Search icon CANCEL
Subscription
0
Cart icon
Your Cart (0 item)
Close icon
You have no products in your basket yet
Arrow left icon
Explore Products
Best Sellers
New Releases
Books
Videos
Audiobooks
Learning Hub
Newsletter Hub
Free Learning
Arrow right icon
timer SALE ENDS IN
0 Days
:
00 Hours
:
00 Minutes
:
00 Seconds
Securing WebLogic Server 12c
Securing WebLogic Server 12c

Securing WebLogic Server 12c: Learn to develop, administer and troubleshoot for WebLogic Server with this book and ebook.

eBook
$14.99 $21.99
Paperback
$29.99
Subscription
Free Trial
Renews at $19.99p/m

What do you get with eBook?

Product feature icon Instant access to your Digital eBook purchase
Product feature icon Download this book in EPUB and PDF formats
Product feature icon Access this title in our online reader with advanced features
Product feature icon DRM FREE - Read whenever, wherever and however you want
OR
Modal Close icon
Payment Processing...
tick Completed

Billing Address

Table of content icon View table of contents Preview book icon Preview Book

Securing WebLogic Server 12c

Chapter 2. WebLogic Security Realm

WebLogic security configuration can be difficult to understand. This chapter clearly covers every aspect you need to consider for activating an internal or external user and group structure. Here, you can also find a very useful section about errors and debugging tips, needed to resolve your configuration issues. This chapter includes the following:

  • Configuration of local LDAP server: user/roles/lockout

  • Configuring an external LDAP for Authentication/Authorization

  • Using Identity Assertion

Configuration of local LDAP server: user/roles/lockout


The simplest way to configure your security realm is through the WebLogic Administration Console; you can find all about security in the section, on the main tree, Security Realms, where the default configuration called myrealm is placed.

Under Security Realms, we have a preconfigured subset of Users, Groups, Authentication methods, Role Mapping, Credential Mapping providers, and some other security settings.

You can configure many realms' security sets, but only one will be active.

On the myrealm section, we find all security parameters of the internal LDAP server configurations, including users and groups.

Consider this; Oracle declares that the embedded WebLogic LDAP server works well with less than 10,000 users; for more users, consider using a different LDAP server and Authentication Provider, for example, an Active Directory Server.

Users and groups

Obviously, here you can add and configure some internal users and some internal groups...

Configuring an external LDAP for Authentication/Authorization


WebLogic supports several types of external authentication providers. Any LDAP v2 or v3 compliant LDAP server should work. Next, we cover the configuration of the Microsoft Active Directory provider in detail, to provide us also with the support for Kerberos Single Sign-On (SSO) integration in a Microsoft domain network; we will see this in Chapter 5, Integrating with Kerberos SPNEGO Identity Assertion.

There are lots of advantages by connecting an existent Users and Groups infrastructure. It permits us to centralize any object (Users and Groups) and centrally manage the security rules and policies without the need to access the WebLogic server. Also, any change applied on Active Directory is logically and dynamically propagated to WebLogic security.

To configure our provider faster and easier, we can use the WebLogic console (advanced users can also use the WebLogic Scripting Tool (WLST) to make many configuration changes)...

Using Identity Assertion


Typically to support an SSO process, you need to have a LoginModule object and an Identity Assertion provider. With these objects, you can exploit tokens stored by the operating system to do the HTTP authorization process without entering username and password and gain access to your secure resources.

The LoginModule objects trust that the user has obtained the token by providing the username and password to another authority.

Your token can pass from client to server in different ways such as HTTP headers, cookies, SSL certificates, or other custom mechanisms. The Identity Assertion needs to grab this token and extract the security information to allow access to the secured context paths.

We will be using the SPNEGO Identity Asserter provider in Chapter 5, Integrating with Kerberos SPNEGO Identity Assertion to configure the SSO integration in an Active Directory context.

Summary


This chapter covered the basic administration of users and groups of the internal WebLogic LDAP server and some facilities to manage and understand security roles and conditions that you will configure in your server.

This is an important chapter, which covers in detail the parameters and concepts required to attach your WebLogic server in an existing Active Directory environment, tuning and understanding some tricks to improve their performance.

We also discussed the issues that often occur during configuration, along with some typical error codes and their possible solutions.

Left arrow icon Right arrow icon

Key benefits

  • Discover Authentication providers
  • Configure security for WebLogic applications and develop your own security providers
  • Step by step guide to administer and configure WebLogic security providers
  • Quick guide to security configuration in WebLogic realm

Description

Security is a must in modern Enterprise architecture, and WebLogic implements a very complete and complex architecture for configuration and implementation, and we need to deeply know in technologies, terminology and how the security process works between all actors. Transparent security of your applications and Weblogic infrastructure need a good knowledge of the issues you can incur in this long and error prone configuration process. "Securing WebLogic Server 12c" will simplify a complex world like WebLogic Security, helping the reader to implement and configure. It's the only fast guide that will let you develop and deploy in a production system with best practices both from the development world and the operation world. This book will try to make a clear picture of Java EE Security with clean and simple step-by-step examples that will guide the reader to security implementation and configuration From the concepts of Java EE Security to the development of secure application, from the configuration of a realm to the setup of Kerberos Single Sign on, every concept is expressed in simple terms and surrounded by examples and pictures. Finally, also a way to develop WebLogic Security Providers with Maven, so that you can add the security part of your infrastructure to your enterprise best practices.

Who is this book for?

If you are a WebLogic Server administrator looking forward to a step by step guide to administer and configure WebLogic security, then this is the guide for you. Working knowledge of WebLogic is required.

What you will learn

  • Setup your development environment for WebLogic with Maven
  • Develop applications with Maven using fast split-deployment
  • Configure your applications to take advantage of Java EE Security
  • Understand how to integrate with WebLogic security
  • Configure a Security Realm from scratch
  • Integrate with your enterprise security systems
  • Detailed how-to Kerberos single-sign-on configuration with a little, but userful, knowledge base to solve some typical issue

Product Details

Country selected
Publication date, Length, Edition, Language, ISBN-13
Publication date : Nov 23, 2012
Length: 100 pages
Edition : 1st
Language : English
ISBN-13 : 9781849687799
Vendor :
Oracle
Concepts :

What do you get with eBook?

Product feature icon Instant access to your Digital eBook purchase
Product feature icon Download this book in EPUB and PDF formats
Product feature icon Access this title in our online reader with advanced features
Product feature icon DRM FREE - Read whenever, wherever and however you want
OR
Modal Close icon
Payment Processing...
tick Completed

Billing Address

Product Details

Publication date : Nov 23, 2012
Length: 100 pages
Edition : 1st
Language : English
ISBN-13 : 9781849687799
Vendor :
Oracle
Concepts :

Packt Subscriptions

See our plans and pricing
Modal Close icon
$19.99 billed monthly
Feature tick icon Unlimited access to Packt's library of 7,000+ practical books and videos
Feature tick icon Constantly refreshed with 50+ new titles a month
Feature tick icon Exclusive Early access to books as they're written
Feature tick icon Solve problems while you work with advanced search and reference features
Feature tick icon Offline reading on the mobile app
Feature tick icon Simple pricing, no contract
$199.99 billed annually
Feature tick icon Unlimited access to Packt's library of 7,000+ practical books and videos
Feature tick icon Constantly refreshed with 50+ new titles a month
Feature tick icon Exclusive Early access to books as they're written
Feature tick icon Solve problems while you work with advanced search and reference features
Feature tick icon Offline reading on the mobile app
Feature tick icon Choose a DRM-free eBook or Video every month to keep
Feature tick icon PLUS own as many other DRM-free eBooks or Videos as you like for just $5 each
Feature tick icon Exclusive print discounts
$279.99 billed in 18 months
Feature tick icon Unlimited access to Packt's library of 7,000+ practical books and videos
Feature tick icon Constantly refreshed with 50+ new titles a month
Feature tick icon Exclusive Early access to books as they're written
Feature tick icon Solve problems while you work with advanced search and reference features
Feature tick icon Offline reading on the mobile app
Feature tick icon Choose a DRM-free eBook or Video every month to keep
Feature tick icon PLUS own as many other DRM-free eBooks or Videos as you like for just $5 each
Feature tick icon Exclusive print discounts

Frequently bought together


Stars icon
Total $ 145.97
Getting Started with Oracle WebLogic Server 12c: Developer's Guide
$60.99
Securing WebLogic Server 12c
$29.99
Oracle WebLogic Server 12c Advanced Administration Cookbook
$54.99
Total $ 145.97 Stars icon

Table of Contents

5 Chapters
WebLogic Security Concepts Chevron down icon Chevron up icon
WebLogic Security Realm Chevron down icon Chevron up icon
Java EE Security with WebLogic Chevron down icon Chevron up icon
Creating Custom Authentication Providers with Maven Chevron down icon Chevron up icon
Integrating with Kerberos SPNEGO Identity Assertion Chevron down icon Chevron up icon

Customer reviews

Rating distribution
Full star icon Full star icon Empty star icon Empty star icon Empty star icon 2
(2 Ratings)
5 star 0%
4 star 0%
3 star 50%
2 star 0%
1 star 50%
Edwin Biemond Jan 06, 2013
Full star icon Full star icon Full star icon Empty star icon Empty star icon 3
This small book shortly explains all the parts which are involved by the WebLogic Security Framework. It describes how to use the internal weblogic and an external LDAP server as authentication provider. Plus a maven example howto develop, deploy a web application which uses security. Another maven example howto develop or configure a custom provider. And the last chapter explains Microsoft Active Directory SSO with WebLogic. I Did not see many new 12c features and most of this information should also work on WebLogic 10.3. I liked the small part about programmatic security with WebLogic XACML provider. But I hoped to learn more about WebLogic 12c and Java EE 6 like the JASPIC,JACC specifications and how this works with WebLogic plus why they are limited compared to weblogic custom providers. The maven part is great for testing the examples but it does not add any value to this content.
Amazon Verified review Amazon
Jayaprakash Aug 12, 2016
Full star icon Empty star icon Empty star icon Empty star icon Empty star icon 1
One of the Useless book i have buy it sofar.Security in Java/JEE and in weblogic is one of the most beautiful concept.But this book was explained in a ugly fashion.I don't understand why Author choose to write this topic without providing any intro and technical stuff ,only by writing theory.It is waste of money ,time and expectations to invest on this book.
Amazon Verified review Amazon
Get free access to Packt library with over 7500+ books and video courses for 7 days!
Start Free Trial

FAQs

How do I buy and download an eBook? Chevron down icon Chevron up icon

Where there is an eBook version of a title available, you can buy it from the book details for that title. Add either the standalone eBook or the eBook and print book bundle to your shopping cart. Your eBook will show in your cart as a product on its own. After completing checkout and payment in the normal way, you will receive your receipt on the screen containing a link to a personalised PDF download file. This link will remain active for 30 days. You can download backup copies of the file by logging in to your account at any time.

If you already have Adobe reader installed, then clicking on the link will download and open the PDF file directly. If you don't, then save the PDF file on your machine and download the Reader to view it.

Please Note: Packt eBooks are non-returnable and non-refundable.

Packt eBook and Licensing When you buy an eBook from Packt Publishing, completing your purchase means you accept the terms of our licence agreement. Please read the full text of the agreement. In it we have tried to balance the need for the ebook to be usable for you the reader with our needs to protect the rights of us as Publishers and of our authors. In summary, the agreement says:

  • You may make copies of your eBook for your own use onto any machine
  • You may not pass copies of the eBook on to anyone else
How can I make a purchase on your website? Chevron down icon Chevron up icon

If you want to purchase a video course, eBook or Bundle (Print+eBook) please follow below steps:

  1. Register on our website using your email address and the password.
  2. Search for the title by name or ISBN using the search option.
  3. Select the title you want to purchase.
  4. Choose the format you wish to purchase the title in; if you order the Print Book, you get a free eBook copy of the same title. 
  5. Proceed with the checkout process (payment to be made using Credit Card, Debit Cart, or PayPal)
Where can I access support around an eBook? Chevron down icon Chevron up icon
  • If you experience a problem with using or installing Adobe Reader, the contact Adobe directly.
  • To view the errata for the book, see www.packtpub.com/support and view the pages for the title you have.
  • To view your account details or to download a new copy of the book go to www.packtpub.com/account
  • To contact us directly if a problem is not resolved, use www.packtpub.com/contact-us
What eBook formats do Packt support? Chevron down icon Chevron up icon

Our eBooks are currently available in a variety of formats such as PDF and ePubs. In the future, this may well change with trends and development in technology, but please note that our PDFs are not Adobe eBook Reader format, which has greater restrictions on security.

You will need to use Adobe Reader v9 or later in order to read Packt's PDF eBooks.

What are the benefits of eBooks? Chevron down icon Chevron up icon
  • You can get the information you need immediately
  • You can easily take them with you on a laptop
  • You can download them an unlimited number of times
  • You can print them out
  • They are copy-paste enabled
  • They are searchable
  • There is no password protection
  • They are lower price than print
  • They save resources and space
What is an eBook? Chevron down icon Chevron up icon

Packt eBooks are a complete electronic version of the print edition, available in PDF and ePub formats. Every piece of content down to the page numbering is the same. Because we save the costs of printing and shipping the book to you, we are able to offer eBooks at a lower cost than print editions.

When you have purchased an eBook, simply login to your account and click on the link in Your Download Area. We recommend you saving the file to your hard drive before opening it.

For optimal viewing of our eBooks, we recommend you download and install the free Adobe Reader version 9.