WebCenter Login Setup

How to merge multiple LDAP providers - http://andrejusb.blogspot.com/2011/06/webcenter-11g-ps3ps4-aggregating.html

How to customize login in webcenter - http://andrejusb.blogspot.com/2011/05/oracle-webcenter-11g-ps3-adf-security.html

Too many open files in Linux systems when running FMW applications

This is the most common issue with linux system & you may notice the error message like 'Too many open files' while running SOA or WebCenter or OSB servers.

The solutions is to,

Edit /etc/security/limits.conf file & add below
<user> soft nofile 4096
<user> hard nofile 4096

Note - Replace <user> with actual os user name.
 
If you want to apply the above to all the user, then
* soft nofile 4096
* hard nofile 4096

Edit the /etc/pam.d/system-auth, and add this entry:
session required /lib/security/$ISA/pam_limits.so

Edit /etc/pam.d/login and add the below:
session required pam_limits.so

Adding "session required pam_limits.so" to /etc/pam.d/login and /etc/pam.d/sshd

Edit /etc/sysctl.conf file and put following line so that after reboot the setting will remain as it is:
# vi /etc/sysctl.conf
Append a config directive as follows:
fs.file-max = 100000

Try "sysctl -p" as root or Restart your machine.

After this change open a new terminal and issue ulimit -a.

If startManagedWeblogic.sh soa_server fails in 11g SOA

Problem:

When starting managed server for soa_server, the following error is shown in the console.

Enter username to boot WebLogic server:admin
<Jul 21, 2009 6:34:46 PM EDT> <Error> <Security> <BEA-090783> <Server is Running in Development Mode and Native Library(terminalio) to read the password securely from commandline is not found.> 
<Jul 21, 2009 6:34:46 PM EDT> <Notice> <WebLogicServer> <BEA-000388> <JVM called WLS shutdown hook. The server will force shutdown now> 
<Jul 21, 2009 6:34:46 PM EDT> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to FORCE_SHUTTING_DOWN> 

Solution:-

Set environment variable as below.

JAVA_OPTIONS=-Dweblogic.management.allowPasswordEcho=true

Database as Custom Authentication Provider in Weblogic

Very good post - http://biemond.blogspot.com/2008/12/using-database-tables-as-authentication.html

Login/Logout Implementation

Good one - http://biemond.blogspot.com/2007/11/adf-security-in-action.html

Security Implementation between ADF and SOA

After creating ADF application, follow the below link to configure security.

http://download.oracle.com/docs/cd/E14571_01/webcenter.1111/e10273/security.htm

And refer this blog for users/roles setup - http://andrejusb.blogspot.com/2009/01/practical-adf-security-deployment-on.html

Once you are done with security setup with ADF, we need to configure keystore for weblogic domain.

Make sure that you have default-keystore.jks copied to $MW_HOME/user_projects/domains/<domain_name>/config/fmwconfig/

Now run the wlst.sh from $MW_HOME/oracle_common/common/bin/wlst.sh.

wls:/offline> connect()

Please enter your username [weblogic]
:weblogic

Please enter your password [weblogic] :

Please enter your server
URL [t3://localhost:7001] :t3://localhost:7101

Connecting to
t3://localhost:7101 with userid weblogic ...

Successfully connected to Admin
Server 'DefaultServer' that belongs to domain 'DefaultDomain'.

Warning: An insecure protocol was used to connect to the

server. To ensure
on-the-wire security, the SSL port or

Admin port should be used instead.

wls:/DefaultDomain/serverConfig>

wls:/DefaultDomain/serverConfig> createCred(map="oracle.wsm.security", key="keystore-csf-key", user="owsm", password="welcome1", desc="Keystore key")
wls:/DefaultDomain/serverConfig> createCred(map="oracle.wsm.security", key="enc-csf-key", user="orakey", password="welcome1", desc="Encryption key")
wls:/DefaultDomain/serverConfig> createCred(map="oracle.wsm.security", key="sign-csf-key", user="orakey", password="welcome1", desc="Signing key")

If the credentials for keystore-csf-key, enc-csf-key and sign-csf-key already exist and their password is anything other than welcome1, update them, using the updateCred command, as shown below:

wls:/DefaultDomain/serverConfig> updateCred(map="oracle.wsm.security", key="keystore-csf-key", user="owsm", password="welcome1", desc="Keystore key")
wls:/DefaultDomain/serverConfig> updateCred(map="oracle.wsm.security", key="enc-csf-key", user="orakey", password="welcome1", desc="Encryption key")
wls:/DefaultDomain/serverConfig> updateCred(map="oracle.wsm.security", key="sign-csf-key", user="orakey", password="welcome1", desc="Signing key")

I am assuming that we are using single weblogic domain to test integration between ADF and SOA.

Restart both admin and soa server. You are ready to test!

Weblogic Scripting Tool - WLST

Very good links for wlst concepts and usage

http://www.slideshare.net/celikgok/weblogicserveroverviewweblogicscriptingtool012282527528444349

http://www.slideshare.net/Bhavsidd/wlst-presentation

Templates to choose for the weblogic domain

When we are create domain for specific technology, we always get confused to select the additional libraries in domain configuration wizard.

Follow the below link to know what jars should be included:

http://www.art2dec.com/documentation/docs/fmw11g1114documentation/web.1111/e14138/fmw_templates.htm#BABEIHEG