Protecting WebLogic Server application using Oracle Entitlement Server

Hi,
Atul

I really need your help.
i am trying to clone a server. which 8i database & 11.5.9 application. & its os is windows 2000.
when i run adcfgclone on dbTier it shows me following error.

F:\applmgr\prddb\8.1.7\appsutil\clone\bin>perl adcfgclone.pl dbTier
Enter the APPS password [APPS]:
apps

First Creating a new context file for the cloned system.
The program is going to ask you for information about the new system:

..jrebinjava.exe: not found
..jlibxmlparserv2.zip: not found
..jlibclasses111.zip: not found
..jrelibrt.jar: not found
C:toolsMKSmksntetcperllib: not found
C:toolsMKSmksntetcperllibsite_perl: not found
ERROR: Could not open

plz help me body. bcause this cloning is very imp. for do some mejor R&D. so plz give any solution as soon as possible.

@ Jay,
Which cloning document you are following ? Did you run pre clone steps on source instance before copy to target ?

Dear friend

Please mention which version of weblogic server you have used, also recommend where to get the SSM CP3 patch.

with warm regards and thanks

Alalasundaram Saravanan

Hi Atul

In the path of wlsapp->shared->server, “server” is a level more or is a resource, can you add images to the post please.

In Discovery Mode, how i can to import the policies once they was genereated in a domain home??

Regards and thank you for your post

Dear Mahendra

Thanks for the response, after successfully creating the ssm instance and when I try to start the weblogic server I am facing below exception which prevents the Weblogic to start.

Is it familier issue to you?

Caused By: oracle.security.jps.JpsRuntimeException: No Default or LDAP Authenticator configured on WLS

Alalasundaram Saravanan

Dear Mahendra

1.Please find attached (sent in mail)the configtool.log which shows some error during instance creation yesterday.

Is it ok or I need to re create the ssm instance.

2. Find attached the config.xml the default realm has been set with out the steps you have mentioned, should I still need to do the steps?

with warm regards

AlalasundaramSaravanan

Dear Mahendra

I could not send the file through mail, please note the extract below.

Exceptions during ssm instanace creation

2010-02-25 18:33:22,656 [C:/DOCUME~1/L
ENOVO/LOCALS~1/Temp/AlesConfig.pe rformAlesChecks2885\
CheckPassword.bat] DEBUG com.bea.security.SsmConfigTool.Daemon – stderr:
… 44 more
Caused by: java.rmi.ConnectException: Destination unreachable; nested exception is:
java.net.ConnectException: Connection refused: connect; No available router to destination
at weblogic.rjvm.ConnectionManager.bootstrap(ConnectionManager.java:464)
at weblogic.rjvm.ConnectionManager.bootstrap(ConnectionManager.java:315)
at weblogic.rjvm.RJVMManager.findOrCreateRemoteInternal(RJVMManager.java:251)
at weblogic.rjvm.RJVMManager.findOrCreate(RJVMManager.java:194)
at weblogic.rjvm.RJVMFinder.findOrCreateRemoteServer(RJVMFinder.java:238)
2010-02-25 18:33:23,172 [C:/DOCUME~1/LENOVO/LOCAL
S~1/Temp/AlesConfig.performAlesChecks2885\CheckPassword
.bat] DEBUG com.bea.security.SsmConfigTool.Daemon – stdout: Server not running
Exception string: Error occured while performing connect : Er
ror getting the initial context. There is no server running at t3://localhost:7101
Use dumpStack() to view the full stacktrace

some exceptions during start of weblogic server

Caused By: oracle.security.jps.JpsRuntimeException: No Default or LDAP Authenticator configured on WLS
at oracle.security.jps.wls.internal.idstore.WlsLdap
IdStoreConfigProvider$WlsLdapIdStoreDescriptor.(WlsLdapIdStoreConfigProvider.java:87)
at oracle.security.jps.wls.internal.idstore.W
lsLdapIdStoreConfigProvider.getIdentityStoreConfig(WlsLdapIdStoreConfigProvider.java:74)
at oracle.security.jps.internal.idstore.ldap.LdapId
entityStoreProvider.getIdStoreConfig(LdapIdentityStoreProvider.java:217)
at oracle.security.jps.internal.idstore.ldap.LdapIdent
ityStoreProvider.getInstance(LdapIdentityStoreProvider.java:108)
at oracle.security.jps.internal.idstore.ldap.LdapIdentitySt
oreProvider.getInstance(LdapIdentityStoreProvider.java:59)
at oracle.security.jps.internal.core.runtime.ContextFactoryIm
pl.findServiceInstance(ContextFactoryImpl.java:139)
at oracle.security.jps.internal.core.runtime.ContextFactoryImpl.getContext(ContextFactoryImpl.java:170)
at oracle.security.jps.internal.core.runtime.ContextFactoryImpl.getContext(ContextFactoryImpl.java:191)
at oracle.security.jps.internal.core.runtime.JpsContextFactoryImpl.getContext(JpsContextFactoryImpl.java:129)
at oracle.security.jps.internal.core.runtime.JpsContextFactoryImpl.getContext(JpsContextFactoryImpl.java:124)
at oracle.security.jps.internal.policystore.PolicyUtil$1.run(PolicyUtil.java:628)
at oracle.security.jps.internal.policystore.PolicyUtil$1.run(PolicyUtil.java:622)
at java.security.AccessController.doPrivileged(Native Method)
at oracle.security.jps.internal.policystore.PolicyUtil.getDefaultPolicyStore(PolicyUtil.java:622)
at oracle.security.jps.internal.policystore.PolicyDelegationController.(PolicyDelegationController.java:254)
at oracle.security.jps.internal.policystore.PolicyDelegationController.(PolicyDelegationController.java:248)
at oracle.security.jps.internal.policystore.JavaPolicyProvider.(JavaPolicyProvider.java:130)
at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:39)
at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:27)
at java.lang.reflect.Constructor.newInstance(Constructor.java:513)
at java.lang.Class.newInstance0(Class.java:355)
at java.lang.Class.newInstance(Class.java:308)
at weblogic.security.service.CommonSecurityServiceManagerDelegateImp
l.loadOPSSPolicy(CommonSecurityServiceManagerDelegateImpl.java:1312)
at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.initia
lize(CommonSecurityServiceManagerDelegateImpl.java:1018)
at weblogic.security.service.SecurityServiceManager.initialize(SecurityServiceManager.java:875)
at weblogic.security.SecurityService.start(SecurityService.java:141)
at weblogic.t3.srvr.SubsystemRequest.run(SubsystemRequest.java:64)
at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)

with warm regards

AlalasundaramSaravanan

Hi Mahendra

Hi again, i new in tecnology OES, this post it’s very helpful, but i have many questions about before and after of protecting weblogic.

Before of executing the config tool it’s necessary execute an enrollment and asi password??
After of executing the discovery mode when i modify the load.conf where i would modify the file load.conf in SSM instance or in OES instance?? I have two separated instances one contains a OES server and another have a SSM whith a weblogic, i don’t know where is necessary execute the policyloader??
i apologize for my poor english

Hi Mahendra

Thank you for your answer and thank you for your patience. Your answer help me to understand better the process of protect the weblogic server.

Hi Mahendra

Can you help me to resolve an issue occurs when i run the policyloader.

When i execute ./policyloader.sh load.conf the log send me this error:

Start loading Rule, time is: vie mar 5 2010 12:24:16 EST
loading policy from file /u01/oracle/product/weblogi
c/ales32-admin/examples/policy/rule.1

Number of Authorization and Role Mapping Rules processed : 1, time is: vie mar 5 2010 12:24:16 EST
BLM Syntax Exception : privilege in action must be in DB://priv/RootOrg!ultraAppOrg!shared!reserve
———The input data = : grant(//priv/RootOrg!ultr
aAppOrg!shared!reserve,//app/policy/RootOrg/ultraAppOrg/shared/jd
bc/ConnectionPool/negocioDataSource,//role/Everyone) if true; : line No.1
BLM Syntax Exception : privilege in action must be in DB:
//priv/RootOrg!ultraAppOrg!shared!reserve
———The input data = : grant(//priv/RootOrg!ultr
aAppOrg!shared!reserve,//app/policy/RootOrg/ultraAppOrg/shared/j
dbc/ConnectionPool/negocioDataSource,//role/Everyone) if true; : line No.1

End loading Rule, time is: vie mar 5 2010 12:24:16 EST

Rollingback 1 BLM transactions due to an error.
The Policy loader transaction has been rolled back, please refer to the BLM Server logs for details.

The Policy loader transaction has been rolled back, please refer to the BLM Server logs for details.

ASI shutting down
disabling policy cache invalidator
PolicyCacheInvalidator thread is stopping
ASI shutdown complete
Policy Loader has terminated! Please check the log file to see if there is any error messages.

I generated a new resource shared>jdbc>ConectioPool>n
egocioDataSource but it don’t works, do you have any idea or suggestion for fix this issue.

Thank you in advance

Regards

Hi Mahendra

I have a new issue about the import policies.

I can import the policies and the log don’t send me any error but when i go to EUI Admin console the app not have rule or policy in the resource tab, I mean the org and app it’s fine but no have any policies or rule associated with the resources.

I don’t know if it’s right or i missing a step after or before.

I follow your tips and the install, configuration and discovery mode works fine but i can’t load the policies appropriately.

Do you have any recommendation??

Thanks

Hi Mahendra,

we are facing issues on accessing an application deployed on the weblogic domain that is being protected by OES SSM (wls-ssm). when i access the application, a login popup window appears, and even if i login as weblogic it still shows that the page is forbidden.

how do we configure the resources of the application we want to protect in OES? and how is the mapping/binding being done from resources configured in OES to the actual resources deployed in the WLS server?

thanks,
jay

Hi Mahendra,

Thanks for your reply.

Are the roles and policies you are referring to, different to those that were created from the config tool?

After running the config tool, i have added AdminServer (resource) in wlsapp_org_190310_1 > shared > svr (resource). i have also created autorization policies for the “weblogic” user for wlsapp_org_190310_1, wlsapp_org_190310_1/shared, and wlsapp_org_190310_1/shared/svr/AdminServer resources. i also tried adding the application through the OES EUI but with no success.

after deploying the application in my wls domain, is there anything that i should do in OES admin? like, define the application resource in OES? I ask this because i am wondering on how i could define the level of security i can put in my application. How do i define the application resources in OES admin and how are they being mapped back to the actual application deployed in the wls domain? and do we need to define every single folder and jsp in OES manually?

below is the log from \ales32-ssm\wls-ssm\instance\wlsapp_inst_190310_1\log\system_console.log after i start my wls domain and try to access the web application:

====================
2010-03-23 18:00:11,609 [[ACTIVE] ExecuteThread: ‘0’ for queue: ‘weblogic.kernel.Default (self-tuning)’] ERROR com.bea.security.providers.authorization.asi.PatternClassLoader – Missing JAR file: C:\OES\OES_WLS1030_190310_1\ales32-ssm\wls-ssm\lib\providers\wls\v9\jdbc2_0-stdext.jar
2010-03-23 18:00:13,609 [[ACTIVE] ExecuteThread: ‘0’ for queue: ‘weblogic.kernel.Default (self-tuning)’] WARN com.bea.security.providers.authorization.asi.RbacAttributeRetriever – getAllSupportedAttributes(): Can not get IdentityQuery object. Make sure your metadirectory is properly configured.
2010-03-23 18:00:14,297 [[ACTIVE] ExecuteThread: ‘0’ for queue: ‘weblogic.kernel.Default (self-tuning)’] WARN com.bea.security.providers.authorization.asi.ARME.soap.PolicyUpdateService – no host specified in the ARME configuration, attempting to determine host name…
2010-03-23 18:00:16,109 [Thread-16] WARN com.bea.security.providers.authorization.asi.ARME.soap.PDClient – no host specified in the ARME configuration, attempting to determine host address…
2010-03-23 18:00:20,922 [Thread-16] WARN org.apache.axis.transport.http.HTTPSender – The headers do not contain element content-length.
2010-03-23 18:00:21,891 [[ACTIVE] ExecuteThread: ‘0’ for queue: ‘weblogic.kernel.Default (self-tuning)’] ERROR com.bea.security.providers.authorization.asi.PatternClassLoader – Missing JAR file: C:\OES\OES_WLS1030_190310_1\ales32-ssm\wls-ssm\lib\providers\wls\v9\jdbc2_0-stdext.jar
2010-03-23 18:00:22,266 [[ACTIVE] ExecuteThread: ‘0’ for queue: ‘weblogic.kernel.Default (self-tuning)’] WARN com.bea.security.providers.authorization.asi.RbacAttributeRetriever – getAllSupportedAttributes(): Can not get IdentityQuery object. Make sure your metadirectory is properly configured.
2010-03-23 18:00:25,266 [[ACTIVE] ExecuteThread: ‘0’ for queue: ‘weblogic.kernel.Default (self-tuning)’] DEBUG com.wles.util.DebugStore – queryAccess: DebugStore:
========== BEGIN Policy Evaluation (2010-03-23 18:00:25,266 SGT) ==========
RequestResource is: //app/policy/RootOrg/wlsapp_org_190310_1/shared/svr/AdminServer
UserInfo:
Name: //user/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/weblogic/
Groups: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/Administrators/ //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Resource Present: true
Roles Granted: //role/RootOrg!wlsapp_org_190310_1!shared!Administrators //role/RootOrg!wlsapp_org_190310_1!shared!Admin //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Role Mapping Policies:
1. Result: true; Policy Type: grant
Role: //role/RootOrg!wlsapp_org_190310_1!shared!Administrators
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared
Subject: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/Administrators/
Constraints: NONE
Delegator: null

2. Result: true; Policy Type: grant
Role: //role/RootOrg!wlsapp_org_190310_1!shared!Admin
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared
Subject: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/Administrators/
Constraints: NONE
Delegator: null

3. Result: true; Policy Type: grant
Role: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared
Subject: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Constraints: NONE
Delegator: null

ATZ Policies:
1. Result: true; Policy Type: grant
Privilege: any
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared/svr/AdminServer
Subject: //user/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/weblogic/
Constraints: NONE
Delegator: null

========== END Policy Evaluation (2010-03-23 18:00:25,266 SGT) ==========

2010-03-23 18:01:43,094 [[STANDBY] ExecuteThread: ‘2’ for queue: ‘weblogic.kernel.Default (self-tuning)’] DEBUG com.wles.util.DebugStore – Reource found: //app/policy/RootOrg/wlsapp_org_190310_1/shared/adm/Configuration
2010-03-23 18:01:43,094 [[STANDBY] ExecuteThread: ‘2’ for queue: ‘weblogic.kernel.Default (self-tuning)’] DEBUG com.wles.util.DebugStore – queryRoles: DebugStore:
========== BEGIN Policy Evaluation (2010-03-23 18:01:43,94 SGT) ==========
RequestResource is: //app/policy/RootOrg/wlsapp_org_190310_1/shared/adm/Configuration
UserInfo:
Name: //user/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/anonymous/
Groups: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Resource Present: true
Roles Granted: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Role Mapping Policies:
1. Result: true; Policy Type: grant
Role: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared
Subject: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Constraints: NONE
Delegator: null

ATZ Policies: NONE
========== END Policy Evaluation (2010-03-23 18:01:43,94 SGT) ==========

2010-03-23 18:01:48,438 [[STANDBY] ExecuteThread: ‘2’ for queue: ‘weblogic.kernel.Default (self-tuning)’] DEBUG com.wles.util.DebugStore – queryAccess: DebugStore:
========== BEGIN Policy Evaluation (2010-03-23 18:01:48,422 SGT) ==========
RequestResource is: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi/weblogic
UserInfo:
Name: //user/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/anonymous/
Groups: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Resource Present: true
Roles Granted: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Role Mapping Policies:
1. Result: true; Policy Type: grant
Role: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared
Subject: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Constraints: NONE
Delegator: null

ATZ Policies:
1. Result: true; Policy Type: grant
Privilege: any
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi
Subject: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Constraints: NONE
Delegator: null

========== END Policy Evaluation (2010-03-23 18:01:48,422 SGT) ==========

2010-03-23 18:01:48,438 [[STANDBY] ExecuteThread: ‘2’ for queue: ‘weblogic.kernel.Default (self-tuning)’] DEBUG com.wles.util.DebugStore – queryAccess: DebugStore:
========== BEGIN Policy Evaluation (2010-03-23 18:01:48,438 SGT) ==========
RequestResource is: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi/weblogic/wsee
UserInfo:
Name: //user/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/anonymous/
Groups: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Resource Present: true
Roles Granted: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Role Mapping Policies:
1. Result: true; Policy Type: grant
Role: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared
Subject: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Constraints: NONE
Delegator: null

ATZ Policies:
1. Result: true; Policy Type: grant
Privilege: any
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi
Subject: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Constraints: NONE
Delegator: null

========== END Policy Evaluation (2010-03-23 18:01:48,438 SGT) ==========

2010-03-23 18:01:48,578 [[STANDBY] ExecuteThread: ‘2’ for queue: ‘weblogic.kernel.Default (self-tuning)’] DEBUG com.wles.util.DebugStore – queryAccess: DebugStore:
========== BEGIN Policy Evaluation (2010-03-23 18:01:48,578 SGT) ==========
RequestResource is: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi/weblogic/wsee/DefaultQueue
UserInfo:
Name: //user/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/anonymous/
Groups: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Resource Present: true
Roles Granted: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Role Mapping Policies:
1. Result: true; Policy Type: grant
Role: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared
Subject: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Constraints: NONE
Delegator: null

ATZ Policies:
1. Result: true; Policy Type: grant
Privilege: any
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi
Subject: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Constraints: NONE
Delegator: null

========== END Policy Evaluation (2010-03-23 18:01:48,578 SGT) ==========

2010-03-23 18:02:48,469 [[ACTIVE] ExecuteThread: ‘0’ for queue: ‘weblogic.kernel.Default (self-tuning)’] DEBUG com.wles.util.DebugStore – queryAccess: DebugStore:
========== BEGIN Policy Evaluation (2010-03-23 18:02:48,469 SGT) ==========
RequestResource is: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi/weblogic
UserInfo:
Name: //user/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/anonymous/
Groups: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Resource Present: true
Roles Granted: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Role Mapping Policies:
1. Result: true; Policy Type: grant
Role: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared
Subject: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Constraints: NONE
Delegator: null

ATZ Policies:
1. Result: true; Policy Type: grant
Privilege: any
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi
Subject: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Constraints: NONE
Delegator: null

========== END Policy Evaluation (2010-03-23 18:02:48,469 SGT) ==========

2010-03-23 18:02:48,469 [[ACTIVE] ExecuteThread: ‘0’ for queue: ‘weblogic.kernel.Default (self-tuning)’] DEBUG com.wles.util.DebugStore – queryAccess: DebugStore:
========== BEGIN Policy Evaluation (2010-03-23 18:02:48,469 SGT) ==========
RequestResource is: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi/weblogic/wsee
UserInfo:
Name: //user/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/anonymous/
Groups: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Resource Present: true
Roles Granted: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Role Mapping Policies:
1. Result: true; Policy Type: grant
Role: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared
Subject: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Constraints: NONE
Delegator: null

ATZ Policies:
1. Result: true; Policy Type: grant
Privilege: any
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi
Subject: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Constraints: NONE
Delegator: null

========== END Policy Evaluation (2010-03-23 18:02:48,469 SGT) ==========

2010-03-23 18:02:48,469 [[ACTIVE] ExecuteThread: ‘0’ for queue: ‘weblogic.kernel.Default (self-tuning)’] DEBUG com.wles.util.DebugStore – queryAccess: DebugStore:
========== BEGIN Policy Evaluation (2010-03-23 18:02:48,469 SGT) ==========
RequestResource is: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi/weblogic/wsee/DefaultQueue
UserInfo:
Name: //user/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/anonymous/
Groups: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Resource Present: true
Roles Granted: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Role Mapping Policies:
1. Result: true; Policy Type: grant
Role: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared
Subject: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Constraints: NONE
Delegator: null

ATZ Policies:
1. Result: true; Policy Type: grant
Privilege: any
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi
Subject: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Constraints: NONE
Delegator: null

========== END Policy Evaluation (2010-03-23 18:02:48,469 SGT) ==========

2010-03-23 18:03:48,469 [[ACTIVE] ExecuteThread: ‘1’ for queue: ‘weblogic.kernel.Default (self-tuning)’] DEBUG com.wles.util.DebugStore – queryAccess: DebugStore:
========== BEGIN Policy Evaluation (2010-03-23 18:03:48,469 SGT) ==========
RequestResource is: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi/weblogic
UserInfo:
Name: //user/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/anonymous/
Groups: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Resource Present: true
Roles Granted: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Role Mapping Policies:
1. Result: true; Policy Type: grant
Role: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared
Subject: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Constraints: NONE
Delegator: null

ATZ Policies:
1. Result: true; Policy Type: grant
Privilege: any
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi
Subject: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Constraints: NONE
Delegator: null

========== END Policy Evaluation (2010-03-23 18:03:48,469 SGT) ==========

2010-03-23 18:03:48,469 [[ACTIVE] ExecuteThread: ‘1’ for queue: ‘weblogic.kernel.Default (self-tuning)’] DEBUG com.wles.util.DebugStore – queryAccess: DebugStore:
========== BEGIN Policy Evaluation (2010-03-23 18:03:48,469 SGT) ==========
RequestResource is: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi/weblogic/wsee
UserInfo:
Name: //user/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/anonymous/
Groups: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Resource Present: true
Roles Granted: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Role Mapping Policies:
1. Result: true; Policy Type: grant
Role: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared
Subject: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Constraints: NONE
Delegator: null

ATZ Policies:
1. Result: true; Policy Type: grant
Privilege: any
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi
Subject: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Constraints: NONE
Delegator: null

========== END Policy Evaluation (2010-03-23 18:03:48,469 SGT) ==========

2010-03-23 18:03:48,469 [[ACTIVE] ExecuteThread: ‘1’ for queue: ‘weblogic.kernel.Default (self-tuning)’] DEBUG com.wles.util.DebugStore – queryAccess: DebugStore:
========== BEGIN Policy Evaluation (2010-03-23 18:03:48,469 SGT) ==========
RequestResource is: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi/weblogic/wsee/DefaultQueue
UserInfo:
Name: //user/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/anonymous/
Groups: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Resource Present: true
Roles Granted: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Role Mapping Policies:
1. Result: true; Policy Type: grant
Role: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared
Subject: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Constraints: NONE
Delegator: null

ATZ Policies:
1. Result: true; Policy Type: grant
Privilege: any
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi
Subject: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Constraints: NONE
Delegator: null

========== END Policy Evaluation (2010-03-23 18:03:48,469 SGT) ==========

2010-03-23 18:03:48,594 [[ACTIVE] ExecuteThread: ‘0’ for queue: ‘weblogic.kernel.Default (self-tuning)’] DEBUG com.wles.util.DebugStore – queryAccess: DebugStore:
========== BEGIN Policy Evaluation (2010-03-23 18:03:48,594 SGT) ==========
RequestResource is: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi/weblogic
UserInfo:
Name: //user/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/anonymous/
Groups: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Resource Present: true
Roles Granted: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Role Mapping Policies:
1. Result: true; Policy Type: grant
Role: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared
Subject: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Constraints: NONE
Delegator: null

ATZ Policies:
1. Result: true; Policy Type: grant
Privilege: any
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi
Subject: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Constraints: NONE
Delegator: null

========== END Policy Evaluation (2010-03-23 18:03:48,594 SGT) ==========

2010-03-23 18:03:48,594 [[ACTIVE] ExecuteThread: ‘1’ for queue: ‘weblogic.kernel.Default (self-tuning)’] DEBUG com.wles.util.DebugStore – queryAccess: DebugStore:
========== BEGIN Policy Evaluation (2010-03-23 18:03:48,594 SGT) ==========
RequestResource is: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi/weblogic
UserInfo:
Name: //user/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/anonymous/
Groups: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Resource Present: true
Roles Granted: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Role Mapping Policies:
1. Result: true; Policy Type: grant
Role: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared
Subject: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Constraints: NONE
Delegator: null

ATZ Policies:
1. Result: true; Policy Type: grant
Privilege: any
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi
Subject: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Constraints: NONE
Delegator: null

========== END Policy Evaluation (2010-03-23 18:03:48,594 SGT) ==========

2010-03-23 18:03:48,594 [[ACTIVE] ExecuteThread: ‘0’ for queue: ‘weblogic.kernel.Default (self-tuning)’] DEBUG com.wles.util.DebugStore – queryAccess: DebugStore:
========== BEGIN Policy Evaluation (2010-03-23 18:03:48,594 SGT) ==========
RequestResource is: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi/weblogic/wsee
UserInfo:
Name: //user/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/anonymous/
Groups: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Resource Present: true
Roles Granted: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Role Mapping Policies:
1. Result: true; Policy Type: grant
Role: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared
Subject: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Constraints: NONE
Delegator: null

ATZ Policies:
1. Result: true; Policy Type: grant
Privilege: any
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi
Subject: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Constraints: NONE
Delegator: null

========== END Policy Evaluation (2010-03-23 18:03:48,594 SGT) ==========

2010-03-23 18:03:48,609 [[ACTIVE] ExecuteThread: ‘1’ for queue: ‘weblogic.kernel.Default (self-tuning)’] DEBUG com.wles.util.DebugStore – queryAccess: DebugStore:
========== BEGIN Policy Evaluation (2010-03-23 18:03:48,594 SGT) ==========
RequestResource is: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi/weblogic/wsee
UserInfo:
Name: //user/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/anonymous/
Groups: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Resource Present: true
Roles Granted: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Role Mapping Policies:
1. Result: true; Policy Type: grant
Role: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared
Subject: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Constraints: NONE
Delegator: null

ATZ Policies:
1. Result: true; Policy Type: grant
Privilege: any
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi
Subject: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Constraints: NONE
Delegator: null

========== END Policy Evaluation (2010-03-23 18:03:48,594 SGT) ==========

2010-03-23 18:03:48,609 [[ACTIVE] ExecuteThread: ‘0’ for queue: ‘weblogic.kernel.Default (self-tuning)’] DEBUG com.wles.util.DebugStore – queryAccess: DebugStore:
========== BEGIN Policy Evaluation (2010-03-23 18:03:48,609 SGT) ==========
RequestResource is: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi/weblogic/wsee/DefaultQueue
UserInfo:
Name: //user/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/anonymous/
Groups: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Resource Present: true
Roles Granted: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Role Mapping Policies:
1. Result: true; Policy Type: grant
Role: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared
Subject: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Constraints: NONE
Delegator: null

ATZ Policies:
1. Result: true; Policy Type: grant
Privilege: any
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi
Subject: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Constraints: NONE
Delegator: null

========== END Policy Evaluation (2010-03-23 18:03:48,609 SGT) ==========

2010-03-23 18:03:48,609 [[ACTIVE] ExecuteThread: ‘1’ for queue: ‘weblogic.kernel.Default (self-tuning)’] DEBUG com.wles.util.DebugStore – queryAccess: DebugStore:
========== BEGIN Policy Evaluation (2010-03-23 18:03:48,609 SGT) ==========
RequestResource is: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi/weblogic/wsee/DefaultQueue
UserInfo:
Name: //user/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/anonymous/
Groups: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Resource Present: true
Roles Granted: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Role Mapping Policies:
1. Result: true; Policy Type: grant
Role: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared
Subject: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Constraints: NONE
Delegator: null

ATZ Policies:
1. Result: true; Policy Type: grant
Privilege: any
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi
Subject: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Constraints: NONE
Delegator: null

========== END Policy Evaluation (2010-03-23 18:03:48,609 SGT) ==========

2010-03-23 18:04:48,609 [[ACTIVE] ExecuteThread: ‘0’ for queue: ‘weblogic.kernel.Default (self-tuning)’] DEBUG com.wles.util.DebugStore – queryAccess: DebugStore:
========== BEGIN Policy Evaluation (2010-03-23 18:04:48,609 SGT) ==========
RequestResource is: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi/weblogic
UserInfo:
Name: //user/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/anonymous/
Groups: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Resource Present: true
Roles Granted: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Role Mapping Policies:
1. Result: true; Policy Type: grant
Role: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared
Subject: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Constraints: NONE
Delegator: null

ATZ Policies:
1. Result: true; Policy Type: grant
Privilege: any
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi
Subject: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Constraints: NONE
Delegator: null

========== END Policy Evaluation (2010-03-23 18:04:48,609 SGT) ==========

2010-03-23 18:04:48,609 [[ACTIVE] ExecuteThread: ‘1’ for queue: ‘weblogic.kernel.Default (self-tuning)’] DEBUG com.wles.util.DebugStore – queryAccess: DebugStore:
========== BEGIN Policy Evaluation (2010-03-23 18:04:48,609 SGT) ==========
RequestResource is: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi/weblogic
UserInfo:
Name: //user/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/anonymous/
Groups: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Resource Present: true
Roles Granted: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Role Mapping Policies:
1. Result: true; Policy Type: grant
Role: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared
Subject: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Constraints: NONE
Delegator: null

ATZ Policies:
1. Result: true; Policy Type: grant
Privilege: any
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi
Subject: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Constraints: NONE
Delegator: null

========== END Policy Evaluation (2010-03-23 18:04:48,609 SGT) ==========

2010-03-23 18:04:48,625 [[ACTIVE] ExecuteThread: ‘0’ for queue: ‘weblogic.kernel.Default (self-tuning)’] DEBUG com.wles.util.DebugStore – queryAccess: DebugStore:
========== BEGIN Policy Evaluation (2010-03-23 18:04:48,625 SGT) ==========
RequestResource is: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi/weblogic/wsee
UserInfo:
Name: //user/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/anonymous/
Groups: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Resource Present: true
Roles Granted: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Role Mapping Policies:
1. Result: true; Policy Type: grant
Role: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared
Subject: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Constraints: NONE
Delegator: null

ATZ Policies:
1. Result: true; Policy Type: grant
Privilege: any
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi
Subject: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Constraints: NONE
Delegator: null

========== END Policy Evaluation (2010-03-23 18:04:48,625 SGT) ==========

2010-03-23 18:04:48,625 [[ACTIVE] ExecuteThread: ‘1’ for queue: ‘weblogic.kernel.Default (self-tuning)’] DEBUG com.wles.util.DebugStore – queryAccess: DebugStore:
========== BEGIN Policy Evaluation (2010-03-23 18:04:48,625 SGT) ==========
RequestResource is: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi/weblogic/wsee
UserInfo:
Name: //user/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/anonymous/
Groups: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Resource Present: true
Roles Granted: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Role Mapping Policies:
1. Result: true; Policy Type: grant
Role: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared
Subject: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Constraints: NONE
Delegator: null

ATZ Policies:
1. Result: true; Policy Type: grant
Privilege: any
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi
Subject: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Constraints: NONE
Delegator: null

========== END Policy Evaluation (2010-03-23 18:04:48,625 SGT) ==========

2010-03-23 18:04:48,625 [[ACTIVE] ExecuteThread: ‘1’ for queue: ‘weblogic.kernel.Default (self-tuning)’] DEBUG com.wles.util.DebugStore – queryAccess: DebugStore:
========== BEGIN Policy Evaluation (2010-03-23 18:04:48,625 SGT) ==========
RequestResource is: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi/weblogic/wsee/DefaultQueue
UserInfo:
Name: //user/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/anonymous/
Groups: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Resource Present: true
Roles Granted: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Role Mapping Policies:
1. Result: true; Policy Type: grant
Role: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared
Subject: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Constraints: NONE
Delegator: null

ATZ Policies:
1. Result: true; Policy Type: grant
Privilege: any
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi
Subject: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Constraints: NONE
Delegator: null

========== END Policy Evaluation (2010-03-23 18:04:48,625 SGT) ==========

2010-03-23 18:04:48,625 [[ACTIVE] ExecuteThread: ‘0’ for queue: ‘weblogic.kernel.Default (self-tuning)’] DEBUG com.wles.util.DebugStore – queryAccess: DebugStore:
========== BEGIN Policy Evaluation (2010-03-23 18:04:48,625 SGT) ==========
RequestResource is: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi/weblogic/wsee/DefaultQueue
UserInfo:
Name: //user/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/anonymous/
Groups: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Resource Present: true
Roles Granted: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Role Mapping Policies:
1. Result: true; Policy Type: grant
Role: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared
Subject: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Constraints: NONE
Delegator: null

ATZ Policies:
1. Result: true; Policy Type: grant
Privilege: any
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi
Subject: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Constraints: NONE
Delegator: null

========== END Policy Evaluation (2010-03-23 18:04:48,625 SGT) ==========

Hi Mahendra,

Thanks for your reply.

Are the roles and policies you are referring to different to those that were created from the config tool?

After running the config tool, i have added AdminServer (resource) in wlsapp_org_190310_1 > shared > svr (resource). i have also created autorization policies for the “weblogic” user for wlsapp_org_190310_1, wlsapp_org_190310_1/shared, and wlsapp_org_190310_1/shared/svr/AdminServer resources. i also tried adding the application in OES EUI but with no success.

after deploying the application in my wls domain, is there anything that i should do in OES admin? like, define the application resource in OES? I ask this because i am wondering on how i could define the level of security i can put in my application. How do i define the application resources in OES admin and how are they being mapped back to the actual application deployed in the wls domain? and do we need to define every single folder and jsp in OES manually?

below is the log from \ales32-ssm\wls-ssm\instance\wlsapp_inst_190310_1\log\system_console.log after i start my wls domain and try to access the web application:

====================
2010-03-23 18:00:11,609 [[ACTIVE] ExecuteThread: ‘0’ for queue: ‘weblogic.kernel.Default (self-tuning)’] ERROR com.bea.security.providers.authorization.asi.PatternClassLoader – Missing JAR file: C:\OES\OES_WLS1030_190310_1\ales32-ssm\wls-ssm\lib\providers\wls\v9\jdbc2_0-stdext.jar
2010-03-23 18:00:13,609 [[ACTIVE] ExecuteThread: ‘0’ for queue: ‘weblogic.kernel.Default (self-tuning)’] WARN com.bea.security.providers.authorization.asi.RbacAttributeRetriever – getAllSupportedAttributes(): Can not get IdentityQuery object. Make sure your metadirectory is properly configured.
2010-03-23 18:00:14,297 [[ACTIVE] ExecuteThread: ‘0’ for queue: ‘weblogic.kernel.Default (self-tuning)’] WARN com.bea.security.providers.authorization.asi.ARME.soap.PolicyUpdateService – no host specified in the ARME configuration, attempting to determine host name…
2010-03-23 18:00:16,109 [Thread-16] WARN com.bea.security.providers.authorization.asi.ARME.soap.PDClient – no host specified in the ARME configuration, attempting to determine host address…
2010-03-23 18:00:20,922 [Thread-16] WARN org.apache.axis.transport.http.HTTPSender – The headers do not contain element content-length.
2010-03-23 18:00:21,891 [[ACTIVE] ExecuteThread: ‘0’ for queue: ‘weblogic.kernel.Default (self-tuning)’] ERROR com.bea.security.providers.authorization.asi.PatternClassLoader – Missing JAR file: C:\OES\OES_WLS1030_190310_1\ales32-ssm\wls-ssm\lib\providers\wls\v9\jdbc2_0-stdext.jar
2010-03-23 18:00:22,266 [[ACTIVE] ExecuteThread: ‘0’ for queue: ‘weblogic.kernel.Default (self-tuning)’] WARN com.bea.security.providers.authorization.asi.RbacAttributeRetriever – getAllSupportedAttributes(): Can not get IdentityQuery object. Make sure your metadirectory is properly configured.
2010-03-23 18:00:25,266 [[ACTIVE] ExecuteThread: ‘0’ for queue: ‘weblogic.kernel.Default (self-tuning)’] DEBUG com.wles.util.DebugStore – queryAccess: DebugStore:
========== BEGIN Policy Evaluation (2010-03-23 18:00:25,266 SGT) ==========
RequestResource is: //app/policy/RootOrg/wlsapp_org_190310_1/shared/svr/AdminServer
UserInfo:
Name: //user/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/weblogic/
Groups: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/Administrators/ //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Resource Present: true
Roles Granted: //role/RootOrg!wlsapp_org_190310_1!shared!Administrators //role/RootOrg!wlsapp_org_190310_1!shared!Admin //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Role Mapping Policies:
1. Result: true; Policy Type: grant
Role: //role/RootOrg!wlsapp_org_190310_1!shared!Administrators
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared
Subject: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/Administrators/
Constraints: NONE
Delegator: null

2. Result: true; Policy Type: grant
Role: //role/RootOrg!wlsapp_org_190310_1!shared!Admin
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared
Subject: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/Administrators/
Constraints: NONE
Delegator: null

3. Result: true; Policy Type: grant
Role: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared
Subject: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Constraints: NONE
Delegator: null

ATZ Policies:
1. Result: true; Policy Type: grant
Privilege: any
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared/svr/AdminServer
Subject: //user/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/weblogic/
Constraints: NONE
Delegator: null

========== END Policy Evaluation (2010-03-23 18:00:25,266 SGT) ==========

2010-03-23 18:01:43,094 [[STANDBY] ExecuteThread: ‘2’ for queue: ‘weblogic.kernel.Default (self-tuning)’] DEBUG com.wles.util.DebugStore – Reource found: //app/policy/RootOrg/wlsapp_org_190310_1/shared/adm/Configuration
2010-03-23 18:01:43,094 [[STANDBY] ExecuteThread: ‘2’ for queue: ‘weblogic.kernel.Default (self-tuning)’] DEBUG com.wles.util.DebugStore – queryRoles: DebugStore:
========== BEGIN Policy Evaluation (2010-03-23 18:01:43,94 SGT) ==========
RequestResource is: //app/policy/RootOrg/wlsapp_org_190310_1/shared/adm/Configuration
UserInfo:
Name: //user/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/anonymous/
Groups: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Resource Present: true
Roles Granted: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Role Mapping Policies:
1. Result: true; Policy Type: grant
Role: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared
Subject: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Constraints: NONE
Delegator: null

ATZ Policies: NONE
========== END Policy Evaluation (2010-03-23 18:01:43,94 SGT) ==========

2010-03-23 18:01:48,438 [[STANDBY] ExecuteThread: ‘2’ for queue: ‘weblogic.kernel.Default (self-tuning)’] DEBUG com.wles.util.DebugStore – queryAccess: DebugStore:
========== BEGIN Policy Evaluation (2010-03-23 18:01:48,422 SGT) ==========
RequestResource is: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi/weblogic
UserInfo:
Name: //user/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/anonymous/
Groups: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Resource Present: true
Roles Granted: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Role Mapping Policies:
1. Result: true; Policy Type: grant
Role: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared
Subject: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Constraints: NONE
Delegator: null

ATZ Policies:
1. Result: true; Policy Type: grant
Privilege: any
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi
Subject: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Constraints: NONE
Delegator: null

========== END Policy Evaluation (2010-03-23 18:01:48,422 SGT) ==========

2010-03-23 18:01:48,438 [[STANDBY] ExecuteThread: ‘2’ for queue: ‘weblogic.kernel.Default (self-tuning)’] DEBUG com.wles.util.DebugStore – queryAccess: DebugStore:
========== BEGIN Policy Evaluation (2010-03-23 18:01:48,438 SGT) ==========
RequestResource is: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi/weblogic/wsee
UserInfo:
Name: //user/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/anonymous/
Groups: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Resource Present: true
Roles Granted: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Role Mapping Policies:
1. Result: true; Policy Type: grant
Role: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared
Subject: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Constraints: NONE
Delegator: null

ATZ Policies:
1. Result: true; Policy Type: grant
Privilege: any
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi
Subject: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Constraints: NONE
Delegator: null

========== END Policy Evaluation (2010-03-23 18:01:48,438 SGT) ==========

2010-03-23 18:01:48,578 [[STANDBY] ExecuteThread: ‘2’ for queue: ‘weblogic.kernel.Default (self-tuning)’] DEBUG com.wles.util.DebugStore – queryAccess: DebugStore:
========== BEGIN Policy Evaluation (2010-03-23 18:01:48,578 SGT) ==========
RequestResource is: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi/weblogic/wsee/DefaultQueue
UserInfo:
Name: //user/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/anonymous/
Groups: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Resource Present: true
Roles Granted: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Role Mapping Policies:
1. Result: true; Policy Type: grant
Role: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared
Subject: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Constraints: NONE
Delegator: null

ATZ Policies:
1. Result: true; Policy Type: grant
Privilege: any
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi
Subject: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Constraints: NONE
Delegator: null

========== END Policy Evaluation (2010-03-23 18:01:48,578 SGT) ==========

2010-03-23 18:02:48,469 [[ACTIVE] ExecuteThread: ‘0’ for queue: ‘weblogic.kernel.Default (self-tuning)’] DEBUG com.wles.util.DebugStore – queryAccess: DebugStore:
========== BEGIN Policy Evaluation (2010-03-23 18:02:48,469 SGT) ==========
RequestResource is: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi/weblogic
UserInfo:
Name: //user/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/anonymous/
Groups: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Resource Present: true
Roles Granted: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Role Mapping Policies:
1. Result: true; Policy Type: grant
Role: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared
Subject: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Constraints: NONE
Delegator: null

ATZ Policies:
1. Result: true; Policy Type: grant
Privilege: any
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi
Subject: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Constraints: NONE
Delegator: null

========== END Policy Evaluation (2010-03-23 18:02:48,469 SGT) ==========

2010-03-23 18:02:48,469 [[ACTIVE] ExecuteThread: ‘0’ for queue: ‘weblogic.kernel.Default (self-tuning)’] DEBUG com.wles.util.DebugStore – queryAccess: DebugStore:
========== BEGIN Policy Evaluation (2010-03-23 18:02:48,469 SGT) ==========
RequestResource is: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi/weblogic/wsee
UserInfo:
Name: //user/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/anonymous/
Groups: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Resource Present: true
Roles Granted: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Role Mapping Policies:
1. Result: true; Policy Type: grant
Role: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared
Subject: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Constraints: NONE
Delegator: null

ATZ Policies:
1. Result: true; Policy Type: grant
Privilege: any
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi
Subject: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Constraints: NONE
Delegator: null

========== END Policy Evaluation (2010-03-23 18:02:48,469 SGT) ==========

2010-03-23 18:02:48,469 [[ACTIVE] ExecuteThread: ‘0’ for queue: ‘weblogic.kernel.Default (self-tuning)’] DEBUG com.wles.util.DebugStore – queryAccess: DebugStore:
========== BEGIN Policy Evaluation (2010-03-23 18:02:48,469 SGT) ==========
RequestResource is: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi/weblogic/wsee/DefaultQueue
UserInfo:
Name: //user/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/anonymous/
Groups: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Resource Present: true
Roles Granted: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Role Mapping Policies:
1. Result: true; Policy Type: grant
Role: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared
Subject: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Constraints: NONE
Delegator: null

ATZ Policies:
1. Result: true; Policy Type: grant
Privilege: any
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi
Subject: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Constraints: NONE
Delegator: null

========== END Policy Evaluation (2010-03-23 18:02:48,469 SGT) ==========

2010-03-23 18:03:48,469 [[ACTIVE] ExecuteThread: ‘1’ for queue: ‘weblogic.kernel.Default (self-tuning)’] DEBUG com.wles.util.DebugStore – queryAccess: DebugStore:
========== BEGIN Policy Evaluation (2010-03-23 18:03:48,469 SGT) ==========
RequestResource is: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi/weblogic
UserInfo:
Name: //user/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/anonymous/
Groups: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Resource Present: true
Roles Granted: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Role Mapping Policies:
1. Result: true; Policy Type: grant
Role: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared
Subject: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Constraints: NONE
Delegator: null

ATZ Policies:
1. Result: true; Policy Type: grant
Privilege: any
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi
Subject: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Constraints: NONE
Delegator: null

========== END Policy Evaluation (2010-03-23 18:03:48,469 SGT) ==========

2010-03-23 18:03:48,469 [[ACTIVE] ExecuteThread: ‘1’ for queue: ‘weblogic.kernel.Default (self-tuning)’] DEBUG com.wles.util.DebugStore – queryAccess: DebugStore:
========== BEGIN Policy Evaluation (2010-03-23 18:03:48,469 SGT) ==========
RequestResource is: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi/weblogic/wsee
UserInfo:
Name: //user/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/anonymous/
Groups: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Resource Present: true
Roles Granted: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Role Mapping Policies:
1. Result: true; Policy Type: grant
Role: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared
Subject: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Constraints: NONE
Delegator: null

ATZ Policies:
1. Result: true; Policy Type: grant
Privilege: any
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi
Subject: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Constraints: NONE
Delegator: null

========== END Policy Evaluation (2010-03-23 18:03:48,469 SGT) ==========

2010-03-23 18:03:48,469 [[ACTIVE] ExecuteThread: ‘1’ for queue: ‘weblogic.kernel.Default (self-tuning)’] DEBUG com.wles.util.DebugStore – queryAccess: DebugStore:
========== BEGIN Policy Evaluation (2010-03-23 18:03:48,469 SGT) ==========
RequestResource is: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi/weblogic/wsee/DefaultQueue
UserInfo:
Name: //user/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/anonymous/
Groups: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Resource Present: true
Roles Granted: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Role Mapping Policies:
1. Result: true; Policy Type: grant
Role: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared
Subject: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Constraints: NONE
Delegator: null

ATZ Policies:
1. Result: true; Policy Type: grant
Privilege: any
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi
Subject: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Constraints: NONE
Delegator: null

========== END Policy Evaluation (2010-03-23 18:03:48,469 SGT) ==========

2010-03-23 18:03:48,594 [[ACTIVE] ExecuteThread: ‘0’ for queue: ‘weblogic.kernel.Default (self-tuning)’] DEBUG com.wles.util.DebugStore – queryAccess: DebugStore:
========== BEGIN Policy Evaluation (2010-03-23 18:03:48,594 SGT) ==========
RequestResource is: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi/weblogic
UserInfo:
Name: //user/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/anonymous/
Groups: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Resource Present: true
Roles Granted: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Role Mapping Policies:
1. Result: true; Policy Type: grant
Role: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared
Subject: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Constraints: NONE
Delegator: null

ATZ Policies:
1. Result: true; Policy Type: grant
Privilege: any
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi
Subject: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Constraints: NONE
Delegator: null

========== END Policy Evaluation (2010-03-23 18:03:48,594 SGT) ==========

2010-03-23 18:03:48,594 [[ACTIVE] ExecuteThread: ‘1’ for queue: ‘weblogic.kernel.Default (self-tuning)’] DEBUG com.wles.util.DebugStore – queryAccess: DebugStore:
========== BEGIN Policy Evaluation (2010-03-23 18:03:48,594 SGT) ==========
RequestResource is: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi/weblogic
UserInfo:
Name: //user/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/anonymous/
Groups: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Resource Present: true
Roles Granted: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Role Mapping Policies:
1. Result: true; Policy Type: grant
Role: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared
Subject: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Constraints: NONE
Delegator: null

ATZ Policies:
1. Result: true; Policy Type: grant
Privilege: any
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi
Subject: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Constraints: NONE
Delegator: null

========== END Policy Evaluation (2010-03-23 18:03:48,594 SGT) ==========

2010-03-23 18:03:48,594 [[ACTIVE] ExecuteThread: ‘0’ for queue: ‘weblogic.kernel.Default (self-tuning)’] DEBUG com.wles.util.DebugStore – queryAccess: DebugStore:
========== BEGIN Policy Evaluation (2010-03-23 18:03:48,594 SGT) ==========
RequestResource is: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi/weblogic/wsee
UserInfo:
Name: //user/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/anonymous/
Groups: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Resource Present: true
Roles Granted: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Role Mapping Policies:
1. Result: true; Policy Type: grant
Role: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared
Subject: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Constraints: NONE
Delegator: null

ATZ Policies:
1. Result: true; Policy Type: grant
Privilege: any
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi
Subject: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Constraints: NONE
Delegator: null

========== END Policy Evaluation (2010-03-23 18:03:48,594 SGT) ==========

2010-03-23 18:03:48,609 [[ACTIVE] ExecuteThread: ‘1’ for queue: ‘weblogic.kernel.Default (self-tuning)’] DEBUG com.wles.util.DebugStore – queryAccess: DebugStore:
========== BEGIN Policy Evaluation (2010-03-23 18:03:48,594 SGT) ==========
RequestResource is: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi/weblogic/wsee
UserInfo:
Name: //user/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/anonymous/
Groups: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Resource Present: true
Roles Granted: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Role Mapping Policies:
1. Result: true; Policy Type: grant
Role: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared
Subject: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Constraints: NONE
Delegator: null

ATZ Policies:
1. Result: true; Policy Type: grant
Privilege: any
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi
Subject: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Constraints: NONE
Delegator: null

========== END Policy Evaluation (2010-03-23 18:03:48,594 SGT) ==========

2010-03-23 18:03:48,609 [[ACTIVE] ExecuteThread: ‘0’ for queue: ‘weblogic.kernel.Default (self-tuning)’] DEBUG com.wles.util.DebugStore – queryAccess: DebugStore:
========== BEGIN Policy Evaluation (2010-03-23 18:03:48,609 SGT) ==========
RequestResource is: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi/weblogic/wsee/DefaultQueue
UserInfo:
Name: //user/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/anonymous/
Groups: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Resource Present: true
Roles Granted: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Role Mapping Policies:
1. Result: true; Policy Type: grant
Role: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared
Subject: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Constraints: NONE
Delegator: null

ATZ Policies:
1. Result: true; Policy Type: grant
Privilege: any
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi
Subject: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Constraints: NONE
Delegator: null

========== END Policy Evaluation (2010-03-23 18:03:48,609 SGT) ==========

2010-03-23 18:03:48,609 [[ACTIVE] ExecuteThread: ‘1’ for queue: ‘weblogic.kernel.Default (self-tuning)’] DEBUG com.wles.util.DebugStore – queryAccess: DebugStore:
========== BEGIN Policy Evaluation (2010-03-23 18:03:48,609 SGT) ==========
RequestResource is: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi/weblogic/wsee/DefaultQueue
UserInfo:
Name: //user/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/anonymous/
Groups: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Resource Present: true
Roles Granted: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Role Mapping Policies:
1. Result: true; Policy Type: grant
Role: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared
Subject: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Constraints: NONE
Delegator: null

ATZ Policies:
1. Result: true; Policy Type: grant
Privilege: any
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi
Subject: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Constraints: NONE
Delegator: null

========== END Policy Evaluation (2010-03-23 18:03:48,609 SGT) ==========

2010-03-23 18:04:48,609 [[ACTIVE] ExecuteThread: ‘0’ for queue: ‘weblogic.kernel.Default (self-tuning)’] DEBUG com.wles.util.DebugStore – queryAccess: DebugStore:
========== BEGIN Policy Evaluation (2010-03-23 18:04:48,609 SGT) ==========
RequestResource is: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi/weblogic
UserInfo:
Name: //user/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/anonymous/
Groups: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Resource Present: true
Roles Granted: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Role Mapping Policies:
1. Result: true; Policy Type: grant
Role: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared
Subject: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Constraints: NONE
Delegator: null

ATZ Policies:
1. Result: true; Policy Type: grant
Privilege: any
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi
Subject: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Constraints: NONE
Delegator: null

========== END Policy Evaluation (2010-03-23 18:04:48,609 SGT) ==========

2010-03-23 18:04:48,609 [[ACTIVE] ExecuteThread: ‘1’ for queue: ‘weblogic.kernel.Default (self-tuning)’] DEBUG com.wles.util.DebugStore – queryAccess: DebugStore:
========== BEGIN Policy Evaluation (2010-03-23 18:04:48,609 SGT) ==========
RequestResource is: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi/weblogic
UserInfo:
Name: //user/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/anonymous/
Groups: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Resource Present: true
Roles Granted: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Role Mapping Policies:
1. Result: true; Policy Type: grant
Role: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared
Subject: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Constraints: NONE
Delegator: null

ATZ Policies:
1. Result: true; Policy Type: grant
Privilege: any
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi
Subject: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Constraints: NONE
Delegator: null

========== END Policy Evaluation (2010-03-23 18:04:48,609 SGT) ==========

2010-03-23 18:04:48,625 [[ACTIVE] ExecuteThread: ‘0’ for queue: ‘weblogic.kernel.Default (self-tuning)’] DEBUG com.wles.util.DebugStore – queryAccess: DebugStore:
========== BEGIN Policy Evaluation (2010-03-23 18:04:48,625 SGT) ==========
RequestResource is: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi/weblogic/wsee
UserInfo:
Name: //user/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/anonymous/
Groups: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Resource Present: true
Roles Granted: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Role Mapping Policies:
1. Result: true; Policy Type: grant
Role: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared
Subject: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Constraints: NONE
Delegator: null

ATZ Policies:
1. Result: true; Policy Type: grant
Privilege: any
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi
Subject: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Constraints: NONE
Delegator: null

========== END Policy Evaluation (2010-03-23 18:04:48,625 SGT) ==========

2010-03-23 18:04:48,625 [[ACTIVE] ExecuteThread: ‘1’ for queue: ‘weblogic.kernel.Default (self-tuning)’] DEBUG com.wles.util.DebugStore – queryAccess: DebugStore:
========== BEGIN Policy Evaluation (2010-03-23 18:04:48,625 SGT) ==========
RequestResource is: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi/weblogic/wsee
UserInfo:
Name: //user/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/anonymous/
Groups: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Resource Present: true
Roles Granted: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Role Mapping Policies:
1. Result: true; Policy Type: grant
Role: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared
Subject: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Constraints: NONE
Delegator: null

ATZ Policies:
1. Result: true; Policy Type: grant
Privilege: any
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi
Subject: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Constraints: NONE
Delegator: null

========== END Policy Evaluation (2010-03-23 18:04:48,625 SGT) ==========

2010-03-23 18:04:48,625 [[ACTIVE] ExecuteThread: ‘1’ for queue: ‘weblogic.kernel.Default (self-tuning)’] DEBUG com.wles.util.DebugStore – queryAccess: DebugStore:
========== BEGIN Policy Evaluation (2010-03-23 18:04:48,625 SGT) ==========
RequestResource is: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi/weblogic/wsee/DefaultQueue
UserInfo:
Name: //user/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/anonymous/
Groups: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Resource Present: true
Roles Granted: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Role Mapping Policies:
1. Result: true; Policy Type: grant
Role: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared
Subject: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Constraints: NONE
Delegator: null

ATZ Policies:
1. Result: true; Policy Type: grant
Privilege: any
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi
Subject: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Constraints: NONE
Delegator: null

========== END Policy Evaluation (2010-03-23 18:04:48,625 SGT) ==========

2010-03-23 18:04:48,625 [[ACTIVE] ExecuteThread: ‘0’ for queue: ‘weblogic.kernel.Default (self-tuning)’] DEBUG com.wles.util.DebugStore – queryAccess: DebugStore:
========== BEGIN Policy Evaluation (2010-03-23 18:04:48,625 SGT) ==========
RequestResource is: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi/weblogic/wsee/DefaultQueue
UserInfo:
Name: //user/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/anonymous/
Groups: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Resource Present: true
Roles Granted: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Role Mapping Policies:
1. Result: true; Policy Type: grant
Role: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared
Subject: //sgrp/RootOrg!wlsapp_org_190310_1!wlsapp_dir_190310_1/allusers/
Constraints: NONE
Delegator: null

ATZ Policies:
1. Result: true; Policy Type: grant
Privilege: any
Resource: //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi
Subject: //role/RootOrg!wlsapp_org_190310_1!shared!Everyone
Constraints: NONE
Delegator: null

========== END Policy Evaluation (2010-03-23 18:04:48,625 SGT) ==========

Hi Mahendra,

Thanks for your reply.

Are the roles and policies you are referring to different to those that were created from the config tool?

After running the config tool, i have added AdminServer (resource) in wlsapp_org_190310_1 > shared > svr (resource). i have also created autorization policies for the “weblogic” user for wlsapp_org_190310_1, wlsapp_org_190310_1/shared, and wlsapp_org_190310_1/shared/svr/AdminServer resources. i also tried adding the application in OES EUI but with no success.

after deploying the application in my wls domain, is there anything that i should do in OES admin? like, define the application resource in OES? I ask this because i am wondering on how i could define the level of security i can put in my application. How do i define the application resources in OES admin and how are they being mapped back to the actual application deployed in the wls domain? and do we need to define every single folder and jsp in OES manually?

sorry for the flooding of my messages. i thought my post was unsuccessful due to some errors i found in my browser. 😛

Hi Mahendra,

I have modified the set-wls-env.bat and restarted WLS server, and I am now able to access the application in discovery mode and the following files were created in the WLS Domain folder:
providerdiscovery.RoleProviderImpl.decl
providerdiscovery.RoleProviderImpl.log
providerdiscovery.RoleProviderImpl.object
providerdiscovery.RoleProviderImpl.priv
providerdiscovery.RoleProviderImpl.privbinding
providerdiscovery.RoleProviderImpl.privgrp
providerdiscovery.RoleProviderImpl.role
providerdiscovery.RoleProviderImpl.rule
providerdiscovery.AuthorizationProviderImpl.decl
providerdiscovery.AuthorizationProviderImpl.log
providerdiscovery.AuthorizationProviderImpl.object
providerdiscovery.AuthorizationProviderImpl.priv
providerdiscovery.AuthorizationProviderImpl.privbinding
providerdiscovery.AuthorizationProviderImpl.privgrp
providerdiscovery.AuthorizationProviderImpl.role
providerdiscovery.AuthorizationProviderImpl.rule

however:
1. in your statement “Edit files and remove unwanted data except your application specific data.”, what do yo uactually mean by this? which files/data to remove?
i.e. in providerdiscovery.RoleProviderImpl.object:
//app/policy/RootOrg O
//app/policy/RootOrg/wlsapp_org_190310_1 O
//app/policy/RootOrg/wlsapp_org_190310_1/shared A
//app/policy/RootOrg/wlsapp_org_190310_1/shared/svr O
//app/policy/RootOrg/wlsapp_org_190310_1/shared/svr/AdminServer O
//app/policy/RootOrg/wlsapp_org_190310_1/shared/adm O
//app/policy/RootOrg/wlsapp_org_190310_1/shared/adm/Configuration O
//app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi O
//app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi/weblogic O
//app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi/weblogic/wsee O
//app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi/weblogic/wsee/DefaultQueue O
//app/policy/RootOrg/wlsapp_org_190310_1/jsf-datavalidation A
//app/policy/RootOrg/wlsapp_org_190310_1/jsf-datavalidation/url O
//app/policy/RootOrg/wlsapp_org_190310_1/jsf-datavalidation/url/jsf-datavalidation O
//app/policy/RootOrg/wlsapp_org_190310_1/jsf-datavalidation/url/jsf-datavalidation/form.faces O
//app/policy/RootOrg/wlsapp_org_190310_1/jsf-datavalidation/url/jsf-datavalidation/styles.css O
— so i remove everything except for those with “jsf-datavalidation”?

how about for providerdiscovery.AuthorizationProviderImpl.rule:
#//priv/boot on //app/policy/RootOrg/wlsapp_org_190310_1/shared/svr/AdminServer with input attributes:
grant(//priv/boot,//app/policy/RootOrg/wlsapp_org_190310_1/shared/svr/AdminServer,//role/Everyone) if true;

#//priv/lookup on //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi/weblogic with input attributes:
grant(//priv/lookup,//app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi/weblogic,//role/Everyone) if true;

#//priv/lookup on //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi/weblogic/wsee with input attributes:
grant(//priv/lookup,//app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi/weblogic/wsee,//role/Everyone) if true;

#//priv/lookup on //app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi/weblogic/wsee/DefaultQueue with input attributes:
grant(//priv/lookup,//app/policy/RootOrg/wlsapp_org_190310_1/shared/jndi/weblogic/wsee/DefaultQueue,//role/Everyone) if true;

#//priv/GET on //app/policy/RootOrg/wlsapp_org_190310_1/jsf-datavalidation/url/jsf-datavalidation/form.faces with input attributes:
grant(//priv/GET,//app/policy/RootOrg/wlsapp_org_190310_1/jsf-datavalidation/url/jsf-datavalidation/form.faces,//role/Everyone) if true;

#//priv/GET on //app/policy/RootOrg/wlsapp_org_190310_1/jsf-datavalidation/url/jsf-datavalidation/styles.css with input attributes:
grant(//priv/GET,//app/policy/RootOrg/wlsapp_org_190310_1/jsf-datavalidation/url/jsf-datavalidation/styles.css,//role/Everyone) if true;

2. i am not able to locate the load.conf in \ales32-admin\bin folder. i tried searching for it in the folder as well but there are lots of load.conf found and only 1 is under the ales32-admin (which is under the examples folder). am i looking at the wrong location? please avdice

thanks for all your help on this..

regards,
jay

Hi Mahendra,

I created the load.conf and executed policyloader but it seems that it was not able to read the files.

You mentioned that the files need to be renamed, what should be the new fielname format then?

I have sent you the load.conf and load-error.log via email.

Thanks,
Jay

Hi,

I need to know what are the changes required in oracle database as well as oracle application side if we change the domain name for a server(DNS change).

I’ve some idea as we need to re-configure the workflow but apart from that I’ve no idea.

please share your views.

I guess I’ve kept my concerns in a wrong catagory……Let me re-upload it to right catagory.

Hi Mahinder,

After installation and configuration of SSM (CP2 installed) and protecting the weblogic server.

I am able to start the server and everything is fine.

I have deployed an web application to the secured domain and created a policy to page level to the weblogic user.

Now when i am able to hit the application, it was asking the Basic Authentication, and authentication is success for “weblogic” user.

How to remove the basic authentication. I have login page as the initial page which should be accessed by everyone. Also what other API should i use to protect the page level.

Appreciate for your kind help.

Thanks and Regards,
Sridhar

HI Mahender,

I have access to the login page as “everyone”, but i hit the application it still prompts me as

The server localhost at WebLogic Server requires a username and password.

“Warning: This server is requesting that your username and password be sent in an insecure manner (basic authentication without a secure connection).”

When i enter the credential it is alloswed.

Please advice.

Thanks and Regards,
sridhar

HI Mahender,

I have give access to the login page as “everyone”, but i hit the application it still prompts me as

The server localhost at WebLogic Server requires a username and password.

“Warning: This server is requesting that your username and password be sent in an insecure manner (basic authentication without a secure connection).”

When i enter the credential it is alloswed.

Please advice.

Thanks and Regards,
sridhar

HI Mahendra,

Yes i have tested the application, It was working fine (i.e it does not prompt me for any authentication). Now when have configured in WLS SSM, it prompts me as since it is protected,

But as per ur advice i have given access to “Everyone” , but it still prompt me as
The server localhost at WebLogic Server requires a username and password.

“Warning: This server is requesting that your username and password be sent in an insecure manner (basic authentication without a secure connection).”

Any thing i am missing.

Regards,
Sridhar

HI Mahendra,

We have resolved this issue by explicitly changing the web.xml for form based.

Regards,
Sridhar

“Hi there Chris, I’ve already red the whole workarounds about the problem I’m facing, but I’m still stucked in the following error when I try to boot my WLS. I’d tried your solution too but it did’t work.I mean, I can boot the server if I change -Myapp- to -myrealm- and I make all the changes but it did’t work. I’m using OES 10.1.4.3 with patch 4, WLS 10.3.0 and SSM 10.1.4.3 with patches 2,3 and 4. I would really apreciate if you give me some light here. Thanks in advance

(2010-10-14 18:26:00,823 [[ACTIVE] ExecuteThread: ‘0’ for queue: ‘weblogic.kernel.Default (self-tuning)’] ERROR com.bea.security.providers.authorization.asi.AuthorizationProviderImpl – com.bea.security.providers.authorization.asi.InvocationException: ArmeNOTREADY Exception: Engine did not recieve initial policy

“)

Sorry, for the name Mahendra, my mistake

Hi Mahendra: I am new in this forum but it is grea. I have e problem with the OES and i hope you can help me, in one machine we have an application web in a server where we have a SSM module, in other machin we have the OESadmin, the application sometimes makes a connection to the OES through the API in order to registrer users in the OES, but we have the problem that sometimes the OES doesn´ t work and the application doesn´t work because it can not registrer users in the OES, the unique form to solve the problem is restaring the OESadmin and the OESSCM. Do you know what could be the problem.

Hi Mahendra:
Yes, there is a firewall between the machines, but the strange is that sometime the conection between aplication web and OES admin is correct and sometimes the aplicattion web can not connect to the OES admin and restarting the OES all works fine.
Do you think that is about the firewalls, do you have an advaice for solve that problem??
A lot of thanks in advaice