The security design: DMZ ports on internal switch - bad idea?

Hi all

I'm looking for a compelling - or he said is not serious - why a customer should not creator of DMZ VLAN on a cat internal-6509.

Basic topology is a 6509 in a controller area and 2 x ASA - 5510 to active / standby. They finally agreed to start using the DMZ for different services, but because they have no other switch on the domain controller, they are happy to have these DMZ on VLANS separated on the 6509.

Is this a security risk? (They do NOT use the 6509 as an 'outside' switch so it's something that I guess)

How the risk can be mitigated?

How their environments could be compromised?

Any suggestion is appreciated. Thanks in advance,

Mike

I don't see a problem with this setup as:

(1) External / DMZ is LAYER2 ONLY! Use a safety device to manage all Layer 3 (Firewall, FWSM, etc...)

(2) you turn off the proxy arp on ALL layer 3 interfaces on the switch.

(3) you don't give anyone access the switch unless they know what they do (understand the implications of having mixed traffic on the switch)

(4) configure you a vlan fake, make sure that everyone knows what it is (put a name in it and it document) and make the vlan by default for your switchports.

(5) you turn off the trunk negotiation (all ports must be configured "switchport mode trunk" or switchport mode access and also "switchport nonegotiate". If you use 802. 1 q (or isl - ugh), explicitly set the VLANs that are allowed to pass "trunk allowed vlan switchport x, y.

(6) use VTP transparent and not trunk VLAN external to other switches, unless you know what you're doing.

The most important is probably #3. A layer interface moved 3 or IVR and game over, you filled just Internet to your internal network. I can't emphasize enough that, if this is possible and safe if done correctly, it is VERY dangerous if you don't know what you're doing. Some consider too high of a risk to take and to believe in the physical separation to eliminate the risk. I agree, however, I understand that not all of us can afford to purchase several 6500 s.

Another thing to consider, did you think to use VRF-Lite?

Tags: Cisco Security

Similar Questions

  • Design of secure DMZ - return to main switch?

    See attachment-

    The DMZ was created until I started here... He's going toward the base switch... Why they would do this, is no idea safe?

    I want to create another DMZ, I bought two layer 2 switches (which goes to the team network, a NETWORK adapter on each DMZ switch cards), what is the best way to interface the new DMZ switches to the DMZ ASA... I would need to use two interfaces on ASA, then what gateway should I use? Or should I send it to the central as the other DMZ switch? in order to use only a single interface asa...

    What I would do is:

    On the uplink to your new switches to DMZ port, put them on a port on the main switch in VLAN 20 (your DMZ).

    Plug your server NIC in DMZ switches on all the interface you want and they will automatically route through the core switch VLAN.

    Use the interface DMZ ASA as your default gateway for the server. It will bounce through the DMZ switch interface and hit the SAA.

  • How to change the security policy of a group of distributed in a distributed virtual switch ports?

    Hello

    I am trying to write a Perl script that can modify the security policy of a group of distributed in a distributed virtual switch ports. I can access the values of security policy by using the following:


    $port_group_view-> config - > defaultPortConfig-> securityPolicy - > allowPromiscuous-> value

    $port_group_view-> config - > defaultPortConfig-> securityPolicy - > forgedTransmits-> value

    $port_group_view-> config - > defaultPortConfig-> securityPolicy - > macChanges-> value

    I try to use the method ReconfigureDVPortgroup_Task() of the managed object DistributedVirtualPortGroup. While creating a new instance of DVPortgroupConfigSpec, within the data spec config defaultPortConfig property object there is property of security policy and I couldn't find any other property pointing me to that I can update the security policy. I discovered that it is accessible via defaultPortConfig, stretching from VMwareDVSPortSetting where securityPolicy is a property of VMwareDVSPortSetting.

    What is the way to update? I am bit confused about terminology Extends and extended by and how it relates to the other.

    Concerning

    Akmal

    It is in DVPortgroupConfigSpec, but you will need to use the extended VMwareDVSPortSetting object.

    My $dvpg_spec = new DVPortgroupConfigSpec();

    $dvpg_spec-> {defaultPortConfig} = new VMwareDVSPortSetting();

    $dvpg_spec-> {defaultPortConfig} {securityPolicy} = new DVSSecurityPolicy();

    $dvpg_spec-> {defaultPortConfig} {securityPolicy} {allowPromiscuous} = new BoolPolicy (value-online 1, inherited-0 online);

    $dvpg_spec-> {defaultPortConfig} {securityPolicy} {forgedTransmits} = new BoolPolicy (value-online 1, inherited-0 online);

    $dvpg_spec-> {defaultPortConfig} {securityPolicy} {macChanges} = new BoolPolicy (value-online 1, inherited-0 online);

    You could probably simplify this by getting the config spec VGA and change it before using it in the ReconfigureDVPorgroup_Task() method.

  • Mapping of ports of the blade and Powerconnect M8024 - K Ayala switch 1 GB based Trunking

    Hello world

    Nice day!

    We have a recent deployment of server blade to one of our customer and we met a challenge regarding the following:

    -How are we going to map the internal blade to the Powerconnect M8024-K NIC. Port 1-16 is for VLAN 1000. PowerConnect M8024-k is configured with module additional uplinks (GB 2 x 10 base-T). What is the module has the ability to auto negotiate to 1 GB. We want to use this port for connections to the switch avaya 1 GB Ethernet based. The port of internal network to blade port 1-16 must go through this port goes to the external network (switch Avaya)

    -Do we really need to configure for this port. Is 10 GB base-T port has the features of auto-negotiation up to 1 GB

    Thanks for your help

    copilot0929

    Here are some documents that detail the M1000e IO options and internal correspondence of ports.

    http://Dell.to/18bLMEg

    http://Dell.to/1KqY1ux

    The M8024k will automatically negotiate 1/10 GB for all internal ports. SFP 4 external / SFP ports + are has several ports support 1/10 GB speeds. The external ports also need a transceiver that supports the speed you want to use.

    VLAN tagging is used when needing to send traffic to several VLANs over a single connection. If everything on the chassis will be in the same VLAN, then you should not have to put in place a trunk. But if you need the chassis to participate in several VLANs, so it is better to configure the VLAN Trunk on that connection.

  • DMZ Design - DMZ <>- NAT internal

    Hi all

    I would like to get opinions on the question of whether what follows adds really any additional security.

    We have a public facing firewall and internal network. I create a DMZ to host some public facing Web servers. Im going to NAT public IP addresses in the private address DMZ. My question is if you think it is a good idea also NAT on the DMZ (private) in a (private) address on our internal network. The idea being the real addresses of the DMZ servers would not routable on our internal network and internal clients could connect only to the internal NAT address of DMZ servers. As far I understand it, this adds a layer of complexity, but not necessarily security. Euther way I need to be filtering traffic in both directions for DMZ <->internal. (and of course <->outside DMZ).

    What would you do?

    Appreciate your help

    Andy

    Andy

    Don't know what you get by doing this. Even if real private addresses in the DMZ servers were not routable addresses Natted should be for internal users to access the servers in the DMZ, if indeed they must. And if they do not want to then just don't advertise the route to your internal network.

    I agree with you, because I don't see any additional security benefit with additional complexity. I wouldn't do it myself.

    Jon

  • Pavilion dv6: receipt of the message, "the local security authority database contains an internal inconsistency.

    I just upgraded to windows 10 Windows 7.  I've updated the HP Simplepass software to the latest version, however, when I try to confirm my windows identity to access the password manager, I get the error, "the local security authority database contains an internal inconsistency."

    I understand that this is due to re-create a user profile when a former bearing the same user name already exists.  How to access and remove the old profile?  I tried to install the HP Protecttools Security Manager, but I moved not because I have the latest version of the HP simplepass Digital Persona software, which seems to be incompatible.

    Any help would be appreciated.

    Hi @RobV711,

     
  • What are the security risks to open port 80 on workstations?

    Hi all

    in our environment, there is an application that opens port 80 on workstations when it is installed, but it is not allowed on preimeter FW

    could you please tell what are the security risks for leaving port 80, opened on the workstations? or it is considered to be safe unless it is not allowed on the preimeter FW?

    Thank you & best regards

    This issue is beyond the scope of this site and must be placed on Technet or MSDN

    http://social.technet.Microsoft.com/forums/en-us/home

    http://social.msdn.Microsoft.com/forums/en-us/home

  • How to list the security settings for distributed virtual switches and distributed virtual exchanges

    Is there a .pl can I use to list the security settings for distributed virtual switches and distributed virtual exchanges?

    parameters such as

    Mode promiscuity (license /reject)

    Mac address changes (license /reject)

    Allows the transmission of forged (permitted /reject)

    Thank you

    Fred

    Take a look at this article from blog for the script and details - http://www.virtuallyghetto.com/2011/12/retrieving-information-from-distributed.html

  • View the connections of the server to connect to the Security Server 5.2

    So, I wonder if it is anyway possible to not expose a subnet of office to the DMZ during the deployment of a security server?  I think remember me, there was a way to have the tunnel of security server all traffic through the connection to the server, but for the life of me, I can't seem to understand.

    Even in your previous PoC you should always have allowed some ports (PCoIP, RDP if use you it and the frame channel) from the server security for virtual offices. This has always been the case.

    The role of the Security Server is to protect exposure of desktop to the Internet. It provides a monitoring of protocols of the Internet (for example PCoIP) so make it succeed to check if the traffic is in the name of an authenticated user, and to ensure that if it is valid, it is transmitted over an office whose user is authorized to access. It is important to configure your internal firewall so that Office (PCoIP etc.) protocols can come only security servers. Then you give the required insurance. If such packets only packets UDP PCoIP arrive in your DMZ that are not on behalf of an authenticated user and then they are ignored in the DMZ without ever be passed in your data center. You know that all protocols for virtual desktops have been validated by the Security server.

    The Security server should also communicate with the login server and that's why you should also allow JMS, AJP13, and IPsec through. These should be only to the servers again only from servers to security and connection.

    You can always route the PCoIP packages through a proxy in your data center, but the security required inspection happens before that the Security Server so that eventually they can be thrown into the demilitarized zone.

    Mark

  • Problem with USB auto connect with clients that connect through the Security server...

    Lack of VMware View 5.0.1 with 2 servers connection and a security server. When the clients connect directly to the server connection, USB connection works very well... users can use their USB drives and other devices with their VM. The problem occurs when they attempt to use their USB devices when negotiated through the Security server.

    I know that port 32111 (TCP) must be open between the server security and the connection to the server, but even after doing so it does not always work... customers just to get the scrolling message of office in the USB menu initialization.

    Our current facility is:

    External IP address-> DMZ (Security Server)-> connect to server

    Entrust us our firewall config through our ISP (we are not overloaded with scientists here, it's just me, so things like little help my work load). They are certainly not incompetent (or at least were not in the past). I had to open the external 32111 IP port to the DMZ, then of the DMZ to our connection server that is used for external connections. Everything about VMware View works perfectly for the clients that connect this way, but not USB devices.

    One thing I give is if our having a configuration of VLAN dedicated for customers views influence what either. I'm trying to keep an eye on what ports are open that for our firewall for my records, but I do not see where I openly opened ports on the internal side of security server to our internal network. He must have the port opened directly from the internal face of security server of vmware 32111 discovers clients?

    The firewall Guys tell me that they checked over and over that port 32111 is open throughout the. They also said that they tried to telnet 32111 to our security server port and have nothing back (should have gotten garbage at least according to them).

    An idea of the next steps to take? It is obviously a blocked port, I just have no idea why at this stage.

    I know that port 32111 (TCP) must be open between the server security and the connection to the server, but even after doing it still does not work

    This is not what it takes. The agent is listening on the port 32111, you must open the firewall to allow connections to the Security server for the desktop on port 32111 (same thing you must allow RDP and PCoIP).

    Mike

  • Config port / VLAN on switch MXL

    I'm not a network engineer, but I try to set a port to my MXL switch to a VLAN that will route traffic on virtual machines on a local network of calculation.

    This is the port Te 0/52 on the back of the MXL and I am running ESXi on servers in my m1000e.  In fact, I have two MXLs in the tissue A of the m1000e configured with VLT via the interfaces of the FourtyGig.  This part has been implemented by people of Dell Tech Services, making the installation.

    Here's what looked like the config to start:

    dsa1 #show vlan

    Codes: *-Default VLAN - VLAN, GVRP, R - G remote control Port Mirroring VLAN, P - primary, C - community, I - isolated
    O Openflow
    Q: U - no identified, the T - tag
    x - unidentified Dot1x, X - Dot1x tag
    o - unidentified OpenFlow, O - OpenFlow tag
    G - GVRP tag, M - Vlan-stack, H - VSN tagged
    i unidentified intern, I - labeled internal, untagged, V v - VLT - VLT tag

    Ports Status Description Q NUM
    * 1 U active Po33 (0/33.37 Fo)
    U Po41 (Te 0/41-44)
    Te U 0/1-32
    115 active Mgmt T Po41(Te 0/41-44)
    V Po33 (0/33.37 Fo)
    Te T 0/1-32
    486 active VMGuest T Po41(Te 0/41-44)
    V Po33 (0/33.37 Fo)
    Te T 0/1-32
    Te U 0/49-50

    And I wanted to add VLAN 1000 to calculate, so I did the following:

    dsa1 #conf

    dsa1 (conf) #interface Te 0/52
    dsa1 (conf-if-you-0/52) #show config
    !
    interface TenGigabitEthernet 0/52
    no ip address
    MTU 12000
    hybrid portmode
    switchport
    FlowControl rx tx off
    spanning tree rstp edge port bpduguard stop-on-violation
    no downtime

    dsa1 vlan (conf) #interface 1000
    dsa1 (conf-if-vl-1000) #show config
    !
    interface Vlan 1000
    Description information
    name computer
    no ip address
    Tagged TenGigabitEthernet 0/1-32
    Unmarked TenGigabitEthernet 0/52
    no downtime

    VLAN now looks like:

    dsa1 #show vlan

    Codes: *-Default VLAN - VLAN, GVRP, R - G remote control Port Mirroring VLAN, P - primary, C - community, I - isolated
    O Openflow
    Q: U - no identified, the T - tag
    x - unidentified Dot1x, X - Dot1x tag
    o - unidentified OpenFlow, O - OpenFlow tag
    G - GVRP tag, M - Vlan-stack, H - VSN tagged
    i unidentified intern, I - labeled internal, untagged, V v - VLT - VLT tag

    Ports Status Description Q NUM
    * 1 U active Po33 (0/33.37 Fo)
    U Po41 (Te 0/41-44)
    Te U 0/1-32
    115 active Mgmt T Po41(Te 0/41-44)
    V Po33 (0/33.37 Fo)
    Te T 0/1-32
    486 active VMGuest T Po41(Te 0/41-44)
    V Po33 (0/33.37 Fo)
    Te T 0/1-32
    Te U 0/49-50
    1000 active Compute T Te 0/1-32
    Te U 0/52

    But I wanted to add THAT VLT Po33 tag to the new VLAN because there is in others, not because I really understand what it does.  In my view, it is used for load balancing?  If I label it with the command 'tag Po33' in the config of vlan, out with the status "T" instead of "V".

    Here are the details of the VLT:

    dsa1 #show vlt detail
    Local LAG Id counterpart LAG Id status Local Peer status Active VLAN
    ------------  -----------  ------------  -----------  -------------
    41 41 UP UP 1, 115, 486
    dsa1 #show brief vlt
    VLT area in brief
    ------------------
    Domain ID: 100
    Role: secondary
    Primary role: 4096
    ICL Link Status: to the top
    Status of heart rate: upward
    VLT Peer status: to the top
    The local unit ID: 0
    Version: 6 (4)
    Local system MAC address: f8:b1:56:09:70:b1
    MAC address of the remote system: f8:b1:56:09:70:fd
    Configured the system MAC address: 00:01:00:01:00:01
    Version of the remote system: 6 (4)
    Restore delay timer: 90 seconds
    Delay-restore Abort threshold: 60 seconds
    Routing peer: disabled
    By the peer-routing-Timeout timer: 0 seconds
    Multicast peer-routing timeout: 150 seconds

    So my questions are, I'm on the right track?  It will do what I want it to do is send traffic on port 0/52 Te which is labeled in ESXi with 1000 VLAN?  Should I worry the VLT marking stuff and if yes, how should I do the VLT marking rather than normal marking?

    The connection only 1 port of MXL 1 to a device, this device is considered a switch/host an orphan. A VLT connection will have 1 port each MXL placed in a port channel and connected to a device.

    Here is a good article that covers the VLT in use with different Topologies.

    http://Dell.to/1wfDl3n

    And the User Guide is a good source to have as well.

    http://Dell.to/1Hy70bb

  • Help the VLANS on Cisco SG200 - 08 p switch voice and data

    Hi all

    I'm faced with a problem of configuration on the Cisco SG200 - 08 p.

    We use Cisco SG200 - 08 p on a mobile carriage which will go from classroom to classroom who will have computer and phone VoIP cisco plugged into it. The question is that each of our closets are in different VLANS (1 voice and 1 data... Let's say data vlan 20 and vlan voice 2025 for conversation) and which move towards every closet.

    It would be great if I could just create a vlan voice dynamically pick up this switch upstream has however and generic data, it seems that I was failed to do.

    So far, I can pass the data Vlan no probably. The upstream switch port is set to access port and a switch port access voice vlan (these are x 3750 switches)

    If the above is not possible, I guess I'll take what I can get. Should I create data vlan 20 and vlan2025 of the voice on the Cisco SG200 - 08 p and make a port on the Cisco SG200 - 08 p and a trunk trunk on the 3750 x? Is there an option on the Cisco SG200 - 08 p to tag voice traffic?

    I am also concerned about DRIFTING and I did not see an area in the Cisco SG200 - 08 p to set it as a customer and a transparent mode.

    Thanks for any help,

    Dan

    Playne,

    first the bad news, the switches for small businesses currently do not support VTP, they support the GVRP Protocol which is like VTP, but there is no State that the VLAN used it will not automatically learn as VTP.

    You should be able to configure the 3750 as a trunk with a vlan 1U or unmarked and vlan 2025 as the tag for the voice. configuration of the port on the switch to small businesses the same way to its home port. All ports which have only phones will be 2025U of access and all ports only PC would be access 1U. All ports of phone and computer would be trunk 1u, 2025T

    Cisco Small Business Support Center

    Randy Manthey

    CCNA, CCNA - security

  • Configuring the Cisco UCS 5108 ports

    Hi all

    I'm new in the world of the Cisco UCS server and am setting up Cisco UCS 5108 blade server. The server has two Cisco UCS 6324 interconnections fabric I did the initial Setup on and I try to configure the ports for the blades. Looking through the various articles and tutorials after setting global policies, I see the whole world establishment of uplink and server ports. What I read the uplink ports are plugged directly into the switches (I work with two cisco nexus switches), and server ports are used to connect to the chassis.

    I wonder once the configured ports server what exactly are supposed to connect to? I assumed they would also connect to the switch nexus with the uplink ports. However, every time I set up the server ports and plug them in, the switch doesn't seem to have flooded and we lose all connectivity. If I unplug, the connection is restored almost immediately.

    The current configuration, that I work with is two ports uplink on each fabric interconnect (4 2 total in each switch of nexus), two server ports on each (4 2 total, in every nexus switch). The only other element connected to the nexus switches is a SAINT who will be configured as a boot and storage of the UCS 5108.

    Looks like you have a Mini UCS (6324), with 4-port 10 GB (each FI/IOM) with port QSFP 40 GB that can provide network connectivity linking rising, or if configured as a server port, could be used to connect to a server in a rack compatible Cisco UCS, or connect to a 5108 additional with IOM 2204XP chassis.  The blades installed in your initial 5108 chassis 6324 FI/IOM of housing have internal connectivity to the FIs / IOM without the need to configure ports 'server'...

    Please take a look at some of the visuals in the datasheet below.

    http://www.Cisco.com/c/en/us/products/collateral/servers-unified-computing/UCS-6300-series-fabric-interconnects/datasheet-C78-732207.html

    Unified ports can also be configured as a FC ports for connectivity of FC switch upstream or directly related to CF Storage processors.

    After having watched the datasheet, let me know if you have any other questions, and I'll try to address them.

    You'll not need actually configure ports such as ports 'server' unless you connect servers in a rack.

    Please configure any ethernet SFP type connected to your switches nexus upstream as 'network' uplinks.  I guess that you don't plan on a disjoint config layer 2 (where each FI has several sets of uplinks will different devices upstream, or the same device with different VLANS allowed on each link).    If you are, we can have a separate thread about how you need to configure that.

    Thank you

    Kirk...

  • Trying to do a simple REST, the security token error installation

    I'm trying to put in place a series of calls to API using c# .net. I have combed through the documents of installation, download the sample code from Github and contacted the support of Eloqua, but I can't seem to shake this same error:

    Eloqua security

    A security token that is associated with your session became invalid.

    This can happen if you open multiple instances of Eloqua, in different browser windows or tabs and then log out of one of these bodies. Please either close this window or tab or click here to log in again.

    I checked with Eloqua to make sure that my user name is configured to perform API calls. Now, I'm just trying to make an API call. Finally, I would like to add contacts, send emails and possibly to other activities through the API fires from a web application. I don't know if it's important, but I noticed that all of the code is a client application, not a web application. Is it possible to make API calls in code-behind to a .aspx page?

    The debug error I get is:

    System.Xml.XmlException: ' > ' is an unexpected token. The expected token ' "' or"'. " Line 3, position 62.

    This error occurs because the answer is the above HTML error message.

    Here's the code I'm running. It fires on a Page_Load handler on a .aspx page that compiles:

    var client = new Eloqua.Api.Rest.ClientLibrary. Customer (Instance, UserId, UserPass, 'https://secure.eloqua.com/API/1.0/');

    int emailId = 1;

    Eloqua.Api.Rest.ClientLibrary.Models.Assets.Emails. email email = customer. Assets.Email.Get (emailId);

    Response.Write (e-mail. (ToString());

    From: EloquaClient/Client.cs:

    public Customer (string site, user string , string password, string baseUrl)

    {

    BaseClient = new BaseClient(site, user, password, baseUrl);

    }

    From: EloquaClient/BaseClient.cs:

    public BaseClient (string site, user string , string password, string baseUrl)

    {

    Client = new RestClient

    {

    BaseUrl = baseUrl,

    Authenticator = new HttpBasicAuthenticator(site + '-' + user, password)

    };

    Client.AddHandler ("text/plain", new JsonDeserializer());

    }

    public T get < T > (int id, depth depth = depthletter) where T: RestObject, new)

    {

    var point = new {id = id} T;

    var request = Request. Get (request. ) Type of. Get, item);

    return Run < T > (request);

    }

    From: EloquaClient/Request.cs:

    internal public static RestRequest Get (Type , type, RestObject restObj)

    {

    restObj.type = restObj.Type;

    var request = new RestRequest

    {

    RequestFormat DataFormat=. JSON

    };

    switch (type)

    {

    case The type. Download:

    request. Method = method. GET;

    request. Resources = restObj.Uri + ' / ' + restObj.id;

    Break;

    case The type. Put:

    request. Method = method. PUT;

    request. Resources = restObj.Uri + ' / ' + restObj.id;

    request. AddBody (restObj);

    Break;

    case The type. Publish:

    request. Method = method. POST;

    request. Resources = restObj.Uri;

    request. AddBody (restObj);

    Break;

    case The type. Delete:

    request. Method = method. DELETE;

    request. Resources = restObj.Uri + ' / ' + restObj.id;

    Break;

    case The type. Search:

    request. Method = method. GET;

    var resource = new StringBuilder(100);

    resources. Append (restObj.Uri);

    if (restObj.id! = null & & restObj.id > 0)

    {

    resources. Append ("/" + restObj.id);

    } else

    {

    resources. Append ("s"); / / pluralize endpoint

    }

    var searchObj is restObj as ISearchable;.

    resources. Append ('? ') Search =" + searchObj.searchTerm +.

    "& count =" + searchObj.pageSize +.

    '& page =' + searchObj.page +.

    "& depth =" + restObj.depth

    );

    request. Resources = resource. ToString();

    Break;

    default:

    throw new NotSupportedException (type. (ToString());

    }

    return request;

    }

    From: EloquaClient/BaseClient.cs:

    internal T run < T > (applicationIRestRequest ) where T: ( new)

    {

    Answer IRestResponse< T > = Client.Execute < T > (request);

    if (answer. ResponseStatus! ResponseStatus=. Completed)

    {

    This is where it is throwing this error:

    ' > ' is an unexpected token. The expected token ' "' or"'. " Line 3, position 62.

    response to throw . ErrorException;

    }

    response to return . Data;

    }


    No idea where the code is a failure and how can I get this (supposedly) simple API call to return a value instead of a security token error?


    Thanks in advance.

    Nick

    Hi Fred,.

    I have cleared my cookies and unfortunately it does not solve the problem. Frank Shih to Eloqua stressed that endpoint was wrong ('REST1.0 ' rather than 'secure.eloqua.com/API/1.0' secure.eloqua.com/API/). I fixed who and receive is no longer the security token error. Now, I get a new error, but I'll make another post for that to keep things organized.

    Thank you.

    Nick

  • Integrated WebLogic fails to start after you have added the security provider

    Hello

    I'm new in the adf and weblogic. I use weblogic built-in jdev 12 c 12.1.2.

    I set up the security in my weblogic using this blog.

    http://adfgouravtkiet.blogspot.com/2012/07/Configuring-ADF-security-using-database.html

    It is configured successfully. But after you configure when I restart my weblogic server, it will fail to start. This is stack strace.

    < 16 April 2014 17:46:33 hours CEST > < error > < security > < BEA-090870 > < the domain 'myrealm' could not be loaded: weblogic.security.service.SecurityServiceException: com.bea.common.engine.ServiceInitializationException: java.lang.NullPointerException.

    weblogic.security.service.SecurityServiceException: com.bea.common.engine.ServiceInitializationException: java.lang.NullPointerException

    at weblogic.security.service.CSSWLSDelegateImpl.initializeServiceEngine(CSSWLSDelegateImpl.java:341)

    at weblogic.security.service.CSSWLSDelegateImpl.initialize(CSSWLSDelegateImpl.java:220)

    at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.InitializeServiceEngine(CommonSecurityServiceManagerDelegateImpl.java:1812)

    at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.initializeRealm(CommonSecurityServiceManagerDelegateImpl.java:447)

    at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.loadRealm(CommonSecurityServiceManagerDelegateImpl.java:845)

    Truncated. check the log file full stacktrace

    Caused by: com.bea.common.engine.ServiceInitializationException: java.lang.NullPointerException

    at com.bea.common.engine.internal.ServiceEngineImpl.findOrStartService(ServiceEngineImpl.java:365)

    at com.bea.common.engine.internal.ServiceEngineImpl.findOrStartService(ServiceEngineImpl.java:315)

    at com.bea.common.engine.internal.ServiceEngineImpl.lookupService(ServiceEngineImpl.java:257)

    at com.bea.common.engine.internal.ServicesImpl.getService(ServicesImpl.java:72)

    at weblogic.security.service.internal.WLSIdentityServiceImpl.initialize(WLSIdentityServiceImpl.java:46)

    Truncated. check the log file full stacktrace

    Caused by: java.lang.NullPointerException

    at weblogic.security.providers.authentication.shared.DBMSUtils.verifyHashAlgorithmUsable(DBMSUtils.java:43)

    at weblogic.security.providers.authentication.DBMSSQLAuthenticatorDelegateImpl.validateConfiguration(DBMSSQLAuthenticatorDelegateImpl.java:167)

    to weblogic.security.providers.authentication.DBMSSQLAuthenticatorDelegateImpl. < init > (DBMSSQLAuthenticatorDelegateImpl.java:77)

    at weblogic.security.providers.authentication.DBMSAuthenticatorDelegateImpl.getInstance(DBMSAuthenticatorDelegateImpl.java:459)

    at weblogic.security.providers.authentication.DBMSSQLAuthenticationProviderImpl.initialize(DBMSSQLAuthenticationProviderImpl.java:55)

    Truncated. check the log file full stacktrace

    >

    < 16 April 2014 17:46:33 hours CEST > < opinion > < security > < BEA-090082 > < security initialization using security realm myrealm. >

    < 16 April 2014 17:46:33 hours CEST > < critical > < WebLogicServer > < BEA-000362 > < server failed. Reason:

    There are 1 nested errors:

    weblogic.security.service.SecurityServiceRuntimeException: security services [Security: 090399] not available

    at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.doBootAuthorization(CommonSecurityServiceManagerDelegateImpl.java:921)

    at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.initialize(CommonSecurityServiceManagerDelegateImpl.java:1058)

    at weblogic.security.service.SecurityServiceManager.initialize(SecurityServiceManager.java:873)

    at weblogic.security.SecurityService.start(SecurityService.java:148)

    at weblogic.t3.srvr.SubsystemRequest.run(SubsystemRequest.java:64)

    at weblogic.work.ExecuteThread.execute(ExecuteThread.java:295)

    at weblogic.work.ExecuteThread.run(ExecuteThread.java:254)

    >

    < 16 April 2014 17:46:33 hours CEST > < opinion > < WebLogicServer > < BEA-000365 > < Server state changed to FAILED. >

    < 16 April 2014 17:46:33 hours CEST > < error > < WebLogicServer > < BEA-000383 > < is not an essential service. The server shuts itself down. >

    < 16 April 2014 17:46:33 hours CEST > < opinion > < WebLogicServer > < BEA-000365 > < Server state has changed to FORCE_SHUTTING_DOWN. >

    Stopping Server Derby...

    Derby server stopped.

    Process is complete.

    [End of IntegratedWebLogicServer.]

    SQL authentication is configured using a data source. If I change the name of blind in weblogic in the config.xml file data source, he throws exception but able to start the server. can any body help to what he's trying to find the data source before inilizing it. Here is my file config.xml

    <? XML version = "1.0" encoding = "UTF - 8"? >

    " < domain xmlns =" http://xmlns. Oracle.com/WebLogic/Domain "xmlns:sec =" http://xmlns. " Oracle.com/WebLogic/Security "xmlns:wls =" http://xmlns. " Oracle.com/WebLogic/Security/WLS "" xmlns: xsi = " http://www.w3.org/2001/XMLSchema-instance " xsi: schemaLocation = " http://xmlns." Oracle.com/WebLogic/Security/XACML http://xmlns.oracle.com/weblogic/security/xacml/1.0/xacml.xsd http://xmlns.oracle.com/weblogic/security/providers/passwordvalidator http://xmlns.oracle.com/weblogic/security/providers/passwordvalidator/1.0/passwordvalidator.xsd http://xmlns.oracle.com/oracleas/schema/11/jps/weblogic/providers http://xmlns.oracle.com/weblogic/1.0/security.xsd http://xmlns.oracle.com/weblogic/domain http://xmlns.oracle.com/weblogic/1.0/domain.xsd http://xmlns.oracle.com/weblogic/security http://xmlns.oracle.com/weblogic/1.0/security.xsd http://xmlns.oracle.com/weblogic / security/wls http://xmlns.oracle.com/weblogic/security/wls/1.0/wls.xsd' > .

    < name > DefaultDomain < / name >

    field < version > 12.1.2.0.0 < / domain-version >

    > security configuration <

    < name > DefaultDomain < / name >

    < domain >

    < sec: authentication - provider xsi: type = "wls:sql - authenticatorType" >

    db_user < sec: name > < / sec: name >

    < sec: control - flag > SUFFICIENT < / sec: control - flag >

    < wls: data-source-name >workdayDS< / wls: data-source-name >

    < wls:plaintext - passwords-activated > true < / wls:plaintext - passwords-enabled >

    < wls:sql - get-users-Word of past > SELECT PASSWORD FROM WORKDAY_USERS WHERE username =? < / wls:sql - get-users-Word of past >

    < wls:sql - user - exists > SELECT name from USER OF WORKDAY_USERS WHERE username =? < / wls:sql - user - exists >

    < wls:sql - list-members-groups > short_name SELECT OF WORKDAY_user_role_grants g, workday_roles r, workday_users u WHERE g.usr_id = AND g.rle_id = r.id AND u.username u.id =? < / wls:sql - list-members-groups >

    < wls:sql - list-users > SELECT USER FROM WORKDAY_USERS WHERE name LIKE USER name? < / wls:sql - list-users >

    < wls:sql - get-user-description > SELECT DISPLAY_NAME FROM WORKDAY_USERS WHERE username =? < / wls:sql - get-user-description >

    < wls:sql - list-groups > SELECT SHORT_NAME FROM WORKDAY_ROLES WHERE SHORT_NAME AS? < / wls:sql - list-groups >

    < wls:sql - group - exists > SELECT SHORT_NAME WORKDAY_ROLES WHERE SHORT_NAME =? < / wls:sql - group - exists >

    < wls:sql - East-members > SELECT u.username OF WORKDAY_user_role_grants g, WORKDAY_users u WHERE u.id = g.usr_id AND rle_id = (SELECT id FROM WORKDAY_roles WHERE short_name =?) AND usr_id = (SELECT id FROM WORKDAY_users WHERE username =?) < / wls:sql - is-member >

    < wls:sql - get-group-description > SELECT name FROM workday_roles WHERE the short_name =? < / wls:sql - get-group-description >

    < wls:password - algorithm > < / wls:password - algorithm >

    < wls:password - style > PLAINTEXT < / wls:password - style >

    < wls:sql - create-user > INSERT INTO WORKDAY_USERS (USERNAME, PASSWORD, DISPLAY_NAME) VALUES (?,?,?) < / wls:sql - create-user >

    < wls:sql - user-delete > DELETE FROM WORKDAY_USERS WHERE username =? < / wls:sql - remove-user >

    < wls:sql - remove group memberships > DELETE FROM WORKDAY_user_role_grants WHERE rle_id = (SELECT id FROM workday_roles WHERE short_name =?) OR usr_id = (SELECT id FROM workday_users WHERE username =?) < / wls:sql - remove group memberships >

    < wls:sql - set-user-description > UPDATE WORKDAY_USERS SET DISPLAY_NAME =? WHERE USERNAME =? < / wls:sql - set-user-description >

    < wls:sql - set-user-word of past > UPDATE WORKDAY_USERS SET PASSWORD =? WHERE USERNAME =? < / wls:sql - set-user-word of past >

    < wls:sql - create group > VALUES INSERT INTO WORKDAY_ROLES (id, short_name, name) (ROLES_SEQ. NEXTVAL,?,?) < / wls:sql - create group >

    < wls:sql - set-group-description > UPDATE workday_roles SET name =? WHERE short_name =? < / wls:sql - set-group-description >

    < wls:sql - Add-Member-to-group > INSERT INTO workday_user_role_grants (id, rle_id, usr_id) VALUES (workday_user_role_grants_seq. NEXTVAL, (SELECT id FROM workday_roles WHERE short_name =?), (SELECT id FROM workday_users WHERE username =?)) < / wls:sql - Add-Member-to-group >

    < wls:sql - remove-member-of-group > DELETE FROM workday_user_role_grants WHERE rle_id = (SELECT id FROM workday_roles WHERE short_name =?) AND usr_id = (SELECT id FROM workday_users WHERE username =?) < / wls:sql - remove-member-of-group >

    < wls:sql - group-delete > DELETE FROM WORKDAY_ROLES WHERE short_name =? < / wls:sql - remove group >

    < wls:sql - delete-Group-members > DELETE FROM workday_user_role_grants WHERE rle_id = (SELECT id FROM workday_roles WHERE short_name =?) < / wls:sql - remove group member >

    < wls:sql - list-group-members > SELECT username FROM workday_user_role_grants g, workday_roles r, u workday_users WHERE g.usr_id = AND g.rle_id = r.id AND r.short_name u.id =? AND u.username AS? < / wls:sql - list-group-members >

    < / sec: authentication - provider >

    < sec: authentication - provider xsi: type = "wls:default - authenticatorType" >

    < sec: name > DefaultAuthenticator < / sec: name >

    < / sec: authentication - provider >

    " < sec: authentication - provider xmlns:prov = ' http://xmlns.Oracle.com/OracleAS/schema/11/JPs/WebLogic/providers "xsi: type ="prov:trust - service-identity-asserterType"> ".

    Trust Service identity Asserter < sec: name > < / sec: name >

    < / sec: authentication - provider >

    < sec: authentication - provider xsi: type = "wls:default - identity-asserterType" >

    < sec: name > DefaultIdentityAsserter < / sec: name >

    < dry: active-type > AuthenticatedUser < / dry: active-type >

    < / sec: authentication - provider >

    " < sec: role - Mapper = xmlns:xac ' http://xmlns.Oracle.com/WebLogic/security/XACML "xsi: type =" xac:xacml - role-mapperType "> ".

    < sec: name > XACMLRoleMapper < / sec: name >

    < / sec: role - Mapper >

    " < sec: authorizer = xmlns:xac ' http://xmlns.Oracle.com/WebLogic/security/XACML "xsi: type =" xac:xacml - authorizerType "> ".

    < sec: name > XACMLAuthorizer < / sec: name >

    < / sec: authorizer >

    < sec: adjudicator xsi: type = "wls:default - adjudicatorType" >

    < sec: name > DefaultAdjudicator < / sec: name >

    < / sec: adjudicator >

    < sec: credential - Mapper xsi: type = "wls:default - credential-mapperType" >

    < sec: name > DefaultCredentialMapper < / sec: name >

    < / sec: credential - Mapper >

    < sec: cert - path-provider xsi: type = "wls:web - logic-cert-path-providerType" >

    < sec: name > WebLogicCertPathProvider < / sec: name >

    < / sec: cert - path-supplier >

    < sec: cert - road-builder > WebLogicCertPathProvider < / sec: cert - road-builder >

    < sec: name > myrealm < / sec: name >

    " < sec: password - validator = xmlns:pas ' http://xmlns.Oracle.com/WebLogic/security/providers/passwordValidator "xsi: type =" not: System-Password - validatorType "> ".

    < sec: name > SystemPasswordValidator < / sec: name >

    < not: min - password - > 8 length < / not: min - password - length >

    < not: min-digital - or - special-characters > 1 < / not: min-digital - or - special characters >

    < / sec: password - validator >

    < / domain >

    < domain >

    < sec: authentication - provider xsi: type = "wls:sql - authenticatorType" >

    db_user < sec: name > < / sec: name >

    < sec: control - flag > OPTIONAL < / sec: control - flag >

    < / sec: authentication - provider >

    < s: deploy-credential-mapping-ignored > true < / sec: deploy-credential-mapping-ignored >

    RDBMS < sec: name > < / sec: name >

    < / domain >

    field < default > myrealm < / default domain >

    < credentials encrypted > {ESA} oiXGiKafJRTHRLy3teTxciHGGJde23frXWjmnQAK2qQIuRYhySgd6oh/ZsnHQK1u99KboPN4Tjo5uS6tg37hufUPCJIdgDAhAOjBEZHVTXFc4YwQmZ6jdCpqlqEjUOkK < / encrypted credential >

    WebLogic < node-Manager-user name > < / node-Manager-user name >

    {ESA} < node-Manager-password - encrypted > dPzCkXm4Z8SaMVCroCwFXEIvbz/FTMroi8W/aDM7blA = < / node-Manager-password encrypted >

    < use-kss-for-demo > true < / use-kss-for-demo >

    < / security configuration >

    < Server >

    < name > DefaultServer < / name >

    < ssl >

    < name > DefaultServer < / name >

    < enabled > true < / enabled >

    < Listening port >

    8102

    < / Listen-port >

    < two - way ssl compatible > true < / two - way compatible ssl >

    < / ssl >

    < Listening port >

    8101

    < / Listen-port >

    > web server <

    < name > DefaultServer < / name >

    < log-server-web >

    < name > DefaultServer < / name >

    < elf fields > date time cs-method ctx-ctx - sc-status cs - uri DIN ecid < / elf fields >

    <-log file format > extended < / format of log file-->

    < / Web-server log >

    < / web server >

    BRP1LAP16 < listen-address > < / listen-address >

    < tunneling-enabled > true < / tunnel-enabled >

    <-diagnosis-server configuration >

    < name > DefaultServer < / name >

    < diagnosis-context-activated > true < / diagnosis-context-enabled >

    < / config-diagnosis-server >

    defaultCoherenceCluster < consistency cluster-system-resource > < / coherence-cluster-system-resources >

    < / Server >

    < incorporated-ldap >

    < name > DefaultDomain < / name >

    < credentials encrypted > {ESA} WRTXOv5WcAtcIZFA7g9azU4v/ogflkbFEN1TAdhhGbU6R7RiiSfLaouE6fgnkjRg < / encrypted credential >

    < / embedded-ldap >

    configuration < version > 12.1.2.0.0 < / configuration-version >

    < app deployment >

    State-management-provider-memory-rar < name > < / name >

    DefaultServer < target > < / target >

    RAR < module-type > < / module-type >

    C:/Oracle12c/middleware/Oracle_Home/oracle_common/modules/com.Oracle.State-management.State-management-provider-memory-RAR-impl_12.1.2.rar < source path > < / source-path >

    DDOnly <-security model dd > < / security-dd-model >

    > mode staged < nostage < / scene-mode implementation >

    < / app-deployment >

    < app deployment >

    DMS Application #11.1.1.1.0 < name > < / name >

    DefaultServer < target > < / target >

    war of < module-type > < / module-type >

    C:/Oracle12c/middleware/Oracle_Home/oracle_common/modules/Oracle.dms_12.1.2/DMS.war < source path > < / source-path >

    < deployment-order > 5 < / order of deployment >

    DDOnly <-security model dd > < / security-dd-model >

    > mode staged < nostage < / scene-mode implementation >

    < / app-deployment >

    < app deployment >

    < name > wsil-wls #12.1.2.0.0 < / name >

    DefaultServer < target > < / target >

    ear of < module-type > < / module-type >

    C:/Oracle12c/middleware/Oracle_Home/oracle_common/modules/com.Oracle.WebServices.FMW.WSIL-WLS-impl_12.1.2.ear < source path > < / source-path >

    < deployment-order > 5 < / order of deployment >

    DDOnly <-security model dd > < / security-dd-model >

    > mode staged < nostage < / scene-mode implementation >

    < / app-deployment >

    < app deployment >

    < name > coherence-transaction-rar < / name >

    DefaultServer < target > < / target >

    RAR < module-type > < / module-type >

    < source path - > C:/Oracle12c/Middleware/Oracle_Home/oracle_common /... /Coherence/lib/Coherence-transaction.rar < / source-path >

    DDOnly <-security model dd > < / security-dd-model >

    > mode staged < nostage < / scene-mode implementation >

    < / app-deployment >

    < app deployment >

    < name > wsm - h < / name >

    DefaultServer < target > < / target >

    ear of < module-type > < / module-type >

    C:/Oracle12c/middleware/Oracle_Home/oracle_common/modules/Oracle.WSM.pm_12.1.2/WSM-pm.ear < source path > < / source-path >

    < deployment-order > 5 < / order of deployment >

    DDOnly <-security model dd > < / security-dd-model >

    > mode staged < nostage < / scene-mode implementation >

    < / app-deployment >

    < Library >

    [email protected] oracle.sdp.client # < name > < / name >

    DefaultServer < target > < / target >

    C:/Oracle12c/middleware/Oracle_Home/oracle_common/modules/Oracle.SDP.client_12.1.2/sdpclient.jar < source path > < / source-path >

    DDOnly <-security model dd > < / security-dd-model >

    > mode staged < nostage < / scene-mode implementation >

    < / Library >

    < Library >

    [email protected] oracle.pwdgen # < name > < / name >

    DefaultServer < target > < / target >

    C:/Oracle12c/middleware/Oracle_Home/oracle_common/modules/Oracle.pwdgen_12.1.2/pwdgen.jar < source path > < / source-path >

    DDOnly <-security model dd > < / security-dd-model >

    > mode staged < nostage < / scene-mode implementation >

    < / Library >

    < Library >

    [email protected] owasp.esapi # < name > < / name >

    DefaultServer < target > < / target >

    C:/Oracle12c/middleware/Oracle_Home/oracle_common/modules/Oracle.owasp_12.1.2/OWASP-esapi.jar < source path > < / source-path >

    DDOnly <-security model dd > < / security-dd-model >

    > mode staged < nostage < / scene-mode implementation >

    < / Library >

    < Library >

    [email protected] oracle.wsm.seedpolicies # < name > < / name >

    DefaultServer < target > < / target >

    C:/Oracle12c/middleware/Oracle_Home/oracle_common/modules/Oracle.WSM.common_12.1.2/WSM-seed-policies.jar < source path > < / source-path >

    DDOnly <-security model dd > < / security-dd-model >

    > mode staged < nostage < / scene-mode implementation >

    < / Library >

    < Library >

    [email protected] odl.clickhistory # < name > < / name >

    DefaultServer < target > < / target >

    C:/Oracle12c/middleware/Oracle_Home/oracle_common/modules/Oracle.odl_12.1.2/clickhistory.jar < source path > < / source-path >

    DDOnly <-security model dd > < / security-dd-model >

    > mode staged < nostage < / scene-mode implementation >

    < / Library >

    < Library >

    [email protected] odl.clickhistory.webapp # < name > < / name >

    DefaultServer < target > < / target >

    C:/Oracle12c/middleware/Oracle_Home/oracle_common/modules/Oracle.odl_12.1.2/clickhistory.war < source path > < / source-path >

    DDOnly <-security model dd > < / security-dd-model >

    > mode staged < nostage < / scene-mode implementation >

    < / Library >

    < Library >

    < name > oracle.jrf.system.filter < / name >

    DefaultServer < target > < / target >

    C:/Oracle12c/middleware/Oracle_Home/oracle_common/modules/Oracle.jrf_12.1.2/system-filters.war < source path > < / source-path >

    DDOnly <-security model dd > < / security-dd-model >

    > mode staged < nostage < / scene-mode implementation >

    < / Library >

    < Library >

    [email protected] oracle.jsp.next # < name > < / name >

    DefaultServer < target > < / target >

    C:/Oracle12c/middleware/Oracle_Home/oracle_common/modules/Oracle.jsp_12.1.2/ojsp.jar < source path > < / source-path >

    DDOnly <-security model dd > < / security-dd-model >

    > mode staged < nostage < / scene-mode implementation >

    < / Library >

    < Library >

    < name > oracle.dconfig - infra #[email protected] < / name >

    DefaultServer < target > < / target >

    C:/Oracle12c/middleware/Oracle_Home/oracle_common/modules/Oracle.dConfig-infra_12.1.2.jar < source path > < / source-path >

    DDOnly <-security model dd > < / security-dd-model >

    > mode staged < nostage < / scene-mode implementation >

    < / Library >

    < Library >

    < name > orai18n-adf #[email protected] < / name >

    DefaultServer < target > < / target >

    C:/Oracle12c/middleware/Oracle_Home/oracle_common/modules/Oracle.nlsgdk_12.1.2/orai18n-ADF.jar < source path > < / source-path >

    DDOnly <-security model dd > < / security-dd-model >

    > mode staged < nostage < / scene-mode implementation >

    < / Library >

    < Library >

    [email protected] oracle.adf.dconfigbeans # < name > < / name >

    DefaultServer < target > < / target >

    jar of < module-type > < / module-type >

    C:/Oracle12c/middleware/Oracle_Home/oracle_common/modules/Oracle.ADF.dconfigbeans_12.1.2.jar < source path > < / source-path >

    DDOnly <-security model dd > < / security-dd-model >

    > mode staged < nostage < / scene-mode implementation >

    < / Library >

    < Library >

    [email protected] adf.oracle.domain # < name > < / name >

    DefaultServer < target > < / target >

    ear of < module-type > < / module-type >

    C:/Oracle12c/middleware/Oracle_Home/oracle_common/modules/Oracle.ADF.model_12.1.2/ADF.Oracle.domain.ear < source path > < / source-path >

    DDOnly <-security model dd > < / security-dd-model >

    > mode staged < nostage < / scene-mode implementation >

    < / Library >

    < Library >

    [email protected] adf.oracle.businesseditor # < name > < / name >

    DefaultServer < target > < / target >

    war of < module-type > < / module-type >

    C:/Oracle12c/middleware/Oracle_Home/oracle_common/modules/Oracle.ADF.businesseditor_12.1.2/ADF.businesseditor.war < source path > < / source-path >

    DDOnly <-security model dd > < / security-dd-model >

    > mode staged < nostage < / scene-mode implementation >

    < / Library >

    < Library >

    [email protected] oracle.adf.management # < name > < / name >

    DefaultServer < target > < / target >

    war of < module-type > < / module-type >

    C:/Oracle12c/middleware/Oracle_Home/oracle_common/modules/Oracle.ADF.management_12.1.2/ADF-management.war < source path > < / source-path >

    DDOnly <-security model dd > < / security-dd-model >

    > mode staged < nostage < / scene-mode implementation >

    < / Library >

    < Library >

    [email protected] adf.oracle.domain.webapp # < name > < / name >

    DefaultServer < target > < / target >

    war of < module-type > < / module-type >

    C:/Oracle12c/middleware/Oracle_Home/oracle_common/modules/Oracle.ADF.view_12.1.2/ADF.Oracle.domain.webapp.war < source path > < / source-path >

    DDOnly <-security model dd > < / security-dd-model >

    > mode staged < nostage < / scene-mode implementation >

    < / Library >

    < Library >

    < name > jsf #[email protected]< / name >

    DefaultServer < target > < / target >

    war of < module-type > < / module-type >

    C:/Oracle12c/middleware/Oracle_Home/oracle_common/modules/Oracle.jsf_2.1/JSF-RI-21.war < source path > < / source-path >

    DDOnly <-security model dd > < / security-dd-model >

    > mode staged < nostage < / scene-mode implementation >

    < / Library >

    < Library >

    < name > jstl #[email protected] < / name >

    DefaultServer < target > < / target >

    war of < module-type > < / module-type >

    C:\Oracle12c\Middleware\Oracle_Home\wlserver/common/deployable-libraries/JSTL-1.2.war < source path > < / source-path >

    DDOnly <-security model dd > < / security-dd-model >

    > mode staged < nostage < / scene-mode implementation >

    < / Library >

    < Library >

    < name > UIX #[email protected] < / name >

    DefaultServer < target > < / target >

    war of < module-type > < / module-type >

    C:/Oracle12c/middleware/Oracle_Home/oracle_common/modules/Oracle.uix_12.1.2/uix11.war < source path > < / source-path >

    DDOnly <-security model dd > < / security-dd-model >

    > mode staged < nostage < / scene-mode implementation >

    < / Library >

    < Library >

    < name > ohw - FRC #[email protected] < / name >

    DefaultServer < target > < / target >

    war of < module-type > < / module-type >

    C:/Oracle12c/middleware/Oracle_Home/oracle_common/modules/Oracle.help_5.0/OHW-RCF.war < source path > < / source-path >

    DDOnly <-security model dd > < / security-dd-model >

    > mode staged < nostage < / scene-mode implementation >

    < / Library >

    < Library >

    < name > ohw - uix #[email protected] < / name >

    DefaultServer < target > < / target >

    war of < module-type > < / module-type >

    C:/Oracle12c/middleware/Oracle_Home/oracle_common/modules/Oracle.help_5.0/OHW-UIX.war < source path > < / source-path >

    DDOnly <-security model dd > < / security-dd-model >

    > mode staged < nostage < / scene-mode implementation >

    < / Library >

    < Library >

    [email protected] oracle.adf.desktopintegration.model # < name > < / name >

    DefaultServer < target > < / target >

    ear of < module-type > < / module-type >

    C:/Oracle12c/middleware/Oracle_Home/oracle_common/modules/Oracle.ADF.desktopintegration.model_12.1.2/Oracle.ADF.desktopintegration.model.ear < source path > < / source-path >

    DDOnly <-security model dd > < / security-dd-model >

    > mode staged < nostage < / scene-mode implementation >

    < / Library >

    < Library >

    [email protected] oracle.adf.desktopintegration # < name > < / name >

    DefaultServer < target > < / target >

    war of < module-type > < / module-type >

    C:/Oracle12c/middleware/Oracle_Home/oracle_common/modules/Oracle.ADF.desktopintegration_12.1.2/Oracle.ADF.desktopintegration.war < source path > < / source-path >

    DDOnly <-security model dd > < / security-dd-model >

    > mode staged < nostage < / scene-mode implementation >

    < / Library >

    < Library >

    [email protected] oracle.bi.jbips # < name > < / name >

    DefaultServer < target > < / target >

    ear of < module-type > < / module-type >

    C:/Oracle12c/middleware/Oracle_Home/oracle_common/modules/Oracle.bi.presentation_12.1.2/bi-jbips-SLIB-stub.ear < source path > < / source-path >

    DDOnly <-security model dd > < / security-dd-model >

    > mode staged < nostage < / scene-mode implementation >

    < / Library >

    < Library >

    [email protected] oracle.bi.composer # < name > < / name >

    DefaultServer < target > < / target >

    war of < module-type > < / module-type >

    C:/Oracle12c/middleware/Oracle_Home/oracle_common/modules/Oracle.bi.presentation_12.1.2/bi-composer-SLIB-stub.war < source path > < / source-path >

    DDOnly <-security model dd > < / security-dd-model >

    > mode staged < nostage < / scene-mode implementation >

    < / Library >

    < Library >

    [email protected] oracle.bi.adf.model.slib # < name > < / name >

    DefaultServer < target > < / target >

    ear of < module-type > < / module-type >

    C:/Oracle12c/middleware/Oracle_Home/oracle_common/modules/Oracle.bi.presentation_12.1.2/bi-ADF-Model-SLIB.ear < source path > < / source-path >

    DDOnly <-security model dd > < / security-dd-model >

    > mode staged < nostage < / scene-mode implementation >

    < / Library >

    < Library >

    [email protected] oracle.bi.adf.view.slib # < name > < / name >

    DefaultServer < target > < / target >

    war of < module-type > < / module-type >

    C:/Oracle12c/middleware/Oracle_Home/oracle_common/modules/Oracle.bi.presentation_12.1.2/bi-ADF-view-SLIB.war < source path > < / source-path >

    DDOnly <-security model dd > < / security-dd-model >

    > mode staged < nostage < / scene-mode implementation >

    < / Library >

    < Library >

    [email protected] oracle.bi.adf.webcenter.slib # < name > < / name >

    DefaultServer < target > < / target >

    war of < module-type > < / module-type >

    C:/Oracle12c/middleware/Oracle_Home/oracle_common/modules/Oracle.bi.presentation_12.1.2/bi-ADF-WebCenter-SLIB.war < source path > < / source-path >

    DDOnly <-security model dd > < / security-dd-model >

    > mode staged < nostage < / scene-mode implementation >

    < / Library >

    <>shutdown-class

    < name > DMSShutdown < / name >

    DefaultServer < target > < / target >

    < deployment-order > 150 < / order of deployment >

    > class name < oracle.dms.wls.DMSShutdown < / class name >

    < / stop-class >

    <>start-class

    < name > class start JPS < / name >

    DefaultServer < target > < / target >

    < deployment > 115 order < / order of deployment >

    > class name < oracle.security.jps.wls.JpsWlsStartupClass < / class name >

    < failure-is-fatal > false < / failure-is-fatal >

    < charge-before-app-deployments > true < / load-front-app-deployments >

    < charge-before-app-activation > true < / load-front-app-activation >

    < / start class >

    <>start-class

    < name > JPS start after Activation class < / name >

    DefaultServer < target > < / target >

    < deployment-order > 160 < / order of deployment >

    > class name < oracle.security.jps.wls.JpsWlsPostServiceActivationStartup < / class name >

    < failure-is-fatal > false < / failure-is-fatal >

    < charge-before-app-deployments > false < / load-front-app-deployments >

    < charge-before-app-activation > true < / load-front-app-activation >

    < / start class >

    <>start-class

    < name > class start WSM < / name >

    DefaultServer < target > < / target >

    > class name < oracle.wsm.config.WSMServerStartupShutdownProvider < / class name >

    < / start class >

    <>start-class

    < name > class start JRF < / name >

    DefaultServer < target > < / target >

    < deployment > 110 order < / order of deployment >

    > class name < oracle.jrf.wls.JRFStartup < / class name >

    < failure-is-fatal > false < / failure-is-fatal >

    < charge-before-app-deployments > true < / load-front-app-deployments >

    < charge-before-app-activation > true < / load-front-app-activation >

    < / start class >

    <>start-class

    < name > ODL-start < / name >

    DefaultServer < target > < / target >

    < deployment > 145 order < / order of deployment >

    > class name < oracle.core.ojdl.weblogic.ODLConfiguration < / class name >

    < failure-is-fatal > false < / failure-is-fatal >

    < charge-before-app-deployments > true < / load-front-app-deployments >

    < charge-before-app-activation > true < / load-front-app-activation >

    < / start class >

    <>start-class

    < name > DMS-start < / name >

    DefaultServer < target > < / target >

    < deployment-order > 150 < / order of deployment >

    > class name < oracle.dms.wls.DMSStartup < / class name >

    < failure-is-fatal > false < / failure-is-fatal >

    < charge-before-app-deployments > true < / load-front-app-deployments >

    < charge-before-app-activation > true < / load-front-app-activation >

    < / start class >

    <>start-class

    < name > class start context AWT Application < / name >

    DefaultServer < target > < / target >

    < deployment-order > 150 < / order of deployment >

    > class name < oracle.jrf.AppContextStartup < / class name >

    < failure-is-fatal > false < / failure-is-fatal >

    < charge-before-app-deployments > true < / load-front-app-deployments >

    < charge-before-app-activation > true < / load-front-app-activation >

    < / start class >

    <>start-class

    < name > class start of Web Services < / name >

    DefaultServer < target > < / target >

    < deployment-order > 150 < / order of deployment >

    > class name < oracle.j2ee.ws.server.WebServiceServerStartup < / class name >

    < failure-is-fatal > false < / failure-is-fatal >

    < charge-before-app-deployments > true < / load-front-app-deployments >

    < charge-before-app-activation > true < / load-front-app-activation >

    < / start class >

    store < file >

    < name > mds-GOSA < / name >

    < Directory > store/gmds < / book >

    DefaultServer < target > < / target >

    < / file-store >

    < name-server-admin > DefaultServer < / name of the server-admin->

    < wldf-system-resources >

    Module FMWDFW < name > < / name >

    DefaultServer < target > < / target >

    < name-file-descriptor > diagnostics/Module-FMWDFW - 2818.xml < / file-descriptor-name >

    incident creates FMWDFW < description > from non-controlled Exceptions and critical errors < / description >

    < / wldf-system-resources >

    < jdbc-system-resources >

    < name > LocalSvcTblDataSource < / name >

    DefaultServer < target > < / target >

    < name-file-descriptor > jdbc/LocalSvcTblDataSource - jdbc.xml < / file-descriptor-name >

    < / jdbc-system-resources >

    < jdbc-system-resources >

    < name > opss-data-source < / name >

    DefaultServer < target > < / target >

    < name-file-descriptor > jdbc/opss-datasource - jdbc.xml < / file-descriptor-name >

    < / jdbc-system-resources >

    < jdbc-system-resources >

    < name > opss-audit-viewDS < / name >

    DefaultServer < target > < / target >

    < name-file-descriptor > jdbc/opss-auditview - jdbc.xml < / file-descriptor-name >

    < / jdbc-system-resources >

    < jdbc-system-resources >

    < name > opss-audit-DBDS < / name >

    DefaultServer < target > < / target >

    < name-file-descriptor > jdbc/opss-audit - jdbc.xml < / file-descriptor-name >

    < / jdbc-system-resources >

    < jdbc-system-resources >

    < name > mds-GOSA < / name >

    DefaultServer < target > < / target >

    < name-file-descriptor > jdbc/mds-GOSA - jdbc.xml < / file-descriptor-name >

    < / jdbc-system-resources >

    < jdbc-system-resources >

    < name > workdayDS < / name >

    DefaultServer < target > < / target >

    < name-file-descriptor > jdbc/workdayDS-6554 - jdbc.xml < / file-descriptor-name >

    < / jdbc-system-resources >

    < consistency cluster-system-resource >

    < name > defaultCoherenceCluster < / name >

    < name-file-descriptor > coherence/defaultCoherenceCluster - coherence.xml < / file-descriptor-name >

    < / coherence-cluster-system-resources >

    < / domain >

    Data source that I use it is wordayDS.

    I have deleted my domain name and create new ones yet to configure SQL authentication, and it works fine.

Maybe you are looking for