The Incident Archive

http://fusionsecurity.blogspot.com/2011/04/ssl-offloading-and-weblogic-server.html https://blogs.oracle.com/ateamsoab2b/entry/configuration_notes_for_offloading_of So I wanted to enable ssl between my F5 and ohs and between ohs and my weblogic. I needed to do this because we redirect 80 to https on the F5 and I had a couple of external web services deployed. When you deploy the web service and are using https only on the F5 and http pass through to the rest your wsdl url will be secure but you may not be able to easily generate services from the wsdl (because the content of the wsdl will all point to http which we blocked). IMPORT your certificates into a new wallet - using orapki - http://docs.oracle.com/cd/E11882_01/network.112/e10746/asoappf.htm So on your F5   Make sure you point to the ohs on the secure socket port (4443 by default).   Easiest way to block http is with a https redirect iRule ( http://fixmyitsystem.com/2012/11/handy-simple-f5-redirect-irules.html...

So far everything looks like it will work I am just using the default auth provider and UCM is picking up my groups on login so now to integrate with Web center and use my custom auth provider. Custom authentication provider is done and I can log in to my content server and application and everything is working. The snag is not of the webcenter custom profile pictures and webcenter goodies are working (it uses the JpsContextFactory etc and that ignores my provider and looks up the default weblogic provider and tries to use that). I have replaced the identity store with a custom database implementation and everything seems to work [after a LOT of debugging]. Ok so step 1) The custom authentication provider - tons od documentation on how to do this eg:  http://docs.oracle.com/cd/E12890_01/ales/docs32/dvspisec/progrmng.html ,  http://docs.oracle.com/cd/E13222_01/wls/docs81/dvspisec/atn.html  so I am not going to rehash this if you want I can post some code but it shoul...

My jdeveloper was hanging on this portion of a new integrated weblogic start. Module /portalTools/builder of application portalTools [Version=11.1.1.4.0] is transitioning from STATE_NEW to STATE_PREPARED on server DefaultServer. So I left it overnight and if finally deploy successfully and now everything is working ok.

When I changed my admin password and tried to start up my managed servers I got the following (admin server was working fine): Weblogic 10.3.6 Authentication denied: Boot identity not valid ; The user name and/or password from the boot identity file (boot.properties) is not valid. The boot identity may have been changed since the boot identity file was created. Please edit and update the boot identity file with the proper values of username and password. The first time the updated boot identity file is used to start the server, these new values are encrypted. Solution: Stop you managed server rename \data\ldap to  \data\ldap Restart managed servers. Worked for me

Great post: http://weblogic-wonders.com/weblogic/2011/02/01/weblogic-as-a-windows-service/

NOTE: This may break some stuff so backup before you proceed so you have been warned Prerequisites: Install JDev 11.1.1.6 Run integrated weblogic. Now install just weblogic 10.3.6 I used the generic installer. java  -jar -D64 -Xmx1024M wls1036_generic.jar Next > Select Create new MiddlewareHome and enter a value > Next > Typical > Next Now select your JDK and click Next * 3 Run QuickStart Click Next Select 9.0 or Higher Click Next Find your integrated domain  [usually under C:\Users\[username]\AppData\Roaming\JDeveloper\system11.1.1.6.38.62.29\DefaultDomain] NOTE: On windows I had to make this folder ! read only but this is not recommended. If you don't want to do this Install your integrated server in a different location Click Next. Once the Installer has finished backup setDomainEnv.cmd then copy setDomainEnv.cmd.back to setDomainEnv.cmd and edit the line: set WL_HOME=... and make it set WL_HOME=C:\Dev\Oracle\Weblogic_10.3....

I was struggeling to use WSLT to migrate my policy store for our production cluster there where classpath problems and naming problems and I just want to make the process easier for my self. So I wrote a little util to do the migration if nothing else this post will help me remeber the classes needed for the migration exercise. Script and classpath (I can post my linux script if anyone wants it) My jar file that you wont have but I will post the code: common.0.0.1.jar, ./migrator.jar Non adf etc 3rd party jars: ./lib/commons-cli-1.2.jar;./lib/commons-io-2.0.1.jar; SET WEBLOGIC_JAR=[your Middleware location]\wlserver_10.3\server\lib\weblogic.jar SET OLD_CLASSPATH=%CLASSPATH% SET CLASSPATH=%CLASSPATH%;%WEBLOGIC_JAR%;./lib/adf-controller-security.jar;./migrator.jar;./lib/adf-share-mbeans-wlst.jar;./lib/adfscripting.jar;./lib/commons-cli-1.2.jar;./lib/commons-io-2.0.1.jar;./lib/commons-logging-1.1.1.jar;./lib/common.0.0.1.jar;./lib/ldapjclnt11.jar;./lib/adf-share-base.jar;./lib/...

Finally fixed the third incarnation of this problem - when we deployed onto our dev cluster and our application deployed fine but when the login page was accessed the app went into an infinite loop. NOTE: Deploying onto the Admin server worked perfectly. In the access logs you see 302 http codes with _afrLoop parameters (302 - redirect). Really could not figure this one out. I added failover and clustering removed them. Reconfigured the security. Created a test app with one page used weblogics default security provider but still NOTHING. I even setup a cluster on my machine and everything worked (Note: I did not setup our dev cluster) So in desperation I check the system-jazn-data.xml file deployed on weblogic an lo and behold none of my application security configurations where setup in the file. I stopped everything and added what I had on my local cluster to the system-jazn-data.xml and everything just works. I need to find out what in our dev configuration is causing the syst...

I am trying to run my ADF app in a cluster and my login page redirects back on itself endlessly. Note this has been resolved - we restarted the entire weblogic server and the problem dissapeared. (I think something went wrong in the deployment) the one other change I made was to change the inner xml of session-descriptor in weblogic.xml FROM: <sharing-enabled>true</sharing-enabled> TO: <persistent-store-type>REPLICATED_IF_CLUSTERED</persistent-store-type> this should not make a difference but I though I would mention it. Here are my notes to self as I moved through the process. Application   adf-config.xml   <adf-controller-config xmlns="http://xmlns.oracle.com/adf/controller/config">     <adf-scope-ha-support>true</adf-scope-ha-support>   </adf-controller-config>     Web.xml   <context-param>     <param-name>org.apache.myfaces.trinidad.CHECK_FILE_M...

When trying to call a remote ejb (java client) with weblogic on another box I get the following error: java.net.ConnectException: t3://SERVER:7001: Destination unreachable; nested exception is: java.io.IOException: Empty server reply; No available router to destination The solution: I just unchecked use HTTP proxy checkbox in my jdev Tools > Preferences > Web Browser And Proxy and the code work - before you make yourself mad just make sure you call is not trying to go to your web proxy. There are many other reasons for this but hopefully this will help someone ...

 The persistent file store "_WLS_DefaultServer" is forced to use buffered I/O and so may have significantly degraded performance. Either the OS/hardware environment does not support the chosen write policy or the native wlfileio library is missing. See store open log messages for the requested and final write policies. See the documentation on store synchronous write policy configuration for advice. See this post it fixed it for me: http://javaosdev.blogspot.com/2011/10/weblogic-defeating-unable-to-load.html

JDeveloper 11.1.2, Windows7, 64bit Unable to load performance pack. Using Java I/O instead. Please ensure that wlntio.dll is in blah.... I get this error message on my local windows machine and it annoys the hell out of me so I had to fix it. Step 1) Download the generic install version of Jdev (jar version) Step 2) Install this with a 64 bit vm -- cmd prompt java -server -jar jdevstudio11115install.jar (I used the -server parameter I dont know if this makes a difference but I dont feel like trying without it.) Step 3 ) make sure you use a 64bit jvm in the install Worked for me.

SECURITY -Dweblogic.DebugSecurityAtz=true -Dweblogic.DebugSecurityAtn=true -Dweblogic.DebugSecurityAdjudicator=true -Dweblogic.DebugSecurityRoleMap=true -Djps.auth.debug.verbose=true -Dweblogic.debug.DebugSecurityService=true -Dweblogic.debug.DebugSecurityAtz=true -Dweblogic.debug.DebugSecurityAtn=true -Dweblogic.debug.DebugSecurityAdjudicator=true -Dweblogic.debug.DebugSecurityRoleMap=true  -Dweblogic.debug.DebugEmbeddedLDAPLogLevel=11 -Dweblogic.debug.DebugEmbeddedLDAP=true  -Dweblogic.debug.DebugSecurityRoleMap=true NORMAL -Dweblogic.StdoutDebugEnabled=true -Djbo.debugoutput=console -Djbo.jdbc.trace=true