Creation of OAM authentication Plugins, plans and policy responses by command line

Hi all

I was plenty around, search the internet and MOS but did not find anything so far.

In OAM (11.1.2.2.4) I am trying to create a PlugIn for authentication, specify the step, the config params, orchestration, and so on. It works pretty well through the GUI. However, as I have a lot of different situations to deal with, I would like to automate this, using a command line tool (wlst.sh I think).

Does anyone know how I could do?

Side, I would also seek the same for patterns of authentication and responses, but I hope that as soon as I know how to do it on the plugin from I can derive from those others here.

It is doable but completely undocumented. What you need to do is wlst write scripts that access the mbean OAM, who is responsible for the update of oam - config.xml to add the required parameters.

What I do is to capture the current settings (IE make a backup of oam-config. (XML), and then perform the configuration via oamconsole. Then, compare the oam - current config.xml with the backup and note the differences. Using wlst and OAM mbean to add these entries. This wil you require to understand how to upgrade the config.XML of oam - via the mbean and involves a bit of understanding of jython to do the job.

For policy responses and enforcement strategies, you can use the OAM REST interface which you can drive from curl or anything that can handle http requests. It is much easier to use than rreg.

Tags: Fusion Middleware

Similar Questions

  • page apex_admin not display for the runtime environment and application deployment using command-line

    Hello

    I installed APEX 4.2.6 EPG on Windows 7 Professional (32 bit) with Intel Core i3 processor.  Oracle XE 11.2 Win-32 DB.

    All the installation steps followed according to the Installation guide for the Apex.  It is a fresh and new installation.

    img1.png

    Install the log shows below -.

    Thank you for the installation of Oracle Application Express.

    Oracle Application Express is installed in the APEX_040200 schema.

    SQL > SELECT DBMS_XDB. GETHTTPPORT FROM DUAL;

    GETHTTPPORT

    -----------

           8082

    I did only the installation of runtime using apxrtins.

    ' Step ' grant of privileges of connection "according to the document was smooth without any problems.

    SQL > ALTER SYSTEM SET JOB_QUEUE_PROCESSES = 20 scope = both;

    Modified system.

    SQL > ALTER SYSTEM SET SHARED_SERVERS = 5 SCOPE = BOTH;

    Modified system.

       

    I played "Creating a workspace manually" and met above question.  For installation of runtime, is this unnecessary step?  Or any other step I'm missing?  Help, please.

    Thank you and best regards,

    -Anand

    Hi Anand,

    anand_gp wrote:

    All the steps I did in my development environment and no problem following the steps.  And there is no question of the problem of the EPG or a bad image of loading because the other workspaces and applications out there are working well.  My question was, when I tried to copy an application via command line in an another 'new space and work with some new application ID', wheather my steps were correct?  If so, then why does not using the URL of the application.  And since it is in full flight development environment, where other workspace / applications work fine, how to connect to the new workspace I created using the command line?  If you look at my steps, I did provide any user name and password associated with this workspace all in creation.  When all this is going very well, so I will try in my new machine that has only run-time environment.

    Thank you

    -Anand

    I think you missed the validation part. You're going to make after the installation of the application as well as the addition of workspace

    commit;

    Hope that solves your problem.

    Kind regards

    Jitendra

  • How to generate PDF and CHM of the command line files in windows?

    I'm trying to set up a PC to build certain documents during the night. I was looking for a way to get from framemaker to generate PDF and CHM files through a command line in windows? How this is done with FrameMaker 12

    Thanks for the help

    Alex

    I have the pdf part of this work now. Make a jsx which generates the PDF file via the doc. Save(). And when the pdf file is generated the script then shut down of FrameMaker via the application. Close method.

    I then just copy the script in FrameMaker autorun dir and start FrameMaker to get the pdf genenerated.

    Now, I'm trying to do something with the chm filegeneration. But I can't find anything on how to get FrameMaker to make the extend script CHM files. Is there anyone who have some good places to look for that?

    Thanks for the help

    Alex

  • is there a way to tell firefox allow and remember the java plugin for all users via the command line or a script?

    Hello

    I have about 200 computers I want to push the next to parameter

    allow and remember the java plugin for firefox for all users
    

    is it possible to do this via a script or configuration file?

    You must create two files in the Firefox program folder.

    • local - settings.js file in the defaults\pref folder where you will find the channel - prefs.js
    • mozilla.cfg in the main folder of the Firefox program
  • passing the keyStore to weblogic-maven-plugin (WLS 12.1.3) via command line

    Hello

    Currently, I'm trying to pass a key file (or trustStore) to the weblogic-maven-plugin

    12.1.3 WLS Server uses a self-signed certificate. I imported it in the (in the JRE) cacerts file. This way I can use the plugin to deploy an ear (on t3s :).

    What I want to do, is allow Jenkins CI servers to do the same thing. But using the default cacaerts included in the JRE fails (SSLHAndshake). And none of the d for the keystore settings seem to be picked up by the weblogic-maven-plugin?
    (as '-Djavax.net.ssl.keyStore =... ") »)

    Is it possible to let the plugin know what keyStore, it must use?

    I also tried to use the properties-maven-plugin to set these system properties. But it seems that the weblogic-maven-plugin runs in its own world...

    Any advice would be great!

    Thank you!

    There is a solution in Stackoverflow: http://stackoverflow.com/questions/6224787/weblogic-maven-plugin-with-ssl-problem

    :-)

  • How to list the devices and the format of the command line?

    Hello

    Is there a guide reference CLI or procedure to the list of devices and devices from the command line format but also create volumes? I get failures from the GUI without specific error or log messages, said just that the volume creation failed.

    The Setup is as follows

    Flex-Raid RAID5 3x160GB Bay 1-3 devices with an SSD shore in Bay 4, I want to create a new volume on the SSD drive. I should be able to do this with Flex-RAID as I understand.

    I could solve this problem. I ended up restarting the NAS and the volume was recognized and usable.

  • How can I remove Lotus Notes PDFMaker plugin via command line?

    How can I remove the plugin from PDFMaker lotus notes via command line?  I initially deployed Adobe Acrobat 10 as a full install on multiple computers.  I see how to remove this specific feature through the user interface in Windows 7 by going to Control Panel / programs and features / Adobe Acrobat X / change / modify / create adobe PDF / acrobat PDFMaker / Lotus Notes, but it would be a tedious task to do manually on each computer.  I've experimented with a few msiexec commands after removing Acrobat such as:

    msiexec /i "\\path in msi" remove = pdfmakerforlotusnotes

    &

    msiexec /i '\\path in msi' disable_pdfmaker = yes

    The two still install acrobat as a full install.  Any help and suggestions would be appreciated.  Thank you!

    Try to use the correct case: PDFMakerForLotusNotes

  • How can I start FF command line (nix) without window, menu, tabs and other - as absolutely full screen?

    I need FF on Linux base for kiosk with tuchscreen. So he must start automatically command line (console) in full screen mode without a window, menu, tabs, address line and side ruler. I guess I can set up in a conf file and use some options command line, but where can I find the full list of options and the description of the conf file?

    You can watch this extension:

  • The file of the bar - descriptor.xml (and make the application of command line)

    I made a game with air and it is online for sale on Android and iOS. It is somewhat popular and I thought to put up on Blackberry for quite awhile now and with the Port of soon-to-start-A-Thon, this seems to be a great time to finally make it.

    BlackBerry is not very common that here where I live in Sweden, however it still looks like an interesting with a potential platform if I want to get the trip. Unfortunately I don't own a camera myself so I'll use the Simulator. With some graphic problems with the simulator when running in mode BB10DevAlpha (icons does not appear right) and the Simulator is very slow when running in mode BB10DevAlphaSafe (chart appears on the right, but it seems that updating them requires more CPU my computer are available).

    The game is built using nothing other than Adobe Flash Professional CS6 and a bunch of command line tools to build the package and sign. I've only got an old computer with Windows XP now since the death of my main PC, all at the time and since the Port-A-Thon is just a few days I do with what I got.

    Firstly I understand that only AIR 3.1 is supported by Blackberry 10, so I use the old AIR SDK 3.1 to create a SWF (flash) file.

    What I really need to do should be used in the exported SWF file of the game, then use the command line tools provided by RIM to build the package, right?

    Except that I did not count on bar - descriptor.xml to be so difficult to understand.

    I was brought to the documentation here: https://developer.blackberry.com/air/documentation/bb10/bar-descriptor_config_file.html

    It says Adobe AIR at the top, the platform selected is Blackberry 10 and the title says "bar-descriptor configuration file", so it must be in the right place!

    I start by trying the 'bar-descriptor configuration example file"on this page:

    ===========================================================



      
          None
          fake
      

     
      
       Name of the author
     
      
       gXXXxXXx ##XxXxXxxxXxXX #xxx
     
      
       Core.Games
     
      
       Icon.PNG
     
      
       HelloWorld - splash.png
     
      
       read_geolocation
       use_camera
     
      
       1

    ===========================================================

    Of course during the test I replaced a few things in the example above with the correct filenames for images etc, I just copied the example of right - off this time to you guys show what I mean.

    Firstly, I extract "blackberry-tablets-sdk - 3.0.0" in a folder on the disc, then I make sure as a full path to the "bin" in the SDK folder inside the path on the OS environment variable.

    Then I read on "Applications of Test using the command line": https://developer.blackberry.com/air/documentation/bb10/testing_your_application_cmd_ms_2010851_11.h...

    Now I run:

    BlackBerry - airpackager.bat - package installApp - blackberry-myappname - new.bar - launchApp myappname-blackberry-bar - descriptor.xml myappname.swf myappnameicon86.png bg splashscreen1024.png - device 192.168.8.128

    Note that "bg" is a folder with 500 images that must be accessible from the app. I hope that I can just add the folder like this and not type a path to each image file...

    What I get (in lib\adt.jar via the bat file):

    error 101: Namespace is missing
    Error: Validation of the AIR is not

    Okay, so the example did not straight on the box.

    Now, I've read all paragraphs in the first URL I linked above ("the bar-descriptor configuration file"). I start my own XML file and make sure to include everything that is marked as "necessary". That's what I'm left with:

    ===========================================================



        MyCompany
        
            
            com.mydomain.myappname
            My App name
            3.0.0
            
                splashscreen1024.PNG
            

            1.5.0
        

        run_native
        
            application
            
                bb.action.VIEW
                application/octet-stream
            

        

    ===========================================================

    I have no idea of what concerns the block whole call target, but it took, so he must be there.

    Now I launch (notice that myappnameicon86.png is gone since no icon is mentioned in the above XML code, it is not mandatory):

    BlackBerry - airpackager.bat - package installApp - blackberry-myappname - new.bar - launchApp myappname-blackberry-bar - descriptor.xml myappname.swf bg splashscreen1024.png - device 192.168.8.128

    Yet once, I get:

    error 101: Namespace is missing
    Error: Validation of the AIR is not

    Frustrated I get autour on the forums for answers, because the official documentation is nowhere getting me.

    I'm left with this:

    ===========================================================


    http://ns.Adobe.com/air/application/3.1">
        com.mydomain.myappname
        1.5.0
        
        My App name
        
        My App name
        
        
            myappname.swf
            standard
            fake
            true
            true
            landscape
            GPU
            fake
        

        
            myappnameicon36.PNG
            myappnameicon48.PNG
            myappnameicon72.PNG
        

        fake
        fake
        
            qnx.fuse.ui.skins.QNXDevice
            qnx.fuse.ui.skins.QNXNetwork
            qnx.fuse.ui.skins.QNXSensors

            qnx.fuse.ui.skins.QNXSkins
        

    ===========================================================

    Looks like the XML code that I use when I build for Android.

    First of all it doesn't have the tag root of qnx, but also nothing of the icons are of the required size (86 x 86). The tag required splashscreens and invoke target is also absent, to name a few. No idea of what the entire block of 'extensions' really do.

    Surely, this does not work:

    BlackBerry - airpackager.bat - package installApp - blackberry-myappname - new.bar - launchApp myappname-blackberry-bar - descriptor.xml myappname.swf QNXDevice.ane QNXNetwork.ane QNXSensors.ane QNXSkins.ane myappnameicon36.png myappnameicon48.png myappnameicon72.png bg-device 192.168.8.128

    Success in building the package BAR to my infinite surprise!

    He even managed to install on the Simulator. An icon for the game. However when it auto-couru the app went into landscape, thought for a second and then crashed (or you leave?) without a message.

    Perhaps because the required qnx tag was missing in the XML?
    Perhaps because images in the bg file could not be loaded?
    Perhaps because he had no permission to keep screen from dimming?

    I have no idea. I tried to add XML to qnx at the address previous to the bar - descriptor.xml, I thought that maybe he needed both the qnx block for when you run the application and the application block for when packaging. But now, he has complained of something like XML is not not clean ("' fatal error: markup in the document following the root element must be well-formed." ").

    So he came to it, I have to ask for help if I ever make the deadline of the Port-A-Thon.

    (1) how am I supposed to write the bar - descriptor.xml?
    (2) what command line starting by "blackberry - airpackager.bat" is OK to use?
    (3) all I have to do is build the SWF using Adobe Flash Professional CS6 and then pack it using the Blackberry SDK, right?

    First of all, there are two xml files that you need.

    One is called the manifesto, is to AIR and is called yourappname- app.xml. It is identical to the ones you use for Android and IOS, though some elements will be ignored. It's one you need to switch on the command line, and is probably causing the 'Namespace' missing error message. A file manifest a minimum is:

    
    http://ns.adobe.com/air/application/3.1">
    
        com.example.appname
        My Fabulous Game
        1.0.0
    
        FileNameOfYourSwfWithoutExtension
        YourCompanyName
        
            [This value will be overwritten by Flash Builder in the output app.xml]
            true
            false
            none
            cpu
            false
        
    
    

    Replace the text in red with your own stuff.

    The second xml file is called to the bar of descriptor. It is for App World and the installation process and is called bar - descriptor.xml. It contains information about signing code, icon, permissions etc. A simple bar - descriptor.xml is:

    
    
       
          none
          true
          landscape
          false
          cpu
       
    
       
       your-name-on-certificate
       your-id-on-certificate
    
       core.games
    
       
       1
    
       
       
          icon86x86.png
       
       splash-landscape.png
    
       
       2.1.0.1314
    
       
       access_shared
       access_internet
       play_audio
       set_audio_volume
    
    

    Make sure that you at least change the red dots.

  • Instance of DS command-line creation cannot make directory

    Try to install Department and I get to the step to create the dir server instance, but it fails.

    C:\sun_dir_server\dsee7\bin > dsadm create/local/1636 1389 - P Pei dsInst
    Choose the Directory Manager password:
    Confirm the Directory Manager password:
    Doesn't have a directory/local/dsInst

    Before you try this command, the /local/ directory did not exist. I then created the directory C:\sun_dir_server\dsee7\bin\local and retried the above command line, but there is the same error message.

    I use this on Windows Server 2003.

    I'd appreciate any help!

    It is because of your syntax of path (this is UNIX-like), try this one:

    C:\dsee7\bin>dsadm create C:\dsee7\var\master-1 1636 1389 - P Pei

    HTH,
    Marco

  • How to deal with the plugin command line options?

    Hello

    I am currently working on a plugin c ++ for Adobe Acrobat 7 with the version 7.0.5 SDK.

    I let the user opens a specific pdf file by clicking on a link in the browser.

    to this end, I signed an additional protocol in the windows registry. Works very well.

    But now, I mean my plugin for specific things when calling acrobat.exe in this way.

    So is it possible to get the specified command line parameters given to acrobat.exe Self?

    It would also help if my plugin can be added with URL parameters.

    I could also use.

    I found nothing on this issue.

    Kind regards

    Sebastian

    No, your plugin does not access to the command line.  Look for other methods of IAC (COM, DDE, memory shared, shared files, etc.).

  • Authentication to the multi level in OAM - use authentication Plugin

    Hi all

    Please post your useful suggestion to reach the following requirement:

    The requirement must authenticate with username, password-I & II - password. To do this, so I need to customize the authentication form.
    I use OAM 10.1.4.3 wherein there is no auth plugin code example in the folder of the example mentioned in the developer's guide!

    So I try with the sample files available with OAM old version 10.1.4.1. There is a single file (makefile) DSP based window and I am working on Linux. Could someone help me to convert this file to a Linux compatible file?

    There is no clear instructions on customizing the authentication in the Dev guide scheme, so it will be great if someone could help me with this.

    See you soon,.
    Ashish

    Verification of authentication scheme - http://download.oracle.com/docs/cd/E10761_01/doc/oam.1014/b32420/v2authen.htm
    and for the creation of authorization plugins check - http://download.oracle.com/docs/cd/E10761_01/doc/oam.1014/e10355/authnapi.htm#BABJJFCE

    An example of authentication plugin is also present at-http://download.oracle.com/docs/cd/E10761_01/doc/oam.1014/e10355/authnapi.htm#BABFEAIA

    Create a makefile for linux should not be that difficult, here is an example of makefile you can use for your reference...

    #Make file for authentication and authorization plug-ins

    AUTHNAME auth =
    AUTH_SO_NAME = auth

    SRC_DIR =.
    Inclure_rep = include

    LIBNAME = auth.so
    SOURCES = auth.c
    OBJS = $(AUTH_SO_NAME) .o
    LIBS =

    INCLUDE_FLAGS = - I$ (INCLUDE_DIR)
    #ldflags case
    LD_FLAGS = - lodbc

    CC = gcc

    CC_CMD = $(CC) - D_REENTRANT
    LD_CMD = $(CC) - shared

    $(LIBNAME): $(OBJS)
    $(LD_CMD) $(OBJS) $(LD_FLAGS) o $@ $(LIBS)
    chmod + x $(LIBNAME)

    $(OBJS): $(SOURCES)
    $(CC_CMD) $(INCLUDE_FLAGS) $(CFLAGS) - c-o $@ $(SOURCES)

    clean:
    rm - rf $(OBJS) $(LIBNAME)

    #end

    Let me know if you need anything else, be it
    Sam

  • OAM authentication scheme does not

    Hello

    I see a weird or probably known OAM authentication scheme feature. I added a diagram to a policy, it redirects to the login (authentication based on form) correctly. But, after authenticating successfully, it redirects to oberr.cgi? page, it works when I add the same form:, action: defy the parameters to an another authentication scheme, the policy works fine. It is clear that there is no problem with policies configured, because when replaced already authentication scheme with this one, it works fine. I tried to add a new window altogether after you remove the old. It does work for her as well. Don't know what the problem is. I updated, turn and even rebooted OVD/PM/ASIS, but still he does not accept the authentication scheme.

    Any who came across this type of problem before. Any help is appreciated.

    Although he long ago, I asked this question. The mistake was due to the webgate to Oberror redirect because it was not configured correctly.

    If someone finds this post useful, please try to check all the layers of webgate between.

    Hope that helps.

  • Authentication Plugin credential_mapping

    Hello

    Is it possible to add the ad group to obMappingFilter expression?

    I have the forms based authentication and I create an authentication Plugin credential_mapping like this:
    credential_mapping: obMappingBase = "dc = mypub, dc is com", obMappingFilter ="(& (objectclass = inetorgperson)(uid=%userid%))»)

    I need to check that only users belong to a group (as (memberOf = CN = myGroup, OR = Groups, OR = users and groups, DC = mycompany, DC = com)

    Can I add an expression to obMappingFilter to select only these users?

    Thank you

    Use the LDAP filter such as
    (& (& (objectclass = inetorgperson)(uid=%userid%)) (memberOf = CN = myGroup, OU = Groups, OU = utilisateurs et groupes, DC = mycompany, DC = com)))

    But why do you need group in the mapping of credentials plugin?

    You can still restrict the user-based group policy. For the resource give to reach the group you want.

    Hope this helps,
    Sagar

  • Hyperion planning and EAS console is unable to connect Server Essbase

    Hyperion 11.1.2.3.502

    We had essbaae in active/passive cluster and the environment was ssl is activated.

    Recently, we removed the ssl configuration

    Now, we are not able to connect to the planning and the Regional service console essbase Server

    Have no problem connecting to essbase maxl or view smart server. We were also able to import into fdmee essbase.

    Check the data source planning and validation of all the

    I am getting following error when you use the Regional service console

    Essbase Server: servername:1423 com.essbase.eas.essbase.defs.ServerCommands.Connect 16 December 2015 17:57:15 EST

    Error: 103: unexpected error Essbase 1030818

    Error: 1040142: NZERROR: nzos_Handshake failed (28864)

    Error: 1042006: error network [0]: unable to connect to [cs2chypebp01:1423]

    Error: 1030818: failed to connect. Please check if the server and port are correct. If you receive timeout or handshake failure, please check if you have tried to connect to secure the port without keyword secure or disable the port with the secure key word.

    When you go to the planning, I get following errors in the log files

    [2015 12-16 T 19: 20:10.616 - 05:00] [Planning0] [ERROR] [HSP-09012] [oracle. EPMHSP.olap] [tid: 4] [username: < anonymous >] [ecid: 000003wIIy ^ Bp2l5ovH7iY009W4a0000OQ, 0:1] [APP: PLANNING #11.1.2.0]]
    [URI: / HyperionPlanning/faces/PlanningCentral] [SRC_CLASS: com.hyperion.planning.olap.HspEssbasePool] [SRC_METHOD: createObject] Impossible to establish the OLAP connection: {0}. []
    com.hyperion.planning.olap.EssbaseException (1030818)


    [2015 12-16 T 19: 20:10.618 - 05:00] [Planning0] [ERROR] [HSP-09012] [oracle. EPMHSP.olap] [tid: 4] [username: < anonymous >] [ecid: 000003wIIy ^ Bp2l5ovH7iY009W4a0000OQ, 0:1] [APP: PLANNING #11.1.2.0]]
    [URI: / HyperionPlanning/faces/PlanningCentral] [SRC_CLASS: com.hyperion.planning.olap.HspEssbasePool] [SRC_METHOD: getConnectionInternal] could not establish the OLAP connection: {0}. []
    java.lang.Exception: no object was created successfully. This may be caused by the following: the OLAP server is not running, the DBMS does not run, the DBMS is running on a different
    Rental machine as specified, the name and the password provided was incorrect.


    [2015 12-16 T 19: 20:10.192 - 05:00] [Planning0] [ERROR] [HSP-09012] [oracle. EPMHSP.olap] [tid: 4] [username: < anonymous >] [ecid: 000003wIIy ^ Bp2l5ovH7iY009W4a0000OQ, 0:1] [APP: PLANNING #11.1.2.0]]
    [URI: / HyperionPlanning/faces/PlanningCentral] [SRC_CLASS: com.hyperion.planning.olap.HspEssbasePool] [SRC_METHOD: createObject] Impossible to establish the OLAP connection: {0}. []
    com.hyperion.planning.olap.EssbaseException (1030818)

    So far, we have made

    We have removed the ssl configuration by running the Configurator

    Reconfigure the web server

    Reconfigure the web server to the logical address

    Without success. Can someone help and advise you on what we should consider now

    Hello

    If you are able to connect to the server of Maxl Essbase.

    1. I suggest you to take a look at the Source of data for planning application. Since it is an Active/Passive with SSL configuration URL would now

    http://host: port/aps/Essbase? NOMCLUSTER = cluster_name

    Note: ssl = true is removed at the end

    2.

    Change of the APS resolve URLS in the file essbase.cfg. Delete "https" and replace it with 'http' (Ref: https://docs.oracle.com/cd/E17236_01/epm.1112/esb_tech_ref/frameset.htm?apsresolver.html )

    3. Regional service Console problem

    You may need to cancel some things

    a. download jnlp and change the URL, remove port 443 and https. Change it accordingly to http and the port of SST (def 19000). Save and open again.

    b. in the Weblogic administration Console, you must disable "Enable the Plugin" some option like this that allow us once the SSL configuration for Regional service

    Thank you

    Anjum Ara

Maybe you are looking for

  • Do not leave me to synchronize

    Tried to sync one or two times but keeps only not for iPhone 4 32 gb reference module on a uk network

  • Ubuntu reports bad RAM?

    Yesterday, I upgraded my Netbook to 2 GB of RAM. Windows XP recognizes all the new RAM.Today, I restored to Ubuntu - Ubuntu shows only 883 MB of RAM in the system monitor.Is this a bug in Ubuntu, or is there something else I need to change to recogni

  • Stuck in Windows

    Hello everyone. I installed 10 Windows via Bootcamp in my MBP 17 end 2011.All this has finished successfully, but in some sort the USB software was on the training camp has been corrupted. This is why I can't install it. Another consequence is that I

  • E540 + Dock among Pro - max of the external screen resolution is 1280 x 1024

    Hello This issue could be discussed and resolved already somewhere else, but I couldn't find a match for my situation: I recently bought the ThinkPad E540 with Pro among docking station, in which I have connected my external LG Flatron IPS236 monitor

  • When the refresh to receive code 80070426

    have tried to get help for several days, please help