Everand Logo

Welcome to Everand!

  • Discover millions of ebooks, audiobooks, and so much more with a free trial

    Only $11.99/month after trial. Cancel anytime.

    Securing WebLogic Server 12c
    Securing WebLogic Server 12c
    Securing WebLogic Server 12c
    Ebook223 pages1 hour

    Securing WebLogic Server 12c

    By Luca Masini and Rinaldi Vincenzo

    ()

    Read preview

    About this ebook

    This book is written in simple, easy to understand format with lots of screenshots and step-by-step explanations. If you are a WebLogic Server administrator looking forward to a step by step guide to administer and configure WebLogic security, then this is the guide for you. Working knowledge of WebLogic is required.
    LanguageEnglish
    PublisherPackt Publishing
    Release dateNov 23, 2012
    ISBN9781849687799
    Securing WebLogic Server 12c

    Related to Securing WebLogic Server 12c

    Related ebooks

    Enterprise Applications For You

    View More
    View More

    Related podcast episodes

    Related articles

    • Article

      Your First Steps In Grafana

      Nov 17, 2020

      The easiest way to get hold of Grafana and begin using it as soon as possible is by downloading and executing its official Docker image. This means that apart from the Docker image, you won’t need to download, set up or install anything else for Graf

      1 min read

    • Article

      Grafana Terminology

      Jan 14, 2020

      A Grafana data source is a database, file or service that provides data to Grafana – it cannot operate without data. A Grafana panel is the basic building block of Grafana. Panels are made of visualisations or queries. A Grafana query is used for req

      1 min read

    • Article

      Grafana, Telegraf And Influxdb

      Jun 30, 2020

      If you don’t like Netdata or if you want to try something else, you can give Grafana (https://grafana.com), Telegraf (www.influxdata.com/time-series-platform/telegraf) and InfluxDB (www.influxdata.com/products/influxdb-overview) a try. Grafana can’t

      1 min read

    • Article

      Traefik Configuration

      Mar 10, 2020

      In this tutorial we have configured Traefik using command-line switches in our Docker Compose file (the section starting command:). This is the equivalent of starting the application with a whole bunch of command options each time, and while this wou

      1 min read

    • Article

      The State Of Linux Security

      Apr 7, 2020

      The State Of Linux Security
      1 min read

    • Article

      Web App Security

      Jun 29, 2021

      Web App Security
      8 min read

    • Article

      “When Something Goes Wrong, You Realise You’re Like That Cartoon Character That Has Run Off The Edge Of The Cliff”

      Feb 9, 2023

      We need to talk about data. Specifically, your data and my data. The stuff we use on a day-to-day basis, from where we store it to what our expectations are for its safe handling. Now let me get one thing clear from the beginning: I am going to sugge

      9 min read

    • Article

      Mcafee Total Protection

      Oct 17, 2023

      Mcafee Total Protection
      3 min read

    • Article

      Yubico YubiKey 5C NFC

      Dec 28, 2020

      Yubico YubiKey 5C NFC
      2 min read

    • Article

      Mac 911

      Apr 18, 2023

      Mac 911
      7 min read

    • Article

      Password Managers

      Nov 6, 2023

      Password Managers
      11 min read

    • Article

      Norton vs McAfee

      Mar 30, 2021

      Norton vs McAfee
      4 min read

    • Article

      Help Desk

      May 19, 2023

      Help Desk
      6 min read

    • Article

      Norton vs McAfee

      Apr 19, 2021

      Norton vs McAfee
      4 min read

    • Article

      Vipre Endpoint Security Cloud

      Nov 10, 2022

      Vipre Endpoint Security Cloud
      2 min read

    • Article

      McAfee Total Protection

      Sep 15, 2023

      McAfee Total Protection
      2 min read

    • Article

      Secure Mobile Comms

      Dec 6, 2022

      Secure Mobile Comms
      9 min read

    • Article

      Enterprise Soaring Success

      Aug 27, 2019

      Enterprise Soaring Success
      7 min read

    Related categories

    Reviews for Securing WebLogic Server 12c

    0 ratings

    0 ratings0 reviews

    What did you think?

    Tap to rate

    Review must be at least 10 words

      Book preview

      Securing WebLogic Server 12c - Luca Masini

      Table of Contents

      Securing WebLogic Server 12c

      Credits

      About the Authors

      About the Reviewers

      www.PacktPub.com

      Support files, eBooks, discount offers and more

      Why Subscribe?

      Free Access for Packt account holders

      Instant Updates on New Packt Books

      Preface

      What this book covers

      What you need for this book

      Who this book is for

      Conventions

      Reader feedback

      Customer support

      Downloading the example code

      Errata

      Piracy

      Questions

      1. WebLogic Security Concepts

      General concept of security in Java EE

      WebLogic security architecture

      Identifying – Subjects, Principals, and Credentials

      WebLogic resources

      Writing custom providers – MBeans

      Authentication Providers

      Authentication under WebLogic

      MBean and JAAS

      Multipart Authentication Provider

      Perimeter Authentication

      Identity Assertion

      Credential Mapper

      JASPIC and Java EE

      JACC

      Summary

      2. WebLogic Security Realm

      Configuration of local LDAP server: user/roles/lockout

      Users and groups

      Users section

      Groups section

      Security role condition

      Basic

      Date and time-based

      Context element

      User lockout

      Unlocking user

      Configuring an external LDAP for Authentication/Authorization

      Configuring a new provider

      Control Flag

      Active Directory provider-specific configuration

      Connection

      Users

      Groups

      Static groups

      General

      Performance options

      Principal Validator Cache

      Troubleshooting problems

      User lockout in an Active Directory context

      Using Identity Assertion

      Summary

      3. Java EE Security with WebLogic

      Setting up an Enterprise Maven project

      Creating the modules with maven-archetype-plugin

      Installing the WebLogic Server and the WebLogic Maven plugin

      Configuring wls-maven-plugin into the EAR POM

      Split deploy and beabuild-maven-plugin

      Launching our Hello Maven and WebLogic world application

      Securing the web module

      Standard DD mapping

      Custom Roles Mapping

      Programmatic security

      Programmatic security with WebLogic XACML provider

      A RESTful and secure EJB component

      Bean packaged into the WAR module

      Changing Security Identity with RunAs

      Securing the EJB module

      Summary

      4. Creating Custom Authentication Providers with Maven

      The Maven project

      Creating the Maven project

      Dependencies

      Reconfiguring standard plugins

      Adding WebLogic MBeanMaker to the POM

      Defining the MBean with an MDF File

      Writing the MBean implementation

      Initializing the provider

      Implementation of the provider

      Custom JAAS LoginModule

      The login() method

      Lifecycle methods – commit(), abort(), and logout()

      A simple SSO JSP

      Running the provider

      Summary

      5. Integrating with Kerberos SPNEGO Identity Assertion

      Using Identity Assertion SSO Kerberos in a Microsoft domain

      Windows client needs to be in the Active Directory domain

      Windows client session needs to be logged in the Active Directory domain

      Integrated Windows Authentication

      DNS URL entry configuration and SPN definition

      Technical Active Directory user

      Keytab generation and the krb5 config file

      JAAS file creation

      WLS init startup arguments configuration

      SPNEGO Identity asserter configuration

      Debugging issues

      Summary

      Index

      Securing WebLogic Server 12c

      Securing WebLogic Server 12c

      Copyright © 2012 Packt Publishing

      All rights reserved. No part of this book may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written permission of the publisher, except in the case of brief quotations embedded in critical articles or reviews.

      Every effort has been made in the preparation of this book to ensure the accuracy of the information presented. However, the information contained in this book is sold without warranty, either express or implied. Neither the authors, nor Packt Publishing, and its dealers and distributors will be held liable for any damages caused or alleged to be caused directly or indirectly by this book.

      Packt Publishing has endeavored to provide trademark information about all of the companies and products mentioned in this book by the appropriate use of capitals. However, Packt Publishing cannot guarantee the accuracy of this information.

      First published: November 2012

      Production Reference: 1201112

      Published by Packt Publishing Ltd.

      Livery Place

      35 Livery Street

      Birmingham B3 2PB, UK.

      ISBN 978-1-84968-778-2

      www.packtpub.com

      Credits

      Authors

      Luca Masini

      Rinaldi Vincenzo

      Reviewers

      Andrea Fiorentini

      Michel Schildmeijer

      Acquisition Editor

      Rukhsana Khambatta

      Commissioning Editor

      Priyanka Shah

      Technical Editor

      Dominic Pereira

      Copy Editors

      Aditya Nair

      Alfida Paiva

      Project Coordinator

      Michelle Quadros

      Proofreader

      Maria Gould

      Indexer

      Tejal Daruwale

      Production Coordinator

      Melwyn D'sa

      Cover Work

      Melwyn D'sa

      Cover Image

      Sheetal Aute

      About the Authors

      Luca Masini is a Senior Software Engineer and Architect who started as a Game Developer for Commodore 64 (Football Manager) and Commodore Amiga (Ken il Guerriero); he soon switched to object-oriented programming and, from its inception in 1995, he was always attracted to the Java language.

      He worked on this passion as a consultant for some major Italian banks, developing and integrating major software projects for which he has often taken on the technical leadership role. He adapted Java Enterprise in environments where COBOL was the flagship platform, converting them from mainframe-centric to distributed.

      He then shifted his focus to open source, starting from Linux, and then enterprise frameworks, with which he was able to introduce concepts like IoC, ORM, and MVC with minimum impact. He was an early adopter of Spring, Hibernate, Struts, and a whole host of other technologies that in the long run have given his customers a technological advantage and because of which development costs have also lowered.

      Lately, however, his attention has been completely directed towards the simplification and standardization of development with Java EE, and for this reason he's now working at the Information and Communications Technology department of a large Italian company to introduce advanced build tools (Maven and Continuous Integration), archetypes of projects, and Agile Development with plain standards.

      He has worked on the following books published by Packt Publishing:

      Google Web Toolkit

      Spring Web Flow 2

      Spring Persistence with Hibernate

      Dedicated to my skunk
(Dedicato alla mia puzzola)

      Vincenzo Rinaldi was born in Milan, Italy, and continues to live and work there. He has over 10 years of experience with system administration in critical contexts, where he contributes with designing, managing, and supporting internal IT infrastructures. He studies and researches many technologies, products, Operating Systems, and custom implementations on a daily basis to meet the business processes. He works with many suppliers, internal teams, and customer services in a mass retail company and coordinates a team to work in the middleware, Operating Systems, and DB stack.

      He is an RHCE Certified Engineer and also has great experience in WebLogic setup and administration, generally in the middleware layer.

      You can read more about him on his Linkedin profile at http://www.linkedin.com/in/vincenzorinaldi.

      The first big thanks goes to my pregnant wife Nadia and my son Mattia, they have supported me with their energy. One big thanks to my colleague Luca Masini and all those colleagues who supported me in the writing of this book.

      About the Reviewers

      Andrea Fiorentini graduated in Multimedia Systems and Telecommunications Engineering from the University of Siena in the year 2003. He attended a course for an internship at the company for which he works since June 2004 as a systems engineer and programmer.

      The company for which he works is dedicated to providing services to the cooperative credit banks in Italy. He has a sound knowledge of the Oracle database, Application Server (iAS), WebLogic Server, and Business Intelligence software. He has also finished a training course in Oracle named Developing Oracle Web Services Using Java Technology.

      For the last two years he has been the head of the development team at the company that

      Enjoying the preview?
      Page 1 of 1