a simple service application web with jdeveloper 11.1.1.7 strategy (Wssp1.2 - 2007-Https-UsernameToken - Plain.xml) and deploy the weblogic 10.3. Everything works very well in both the client side and server.

    The client side is unable to call any method without specifying the username and password properties. The server automatically checks the user in users values define in weblogic server in the following path (summary of the areas of security > myrealm > users and groups). Hereby, the customer can access the system if he takes one of the users in this group even with the default user weblogic/weblogic.

    Question: How to limit the name to username/password check with specific usergroup?. That is, if the client mentions the name of user and password outside of the Group (even if the values are correct) the server rejects the request

    Problem, solved by (user name: Roque)

    in this link: java - verification of users within the spasfic group of weblogic server for the web service application - Stack Overflow

    Here is his answer for your reference:

    If you use the 'default' weblogic for users authentication method, you can follow these steps to set up an access group policy:

    • Connect to the weblogic administration console
    • Click on the links of deployments
    • Select your webservice
    • Click the Security tab
    • Click the sub-tab political
    • Choose your authorization provider in the menu drop-down (looks like by default)
    • Choose Add Conditions-> Group-> Type in the name of the Group
    • Finishing

    Now that the group you added should be able to invoke the web service. All other users should see something like:

    javax.xml.ws.soap.SOAPFaultException: Access denied to operation myWebService

  • Unable to connect with the listening port of the client

    [oracle@rac31 ~] $ lsnrctl status

    LSNRCTL for Linux: Version 11.2.0.1.0 - Production on March 21, 2014 03:33:30

    Copyright (c) 1991, 2009, Oracle.  All rights reserved.

    Connection to (DESCRIPTION = (ADDRESS = (PROTOCOL = IPC) (KEY = LISTENER)))

    STATUS of the LISTENER

    ------------------------

    Alias LISTENER

    Version TNSLSNR for Linux: Version 11.2.0.1.0 - Production

    Start date March 20, 2014 13:33:30

    Uptime 0 days 13 hours 59 minutes 59 seconds

    Draw level off

    Security ON: OS Local Authentication

    SNMP OFF

    Parameter Listener of the /u01/app/11.2.0/grid/network/admin/listener.ora file

    The listener log file /U01/app/Oracle/diag/tnslsnr/rac31/listener/alert/log.XML

    Summary of endpoints listening...

    (DESCRIPTION = (ADDRESS = (PROTOCOL = ipc) (KEY = LISTENER)))

    (DESCRIPTION = (ADDRESS = (PROTOCOL = tcp)(HOST=192.168.1.101) (PORT = 1521)))

    (DESCRIPTION = (ADDRESS = (PROTOCOL = tcp)(HOST=192.168.1.111) (PORT = 1521)))

    Summary of services...

    Service '+ ASM' a 1 instance (s).

    Instance '+ ASM1' READY State, has 1 operation for this service...

    'Cars' service has 1 instance (s).

    Instance "rac1" READY State, has 1 operation for this service...

    Service 'racXDB' has 1 instance (s).

    Instance "rac1" READY State, has 1 operation for this service...

    The command completed successfully

    In my server in the Oracle_HOME/network/admin

    This is my entry in tnsnames.ora

    RAC =

    (DESCRIPTION =

    (ADDRESS = (PROTOCOL = TCP) (HOST = rac-scan)(PORT = 1521))

    (CONNECT_DATA =

    (SERVER = DEDICATED)

    (SERVICE_NAME = rac)

    )

    )

    I am able to connect with the command

    sqlplus system/password@rac

    However, when I give the same input on the client computer

    It does not work

    I am able to ping the host rac-scan successfully

    C:\Users\rgehi > ping rac-scan

    Ping rac - scan.oracle.com [192.168.1.113] with 32 bytes of data:

    Response from 192.168.1.113: bytes = 32 time < 1 ms TTL = 64

    Response from 192.168.1.113: bytes = 32 time < 1 ms TTL = 64

    Response from 192.168.1.113: bytes = 32 time < 1 ms TTL = 64

    Response from 192.168.1.113: bytes = 32 time < 1 ms TTL = 64

    Ping statistics for 192.168.1.113:

    Packets: Sent = 4, received = 4, lost = 0 (0% loss),

    Time approximate round trip in milli-seconds:

    Minimum = 0ms, Maximum = 0ms, average = 0ms

    C:\Users\rgehi > sqlplus system/password@rac

    SQL * more: Production of the version 12.1.0.1.0 Fri Mar 21 03:40:53 2014

    Copyright (c) 1982, 2013, Oracle.  All rights reserved.

    ERROR:

    ORA-12545: Connect failed because target host or object does not exist

    I installed oracle client on my desktop

    and I made entries in the tnsnames file

    However when I connect to the database to rac with scan it works sometimes...

    not always...

    so I'm in search mode and finally, after many moons a lot and light years away, I found the following

    Here's what I did

    # - scan

    192.168.0.127 rac31 - scan.oracle.com rac31-scan

    192.168.0.128 rac31 - scan.oracle.com rac31-scan

    192.168.0.129 rac31 - scan.oracle.com rac31-scan

    I put three ip addresses in the host with the same name rac31-scan file

    then I put the same ip addresses in my windows hosts file

    Here are the entries

    192.168.0.127 rac31 - scan.oracle.comrac31-scan

    192.168.0.128 rac31 - scan.oracle.com rac31-scan

    192.168.0.129 rac31 - scan.oracle.com rac31-scan

    but in the (windows 7 pc) client tnsnames file has just one entry

    It's here

    RAC1 =

    (DESCRIPTION =

    (ADDRESS = (PROTOCOL = TCP) (HOST = rac31-scan)(PORT = 1521))

    (CONNECT_DATA =

    (SERVER = DEDICATED)

    (SERVICE_NAME = RAC)

    )

    )

    and now when I connect from the client... it connects without any problems.

    I have tried more than 10 attempts without problem

    BINGO!

  • How to know the version of the built-in weblogic Server

    Hi experts,

    use jdev11.1.1.5.0

    I h had big doubt ;)

    How to know the version of the built-in weblogic Server

    I think I'm using weblogic10.1.3. but am not sure?

    so, how can I found out.

    This diary. but I don't see any information on the version.
    *** Using port 7101 ***
"C:\Documents and Settings\Administrator\Application Data\JDeveloper\system11.1.1.5.37.60.13\DefaultDomain\bin\startWebLogic.cmd"
[waiting for the server to complete its initialization...]
.
.
JAVA Memory arguments: -Xms256m -Xmx512m -XX:CompileThreshold=8000 -XX:PermSize=128m  -XX:MaxPermSize=512m
.
WLS Start Mode=Development
.
CLASSPATH=C:\Oracle\MIDDLE~1\ORACLE~1\modules\oracle.jdbc_11.1.1\ojdbc6dms.jar;C:\Oracle\MIDDLE~1\patch_wls1035\profiles\default\sys_manifest_classpath\weblogic_patch.jar;C:\Oracle\MIDDLE~1\patch_jdev1111\profiles\default\sys_manifest_classpath\weblogic_patch.jar;C:\Oracle\MIDDLE~1\JDK160~1\lib\tools.jar;C:\Oracle\MIDDLE~1\WLSERV~1.3\server\lib\weblogic_sp.jar;C:\Oracle\MIDDLE~1\WLSERV~1.3\server\lib\weblogic.jar;C:\Oracle\MIDDLE~1\modules\features\weblogic.server.modules_10.3.5.0.jar;C:\Oracle\MIDDLE~1\WLSERV~1.3\server\lib\webservices.jar;C:\Oracle\MIDDLE~1\modules\ORGAPA~1.1/lib/ant-all.jar;C:\Oracle\MIDDLE~1\modules\NETSFA~1.0_1/lib/ant-contrib.jar;C:\Oracle\MIDDLE~1\ORACLE~1\modules\oracle.jrf_11.1.1\jrf.jar;C:\Oracle\MIDDLE~1\WLSERV~1.3\common\derby\lib\derbyclient.jar;C:\Oracle\MIDDLE~1\WLSERV~1.3\server\lib\xqrl.jar
.
PATH=C:\Oracle\MIDDLE~1\patch_wls1035\profiles\default\native;C:\Oracle\MIDDLE~1\patch_jdev1111\profiles\default\native;C:\Oracle\MIDDLE~1\WLSERV~1.3\server\native\win\32;C:\Oracle\MIDDLE~1\WLSERV~1.3\server\bin;C:\Oracle\MIDDLE~1\modules\ORGAPA~1.1\bin;C:\Oracle\MIDDLE~1\JDK160~1\jre\bin;C:\Oracle\MIDDLE~1\JDK160~1\bin;C:\DevSuiteHome_1\jdk\jre\bin\classic;C:\DevSuiteHome_1\jdk\jre\bin;C:\DevSuiteHome_1\jdk\jre\bin\client;C:\DevSuiteHome_1\jlib;C:\DevSuiteHome_1\bin;C:\DevSuiteHome_1\jre\1.4.2\bin\client;C:\DevSuiteHome_1\jre\1.4.2\bin;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Oracle\MIDDLE~1\WLSERV~1.3\server\native\win\32\oci920_8
.
***************************************************
*  To start WebLogic Server, use a username and   *
*  password assigned to an admin-level user.  For *
*  server administration, use the WebLogic Server *
*  console at http:\\hostname:port\console        *
***************************************************
starting weblogic with Java version:
java version "1.6.0_24"
Java(TM) SE Runtime Environment (build 1.6.0_24-b50)
Java HotSpot(TM) Client VM (build 19.1-b02, mixed mode)
Starting WLS with line:
C:\Oracle\MIDDLE~1\JDK160~1\bin\java -client   -Xms256m -Xmx512m -XX:CompileThreshold=8000 -XX:PermSize=128m  -XX:MaxPermSize=512m -Dweblogic.Name=DefaultServer -Djava.security.policy=C:\Oracle\MIDDLE~1\WLSERV~1.3\server\lib\weblogic.policy -Djavax.net.ssl.trustStore=C:\Oracle\Middleware\wlserver_10.3\server\lib\DemoTrust.jks -Duser.timezone="+05:30" -Dweblogic.nodemanager.ServiceEnabled=true  -Xverify:none  -da -Dplatform.home=C:\Oracle\MIDDLE~1\WLSERV~1.3 -Dwls.home=C:\Oracle\MIDDLE~1\WLSERV~1.3\server -Dweblogic.home=C:\Oracle\MIDDLE~1\WLSERV~1.3\server  -Djps.app.credential.overwrite.allowed=true -Dcommon.components.home=C:\Oracle\MIDDLE~1\ORACLE~1 -Djrf.version=11.1.1 -Dorg.apache.commons.logging.Log=org.apache.commons.logging.impl.Jdk14Logger -Ddomain.home=C:\DOCUME~1\ADMINI~1\APPLIC~1\JDEVEL~1\SYSTEM~1.13\DEFAUL~1 -Djrockit.optfile=C:\Oracle\MIDDLE~1\ORACLE~1\modules\oracle.jrf_11.1.1\jrocket_optfile.txt -Doracle.server.config.dir=C:\DOCUME~1\ADMINI~1\APPLIC~1\JDEVEL~1\SYSTEM~1.13\DEFAUL~1\config\FMWCON~1\servers\DefaultServer -Doracle.domain.config.dir=C:\DOCUME~1\ADMINI~1\APPLIC~1\JDEVEL~1\SYSTEM~1.13\DEFAUL~1\config\FMWCON~1  -Digf.arisidbeans.carmlloc=C:\DOCUME~1\ADMINI~1\APPLIC~1\JDEVEL~1\SYSTEM~1.13\DEFAUL~1\config\FMWCON~1\carml  -Digf.arisidstack.home=C:\DOCUME~1\ADMINI~1\APPLIC~1\JDEVEL~1\SYSTEM~1.13\DEFAUL~1\config\FMWCON~1\arisidprovider -Doracle.security.jps.config=C:\DOCUME~1\ADMINI~1\APPLIC~1\JDEVEL~1\SYSTEM~1.13\DEFAUL~1\config\fmwconfig\jps-config.xml -Doracle.deployed.app.dir=C:\DOCUME~1\ADMINI~1\APPLIC~1\JDEVEL~1\SYSTEM~1.13\DEFAUL~1\servers\DefaultServer\tmp\_WL_user -Doracle.deployed.app.ext=\- -Dweblogic.alternateTypesDirectory=C:\Oracle\MIDDLE~1\ORACLE~1\modules\oracle.ossoiap_11.1.1,C:\Oracle\MIDDLE~1\ORACLE~1\modules\oracle.oamprovider_11.1.1 -Djava.protocol.handler.pkgs=oracle.mds.net.protocol  -Dweblogic.jdbc.remoteEnabled=false -Dwsm.repository.path=C:\DOCUME~1\ADMINI~1\APPLIC~1\JDEVEL~1\SYSTEM~1.13\DEFAUL~1\oracle\store\gmds   -Dweblogic.management.discover=true  -Dwlw.iterativeDev= -Dwlw.testConsole= -Dwlw.logErrorsToConsole= -Dweblogic.ext.dirs=C:\Oracle\MIDDLE~1\patch_wls1035\profiles\default\sysext_manifest_classpath;C:\Oracle\MIDDLE~1\patch_jdev1111\profiles\default\sysext_manifest_classpath  weblogic.Server
<Feb 17, 2012 5:50:39 AM GMT> <Info> <Security> <BEA-090905> <Disabling CryptoJ JCE Provider self-integrity check for better startup performance. To enable this check, specify -Dweblogic.security.allowCryptoJDefaultJCEVerification=true> 
<Feb 17, 2012 5:50:39 AM GMT> <Info> <Security> <BEA-090906> <Changing the default Random Number Generator in RSA CryptoJ from ECDRBG to FIPS186PRNG. To disable this change, specify -Dweblogic.security.allowCryptoJDefaultPRNG=true> 
<Feb 17, 2012 5:50:39 AM GMT> <Info> <WebLogicServer> <BEA-000377> <Starting WebLogic Server with Java HotSpot(TM) Client VM Version 19.1-b02 from Sun Microsystems Inc.> 
<Feb 17, 2012 5:50:40 AM GMT> <Info> <Management> <BEA-141107> <Version: WebLogic Server 10.3.5.0  Fri Apr 1 20:20:06 PDT 2011 1398638 > 
<Feb 17, 2012 5:50:42 AM GMT> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to STARTING> 
<Feb 17, 2012 5:50:42 AM GMT> <Info> <WorkManager> <BEA-002900> <Initializing self-tuning thread pool> 
<Feb 17, 2012 5:50:42 AM GMT> <Notice> <LoggingService> <BEA-320400> <The log file C:\Documents and Settings\Administrator\Application Data\JDeveloper\system11.1.1.5.37.60.13\DefaultDomain\servers\DefaultServer\logs\DefaultServer.log will be rotated. Reopen the log file if tailing has stopped. This can happen on some platforms like Windows.> 
<Feb 17, 2012 5:50:42 AM GMT> <Notice> <LoggingService> <BEA-320401> <The log file has been rotated to C:\Documents and Settings\Administrator\Application Data\JDeveloper\system11.1.1.5.37.60.13\DefaultDomain\servers\DefaultServer\logs\DefaultServer.log00220. Log messages will continue to be logged in C:\Documents and Settings\Administrator\Application Data\JDeveloper\system11.1.1.5.37.60.13\DefaultDomain\servers\DefaultServer\logs\DefaultServer.log.> 
<Feb 17, 2012 5:50:42 AM GMT> <Notice> <Log Management> <BEA-170019> <The server log file C:\Documents and Settings\Administrator\Application Data\JDeveloper\system11.1.1.5.37.60.13\DefaultDomain\servers\DefaultServer\logs\DefaultServer.log is opened. All server side log events will be written to this file.> 
<Feb 17, 2012 5:50:48 AM GMT> <Notice> <Security> <BEA-090082> <Security initializing using security realm myrealm.> 
<Feb 17, 2012 5:50:50 AM GMT> <Notice> <LoggingService> <BEA-320400> <The log file C:\Documents and Settings\Administrator\Application Data\JDeveloper\system11.1.1.5.37.60.13\DefaultDomain\servers\DefaultServer\logs\access.log will be rotated. Reopen the log file if tailing has stopped. This can happen on some platforms like Windows.> 
<Feb 17, 2012 5:50:50 AM GMT> <Notice> <LoggingService> <BEA-320401> <The log file has been rotated to C:\Documents and Settings\Administrator\Application Data\JDeveloper\system11.1.1.5.37.60.13\DefaultDomain\servers\DefaultServer\logs\access.log00102. Log messages will continue to be logged in C:\Documents and Settings\Administrator\Application Data\JDeveloper\system11.1.1.5.37.60.13\DefaultDomain\servers\DefaultServer\logs\access.log.> 
<Feb 17, 2012 5:50:56 AM GMT> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to STANDBY> 
<Feb 17, 2012 5:50:56 AM GMT> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to STARTING> 
<MessageLocalizationHelper> <getLocalizedMessage> The resource for bundle "oracle.jrf.i18n.MBeanMessageBundle" with key "oracle.jrf.JRFServiceMBean.checkIfJRFAppliedOnMutipleTargets" cannot be found.
<Feb 17, 2012 5:51:02 AM GMT> <Warning> <J2EE> <BEA-160195> <The application version lifecycle event listener oracle.security.jps.wls.listeners.JpsAppVersionLifecycleListener is ignored because the application GeneralLedger is not versioned.> 
<Feb 17, 2012 5:51:07 AM GMT> <Warning> <J2EE> <BEA-160195> <The application version lifecycle event listener oracle.security.jps.wls.listeners.JpsAppVersionLifecycleListener is ignored because the application Rapppdf is not versioned.> 
<Feb 17, 2012 5:51:27 AM GMT> <Notice> <LoggingService> <BEA-320400> <The log file C:\Documents and Settings\Administrator\Application Data\JDeveloper\system11.1.1.5.37.60.13\DefaultDomain\servers\DefaultServer\logs\DefaultDomain.log will be rotated. Reopen the log file if tailing has stopped. This can happen on some platforms like Windows.> 
<Feb 17, 2012 5:51:27 AM GMT> <Notice> <LoggingService> <BEA-320401> <The log file has been rotated to C:\Documents and Settings\Administrator\Application Data\JDeveloper\system11.1.1.5.37.60.13\DefaultDomain\servers\DefaultServer\logs\DefaultDomain.log00208. Log messages will continue to be logged in C:\Documents and Settings\Administrator\Application Data\JDeveloper\system11.1.1.5.37.60.13\DefaultDomain\servers\DefaultServer\logs\DefaultDomain.log.> 
<Feb 17, 2012 5:51:27 AM GMT> <Notice> <Log Management> <BEA-170027> <The Server has established connection with the Domain level Diagnostic Service successfully.> 
<Feb 17, 2012 5:51:27 AM GMT> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to ADMIN> 
<Feb 17, 2012 5:51:27 AM GMT> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to RESUMING> 
<Feb 17, 2012 5:51:27 AM GMT> <Warning> <Server> <BEA-002611> <Hostname "rmsys0061", maps to multiple IP addresses: 192.168.0.161, 192.168.2.161> 
<Feb 17, 2012 5:51:27 AM GMT> <Notice> <Server> <BEA-002613> <Channel "Default[2]" is now listening on 127.0.0.1:7101 for protocols iiop, t3, ldap, snmp, http.> 
<Feb 17, 2012 5:51:27 AM GMT> <Notice> <Server> <BEA-002613> <Channel "Default[1]" is now listening on 192.168.2.161:7101 for protocols iiop, t3, ldap, snmp, http.> 
<Feb 17, 2012 5:51:27 AM GMT> <Notice> <Server> <BEA-002613> <Channel "Default" is now listening on 192.168.0.161:7101 for protocols iiop, t3, ldap, snmp, http.> 
<Feb 17, 2012 5:51:27 AM GMT> <Notice> <WebLogicServer> <BEA-000331> <Started WebLogic Admin Server "DefaultServer" for domain "DefaultDomain" running in Development Mode> 
<Feb 17, 2012 5:51:27 AM GMT> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to RUNNING> 
<Feb 17, 2012 5:51:27 AM GMT> <Notice> <WebLogicServer> <BEA-000360> <Server started in RUNNING mode> 
IntegratedWebLogicServer startup time: 51640 ms.
IntegratedWebLogicServer started.
[Running application frmtesting on Server Instance IntegratedWebLogicServer...] 
[11:21:30 AM] ----  Deployment started.  ----
[11:21:30 AM] Target platform is  (Weblogic 10.3).
[11:21:31 AM] Retrieving existing application information
[11:21:31 AM] Running dependency analysis...
[11:21:31 AM] Deploying 2 profiles...
[11:21:32 AM] Wrote Web Application Module to C:\Documents and Settings\Administrator\Application Data\JDeveloper\system11.1.1.5.37.60.13\o.j2ee\drs\frmtesting\ViewControllerWebApp.war
[11:21:32 AM] Wrote Enterprise Application Module to C:\Documents and Settings\Administrator\Application Data\JDeveloper\system11.1.1.5.37.60.13\o.j2ee\drs\frmtesting
[11:21:32 AM] Deploying Application...
<Feb 17, 2012 5:51:33 AM GMT> <Warning> <J2EE> <BEA-160195> <The application version lifecycle event listener oracle.security.jps.wls.listeners.JpsAppVersionLifecycleListener is ignored because the application frmtesting is not versioned.> 
[11:21:40 AM] Application Deployed Successfully.
[11:21:40 AM] The following URL context root(s) were defined and can be used as a starting point to test your application:
[11:21:40 AM] http://192.168.0.161:7101/frmtesting-ViewController-context-root
[11:21:40 AM] Elapsed time for deployment:  11 seconds
[11:21:40 AM] ----  Deployment finished.  ----
Run startup time: 10812 ms.
[Application frmtesting deployed to Server Instance IntegratedWebLogicServer]

Target URL -- http://127.0.0.1:7101/frmtesting-ViewController-context-root/faces/untitled6.jspx
    http://127.0.0.1:7101/console/login/LoginForm.jsp. He said that the administration weblogicserver 11g console

    At the base (copy of right section) 10.3.5.0

    11.1.1.5 JDev will use WLS 10.3.5 as its built-in Server

  • How the proxy service can get the client certificate in Oracle Service Bus

    Hello everyone, now I'm confused in how can get service proxy client certificate in Oracle Service Bus. I have configured bidirectional SSL in Weblogic, the client sends its cerficate to Weblogic and Weblogic checks this cerficate if have access permissions Weblogic, but my proxy service cannot obtain this certificate to do more work, who can help me?
    And my proxy service service type is the messaging service.

    Thank you!!!
    Sea

    Hi, if you have configured for client certificate authentication, weblogic maps an attribute in the DN of the client certificate to a user of weblogic security realm. The attribute is controlled by the default configuration to map the user in the default identity asserter in the WLS Console--> security--> kingdoms--> suppliers--> default identity Asserter. Generally, the CN attribute is selected for this purpose. You must also create a user in the security field, with the value of this attribute in the client certificate for authentication to succeed. Once the authentication is successful, the user is used as the authenticated user. So if you want to set permissions for authorization on the proxy, you can do it based on this user. For this you need not the certificate of the client. In the pipeline of message, I guess you can get the authenticated user of $inbound, which in turn corresponds to an attribute in the DN of the client certificate.

Maybe you are looking for