Oracle Technology Network




Installing and Administering Oracle Entitlements Server and the WebLogic Server SSM

<Do not delete this text because it is a placeholder for the generated list of "main" topics when run in a browser>

Purpose

This tutorial covers the installation and configuration of Oracle Entitlements Server (OES) 10.1.4.3 using WebLogic Server (WLS) 10.3, as well as the application of OES cumulative patch 4 (CP4).  This tutorial then shows you how to install and configure the WebLogic Server Security Service Module (SSM). This tutorial assumes that you are configuring a development environment where there is only one installation of WebLogic Server, which is then updated with the Oracle Entitlements Server Administration software and the Oracle Entitlements Server Security Service Module software.


Time to Complete

Approximately 2 hours

Overview

This tutorial covers the following topics:

Scenario

In this tutorial, we begin by configuring a database to support Oracle Entitlements Server (Oracle Entitlements Server). Configuring the database is done via either scripts or directly within a database console. In the case of Oracle Database, we also require a tablespace for containing the Oracle Entitlements Server data. This software runs in any of the several compliant Servlet containers; for this tutorial, we use WebLogic Server. We then install Oracle Entitlements Server cumulative patch 4, and create the database schema to support Oracle Entitlements Server.  The tutorial then continues installing the Oracle Entitlements Server Security Service Module (SSM) for WebLogic Server, including the SSM specific CP4.

The diagram below displays the resulting solution after all the steps have been completed.

Scenario

Software Requirements

The following is a list of software requirements:

Prerequisites

Before starting this tutorial, you should: 

.

Have access to or have installed the following software:

  • Oracle Database 10g, Express Edition (Download)
  • Oracle WebLogic Server 10.3.2 (Download)

This tutorial assumes that you have installed the Oracle XE database and WebLogic Server.

Oracle WebLogic Server installs a Java 1.6 JDK, which is required for running the server and other products. After the products are installed, ensure that it is the WebLogic-supplied JDK that you are using by setting your system's path environment settings appropriately.

Although you can install WebLogic Server in the location of your choice, the following label refer to the locations in the tutorial instructions:

  •  %MIDDLEWARE_HOME%: The product installation location for Oracle WebLogic Server (The current installation documentation refers to this as BEA_HOME.)

.

Have access to the following software:

  • Oracle Entitlements Server - Admin 10.1.4.3 (Download)
  • Oracle Entitlements Server - SSM 10.1.4.3 (Download)
  • Oracle Entitlements Server - DB Config Tool (Download)
  • Oracle Entitlements Server Admin - CP 4 for Windows (Download)
  • Oracle Entitlements Server SSM - CP 4 for Windows (Download)

During the course of this tutorial, Oracle Entitlements Server Admin and the WLS SSM for Windows will be installed and configured. You must have these products available for use during the tutorial if you want to follow the outlined steps.

.


Refer to the following documentation:

Installing Oracle Entitlements Server

Create Database Schema


In order to install the Oracle Entitlements Server Administration Server, you must first create appropriate accounts and database space. The following steps describe this process.

This section assumes that you:


.

Unzip the DB Config tool zip file. The file name will vary based on version and operating system:
In this particular case, we use the Windows version of the configuration tool.

C:\...\dbconfig>unzip DBConfigTool_win32.zip
Archive:  DBConfigTool_win32.zip
   creating: lib/
   creating: lib/providers/
   creating: lib/providers/ales/
  inflating: DBConfig.bat
  inflating: DBConfig.sh
  inflating: DBConfigTool_readme.txt
  inflating: lib/asitools.jar
  inflating: lib/log4j.jar
  inflating: lib/providers/ales/jconn2.jar
  inflating: lib/providers/ales/jconn3.jar
  inflating: lib/providers/ales/ojdbc14.jar
  inflating: lib/terminalio.dll

 

.


Run the WebLogic Server common environment script to specify the correct Java version:

C:\...\dbconfig\> %MIDDLEWARE_HOME%\wlserver_10.3\common\bin\commEnv.cmd

Note that this tutorial assumes that %MIDDLEWARE_HOME% points to the directory where WebLogic Server is installed; typically, this directory is c:\Oracle\Middleware on Windows.

Assuming the middleware home variable is correct, the full command then becomes:

C:\...\dbconfig>c:\oracle\middleware\wlserver_10.3\common\bin\commEnv.cmd


.

Modify the appropriate configuration script to provide appropriate values from the JAVA_HOME and INSTALL_HOME variables. Note that you are using a database other than Oracle; you may also need to set the DB_JDBC_DRIVER_LOC variable. See the documentation for a complete list of when this variable needs to be set.

Note: On Windows, you should use the "short" name of the directory. This name can be found using the dir/x command.

DBConfig.bat with JAVA_HOME etc set.


.

Execute the DBConfig script from the command line. Note: The following example assumes that the Oracle database runs on localhost and the device contains at least 10 MB of available space for the database tables.

Prompt
Description and example
Please Input DB type
One of the supported databases:
oracle
JDBC URL
The URL of the database server
jdbc:oracle:thin:@localhost:1521:XE
JDBC Driver
Appropriate JDBC driver
oracle.jdbc.driver.OracleDriver
Database User
Any username for the account being created
Example: oesuser
Database User Password
Any appropriate password for the prior account Example:oespassword
Administrator User
The database administrator's account name, typically, SYS
Administrator User Password
Appropriate password for the database administrator user
Tablespace position
(optional, only for Oracle)
The location where a tablespace will be allocated for the Oracle Entitlements Server database: c:\oracle\data.dbf


An example of running the script is shown below. Note that the script reports ALES and not Oracle Entitlements Server. This is the prior product acronym and can be ignored.

C:\. . . S\dbconfig>.DBConfig.bat
Please input Database type <oracle|sybase|mssql|pointbase>: oracle

Enter the JDBC URL for the database server.
        Eg.  Oracle - jdbc:oracle:thin:@myDBserver:1521:myDBsid
Please input JDBC URL: jdbc:oracle:thin:@localhost:1521:XE

Enter the JDBC driver used to connect to the database.
        Eg.  Oracle - oracle.jdbc.driver.OracleDriver
Please input JDBC Driver: oracle.jdbc.driver.OracleDriver
Please input new database user name: oesuser
Enter new database user password:hidden
Confirm new database user password:hidden
Please input database admin name (Eg. sys): sys
Please input database admin password:hidden
-- Configuring table space [ales_oracle]
Please input new tablespace position in DB server (Eg. c:\oracle\data.dbf):c:\oracle\data.dbf
-- Creating new tablespace [ales_oracle] .......Done

-- Creating new user [oesuser] .......Done

-- Configuring ALES role [asi_role]
-- Assigning privs to ALES role .......Done

-- Assigning privs to new user [oesuser].......Done

-- Closing down connection
-- Successfully created ALES Database Account --



Installing the Oracle Entitlements Server Software

In order to install the Oracle Entitlements Server Administration Server, you must first create appropriate accounts and database space.

This section assumes that you:


.

Unzip the Oracle Entitlements Server Installer. On non-Microsoft Windows platforms, you many need to untar or un-gzip the file. Additionally, you may need to chmod +x the unpacked file.  


C:\. . . >unzip Oracle Entitlements Server10.1.4.3.0_admin_win32.zip
Archive:  Oracle Entitlements Server10.1.4.3.0_admin_win32.zip
 extracting: Oracle Entitlements Server10.1.4.3.0_admin_win32.exe
 

.

Run the installer using a command similar to the one shown below. The preparing dialog box is displayed as the installer unpacks and prepares to run.
C:\. . . >Oracle Entitlements Server10.1.4.3.0_admin_win32.exe

DBConfig.bat with JAVA_HOME etc set.

.

Click Next on the Welcome screen.

 

.

Oracle Entitlements Server requires an appropriate servlet container and will use Oracle WebLogic Server if a BEA_HOME is found.

Select a BEA_HOME and click Next. Under normal circumstances, the preselected BEA_HOME is appropriate.

 

.

Enter a fully qualified path for the Oracle Entitlements Server administration software. The default name should be sufficient in most cases.

Click Next to continue.

 

.

You may select either WebLogic Server or Tomcat. For this tutorial, we use WebLogic server as the servlet container.  Select WebLogic Server 10 from the Web Server Type drop-down list and then click Next.

 

.

Select the interface the Service Control Manager (SCM) should bind to. In this case, only one interface is provided. However, if your installation contains multiple IP addresses, check the correct address and click Next.

 

.

Choose the HTTP and SSL ports that Oracle Entitlements Server should bind to. For the tutorial, the defaults are acceptable. Then click Next.

 

.

Select the appropriate database and click Next. The values here should exactly match the values used in the previous task. Note that Login ID should be entered in lowercase.

Ensure that Install Database Schema is NOT selected.
This setting is selected by default. Ensure it is de-selected.

Then click Next.

 

.

Select Generate random passwords, and click Next.

 

.

Select an appropriate SDK. Either JRockit or the Sun SDK is acceptable. The tutorial uses the Sun JDK. See the Oracle Entitlements Server documentation if you are concerned about supported JDKs.

Click Next.

 

.

The installation progress screen is displayed. Allow the installation to complete, or click Exit to abort. The installation can take up to a few minutes to complete.

 

.

When the installation completes, URLs for the Administration and Entitlements applications are displayed. Make a note of these URLs. 

Additionally, these URLs can be found in C:\oracle\middleware\ales32-admin\log\ install.log.

 

Installing Admin Cumulative Patch 4


The Oracle Entitlements Server 10gR3 CP4 includes updates for changes requested to the 10gR3 product release. Cumulative Patch 4, sometimes referred to as P9584385, can be safely applied to an Oracle Entitlements Server 10gR3 installation. All platforms supported by Oracle Entitlements Server 10gR3 are supported by this patch. Note that patch P584385 is the SSM-only patch and is used during the SSM portion of the installation.

If an SSM was installed onto the same server as Oracle Entitlements Server, the ales32-scm and ales32-shared
directories can be shared between the Oracle Entitlements Server administration server and the installed SSM products and upgraded only once. If you have the SSM installed and running on a different server, you will need to install the patch on these servers as well.

This section assumes that:


.

Open a command prompt and change the directory to the %MIDDLEWARE_HOME%\ales32-admin directory. For this tutorial, the fully qualified path is C:\oracle\middleware\ales32-admin.


Note: Do not use a command prompt which has previously executed the commEnv script as this will cause execution errors.


.

Unzip the patch file. Assume that the patch is located in c:\temp and the command is being executed in C:\oracle\middleware\ales32-admin:

C:\oracle\middleware\ales32-admin>unzip C:\temp\p9584385_10300_WINNT.zip

.

Change the directory to patches\cp4:

cd patches\cp4

Edit the ApplyAdminPatch.bat file:

notepad ApplyAdminPatch.bat


.

Modify the JAVA_HOME and ALES_ADMIN_HOME properties. Assuming the values used for this tutorial, the variables should resemble:  Note that depending on your installation of WLS different JDKs may exist.

set JAVA_HOME=C:\oracle\middleware\jdk160_14_R27.6.5-32
and
set ALES_ADMIN_HOME=C:\oracle\middleware\ales32-admin

.

Modify the isAdmin setting to represent whether the patch is being run from the Administrator account. The account used for this tutorial is Administrator, so the setting is marked true.

set IsAdmin=true 

Save the changes and close the editor.

.


Validate that the machine requires the patch via the status action by using a command similar to:

ApplyAdminPatch.bat status

Review and ensure that the installation is at version 0. Results should be similar to:

Buildfile: ApplyPatch.xml

status:
     [echo] Existing Admin product Version: 10.1.4.3; Current CP version: 0
     [echo] Patch product Version: 10.1.4.3; Patch CP version: 4

BUILD SUCCESSFUL
Total time: 2 seconds

.

Run the patch to upgrade to CP4 by using the following command:

ApplyAdminPatch.bat upgrade

This produces results similar to the following:


C:\oracle\middleware\ales32-admin\patches\cp1>ApplyAdminPatch.bat upgrade
Buildfile: ApplyPatch.xml

upgrade:

upgrade.admin:
. . .
admin.backup:
      [zip] Building zip: C:\oracle\middleware\ales32-admin\patches\cp1\admin_pre_CP1_backup.zip
. . .
patch_wls10_asi_file:
 . . .
upgrade.scm:
. . .
scm.backup:
. . .
. . .
upgrade.shared:

shared.backup:
. . .
print.output:

BUILD SUCCESSFUL
Total time: 2 minutes 3 seconds

.

Validate that the patch was successfully applied by using:

ApplyAdminPatch.bat status

Review and ensure that the installation is at version CP4.   You should see something similar to:


status:
     [echo] Existing Admin product Version: 10.1.4.3; Current CP version: 4
     [echo] Patch product Version: 10.1.4.3; Patch CP version: 4

Initializing the Oracle Entitlements Server Schema


During the previous installation steps, we skipped the initialization of the Oracle Entitlements Server database schema. This was done so that the patch software can be run, which upgrades various Oracle Entitlements Server software including the schema definition itself.

To install the schema, perform the following:


.


In a command window, change the directory to the %MIDDLEWARE_HOME%\ales-admin32\bin directory. 

cd c:\oracle\middleware\ales-admin32\bin

.

Execute the install_ales_schema script to install the schema and start an instance of Oracle Entitlements Server. 
Note that this script requires the previously created Oracle Entitlements Server user and associated password, and will close the command window on completion.

C:\oracle\middleware\ales32-admin\bin>install_ales_schema.bat oesuser oespassword

If all the previous steps were completed successfully, the script will run and start an instance of Oracle Entitlements Server producing output similar to the following:

C:\. . . \bin>install_ales_schema.bat oesuser oespassword
Dropping deprecated database constraints, stored procedures, sequences, and views
Run database loader...
Initializing the Administration server for the first time...
Starting "ALES Service Control Manager"...

. . .

Load internal policy...
Load internal policy successfully.
Waiting for server READY at url: https://bea-119c1a4d170:7013/ManagedServer...do
ne.
The requested action waitready to URL https://bea-119c1a4d170:7013/ManagedServer
 was successful.

. . .

The OES Administration server has now been properly initialized and started.

Press enter to close window.

Managing Oracle Entitlements Server Processes


Oracle Entitlements Server runs as two services within Windows or Linux. The server processes can be managed manually by using scripts provided in the ales32-admin/bin and ales32-scm/bin directories. On Microsoft Windows, two services are created, which can be used to start and stop these processes. On Linux/UNIX, the services can be installed to start at run levels 3 and 5. For this tutorial, we will use the Windows scripts to manage these processes.

An example of the Windows services, after installation, is as follows:



Note that the following commands are OPTIONAL, you can start and stop the Oracle Entitlements Server processes using Windows Services.


.

Open a command prompt and change the directory to C:\Oracle\middleware\ales32-admin\bin\.

.

Stop the Oracle Entitlements Server Server process by entering the following command:

start WLESadmin stop

Note that the Windows command start is used with this script because the script automatically closes its command window on completion.

.

Change the directory to C:\Oracle\middleware\ales32-scm\bin\.

.


Stop the Oracle Entitlements Server SCM Server by entering the following command:

start WLESscm stop

.

Restart the Oracle Entitlements Server SCM in console mode by using the following command:

start WLESscm console

A new window will open and show commands similar to those below. Note that until the Oracle Entitlements Server policy process is started, informational messages will be generated.

.

Return to the ales32-admin\bin directory and start the policy process using the following command:

start WLESWebLogic console


A console window will open and should resemble:


Wait until this window shows 'RUNNING' and continue to the next topic.

Verifying the Oracle Entitlements Server Console

After it is installed and started, the Oracle Entitlements Server console can be examined to ensure that the software is running properly. 

.

In Firefox or a browser of your choice, enter the following URL:

https://localhost:7010/entitlementsadministration/

If prompted for certificates, accept for this session and continue.

 

.

Log in to the Administration Console using credentials admin/password.


.

The Oracle Entitlements Server console should display, looking similar to that shown below.

Explore the console and then log out, exiting the browser.


Installing the WLS SSM

Installing the SSM Software

In order to install the Oracle Entitlements Server Administration SSM for WebLogic Server, you must:



For a complete description of the SSM installation process, see the Oracle Entitlements Server SSM installation guide found here. Oracle Entitlements Server - SSM 10.1.4.3 can be downloaded from here.

 


.


Unzip the installer and start it using a command similar to that shown below. The installer may take upwards of several minutes to unpack and prepare to run. Note that the -log and -log_priority parameters are optional.

c:\..\> Oracle Entitlements Server10.1.4.3.0_ssm_win32.exe -log=ssm.install.log -log_priority=debug

 

.


On the Welcome screen, click Next.


 

.

Select an appropriate middleware home directory and click Next. This tutorial uses a separate client middleware home (c:\oracle-client\middleware) to more closely replicate an environment where the administration console server is separate from a remote SSM.

 

.

Select one or more Security Modules to install. For this tutorial, only the SSM for WebLogic is required. Click Next.

 

.

In the Choose Product Installation Directories dialog box, click Next.

 

.

Ensure that the Allow centralized configuration of security providers check box is selected. Click Next.

 

.

In the Choose Network Interfaces dialog box, select a bind interface for the SCM associated with the SSM. Note that in this scenario, only a single IP address is available. Click Next.

 

.

Enter an SCM logical name. This name represents the name of the SCM as it will be entered later in the Administration console. Choose an appropriate name. Enter the URL of the primary server, which in the case of the tutorial is https://localhost:7010, the prefix portion of the administration URLs from earlier steps. Click Next.

Note that this is not strictly required for the WLS-only SSM installations, and by requiring it you will need to uncomment the scm.name setting when running the config tool. This is discussed later.

 

.

Select a JDK. For this tutorial, the Sun JDK is used.

 

.

The progress dialog box is displayed. The installation can take anywhere between 1 to 3 minutes depending on disk input/output (I/O) performance.

 

.

On completion, click Done.

 

Installing the SSM patch

The Oracle Entitlements Server Security Module also includes a CP 4 patch that must be installed.

To install the patch, unzip the patch, update ApplySsmPatch script and then run the patch. .

.


Open a command prompt and change the directory to the %MIDDLEWARE_HOME%\ales32-ssm directory. For this tutorial, the fully qualified path is C:\oracle-client\middleware\ales32-ssm.
 

.


Unzip the patch file. Assume that the patch is located in c:\temp and the command is being executed in C:\oracle-client\middleware\ales32-ssm.

C:\oracle-client\middleware\ales32-ssm>unzip c:\temp\p9584390_10300_WINNT.zip
 

.

Change the directory to patches\cp1 and update the ApplySsmPatch script.

cd patches\cp1

Edit ApplySsmPatch.bat and set the JAVA_HOME, ALES_ADMIN_HOME and JVM_VERSION properties. Assuming the values used for this tutorial, the variables should resemble:

set JAVA_HOME=c:\oracle-client\middleware\jdk160_14_R27.6.5-32
set ALES_ADMIN_HOME=C:\oracle-client\middleware\ales32-ssm\wls-ssm
And
set JVM_VERSION=32

Note that the ALES_ADMIN_HOME variable includes any installed SSM, such as the wls-ssm SSM.

.

Validate that the machine requires the patch via the status action using a command similar to:

ApplySsmPatch.bat status

Review and ensure that the installation is at version 0. Results should be similar to the following:

Buildfile: ApplyPatch.xml

status:
     [echo] Existing SSM product Version: 10.1.4.3; Current CP version: 0
     [echo] Patch product Version: 10.1.4.3; Patch CP version: 4

BUILD SUCCESSFUL
Total time: 2 seconds


.

Run the patch to upgrade to CP 4 using the following command:

ApplySsmPatch.bat upgrade

This will produce results similar to the following:


Buildfile: ApplyPatch.xml

upgrade:

upgrade.ssm:
[propertyfile] Creating new property file: C:\oracle\middleware\ales32-ssm\common\lib\CpVersion.properties

ssm.backup:
    [mkdir] Created dir: C:\oracle\middleware\ales32-ssm\patches\cp1\backup_dir
     [copy] Copying 1 file to C:\oracle\middleware\ales32-ssm\patches\cp1\backup_dir
. . .

upgrade.ssm.to.cp1:

upgrade.scm:
     [echo] *** Skipping SCM (it was already patched by a prior Admin or SSM patch upgrade)

upgrade.shared:
     [echo] *** Skipping shared directory (it was already patched by a prior Admin or SSM patch upgrade)

print.output:

BUILD SUCCESSFUL
Total time: 1 minute 0 seconds

 

.

Validate that the patch was successfully applied using the following:

ApplySsmPatch.bat status

Review and ensure that the installation is at version CP 4.

You should see a result similar to:
status:
     [echo] Existing SSM product Version: 10.1.4.3; Current CP version: 4
     [echo] Patch product Version: 10.1.4.3; Patch CP version: 4

 

Pre-SSM Preparation

Before you create an SSM instance, a number of steps must be performed. These steps include:


After you complete these steps, you can configure the SSM. Note that these steps are only for the WebLogic Server SSM. Other SSMs may use similar but different processes.

Before installing you must ensure that the Oracle Entitlements Server installation is configured for one-way SSL. See the documentation here for further details.

Enrolling


Enrollment is the process by which an Oracle Entitlements Server component on a remote machine registers with the Administration Server. As part of this process, the SSM system exchanges security certificates with the Administration Server.

All components located under a specific MIDDLEWARE_HOME directory use the same set of keys located in MIDDLEWARE_HOME/ales32-shared/keys. Therefore, the enrollment process should be run only once for any given MIDDLEWARE_HOME.

.

Ensure that the Administration Server and SCM are running. If not, open a command prompt and execute the following commands:

cd \oracle\middleware\ales32-admin\bin
C:\oracle\middleware\ales32-admin\bin>start WLESWebLogic.bat console
C:\oracle\middleware\ales32-admin\bin>cd ..\..\ales32-scm\bin
C:\oracle\middleware\ales32-scm\bin>start WLESscm.bat console

Close the command prompt when done.

You may use the cut and pasteable version of these instructions to enter these commands:
cd \oracle\middleware\ales32-admin\bin
start WLESWebLogic.bat console
cd ..\..\ales32-scm\bin
start WLESscm.bat console

.


Open a second command prompt to avoid confusion with environment settings, and change the directory to:

C:\oracle-client\middleware\ales32-shared\bin

.

Execute the set-env.bat script to configure the environment.

C:\oracle-client\middleware\ales32-shared\bin>set-env.bat

.


Execute the enroll script. For this example, the password password is used for all prompts.

C:\oracle-client\middleware\ales32-shared\bin>enroll demo
==============================================================================
AquaLogic Enterprise Security Enrollment/Unenrollment Utility
==============================================================================
Enter admin username :> admin
Enter admin password :> password
Enter SSM private key password :> password
Confirm SSM private key password :> password
Enter password for identity.jceks :> password
Confirm password for identity.jceks :> password
Enter password for peer.jks :> password
Confirm password for peer.jks :> password
Enter password for trust.jks :> password
Confirm password for trust.jks :> password
Submitting enrollment request
Processing enrollment response
Updating trusted CA keystore
Updating peer keystore


Running the ASI Password Script

Before configuring the SSM, you must use the asipassword utility to set the Administration Server's system user password on the SSM machine. This password is required to secure communications between the SSM and the Administration Server.
 

.

Ensure that the Administration Server and SCM are running. 


.


Open a command prompt and change the directory to C:\oracle-client\middleware\ales32-shared\bin.

.


Run the asipassword command specifying the name of a password XML file and a password key file.

C:\...> asipassword admin
    c:\oracle-client\middleware\ales32-shared\keys\password.xml
    c:\oracle-client\middleware\ales32-shared\keys\password.key
Enter password for alias: admin> password
Confirm password for alias: admin> password
Password saved.


Note that this command should be run on a single line, but is broken for clarity of display.



Configuring the WLS-SSM and its Associated WLS Domain

Before configuring a domain to use the WLS-SSM, you should:



 

.


Ensure that the Administrator server and SCM are running. 

.


Return to the command prompt and copy ales_security_provider_ext.jar to the domain\console-ext directory using a command similar to:

C:\oracle-client\. . . >copy c:\oracle-client\middleware\ales32-ssm\wls-ssm\lib\ales_security_provider_ext.jar c:\oracle\domains\oes_secured\console-ext\

Note that the command is shown in two lines for clarity.


.


Change directory to the wls-ssm administration directory:

C:\oracle-client\. . . >cd \oracle-client\middleware\ales32-ssm\wls-ssm\adm


.

Using Notepad, modify C:\oracle-client\middleware\ales32-ssm\wls-ssm\template\config\WLESarme.properties and specify:

passwordfile = c:/oracle-client/middleware/ales32-shared/keys/password.xml
passwordkeyfile = c:/oracle-client/middleware/ales32-shared /keys/password.key

Save your changes and exit.

.


Copy the myssm_config.properties template to an appropriate name such as oes_secured_config.properties.

.


Open the copied file in Notepad.

notepad oes_secured_config.properties

.

Modify the following properties to match the settings below. Note that these properties assume the values used in the tutorial so far. Some of these properties are prefixed with the comment character #. Deletethis character if it is present.

Property Name
Value
wls.domain.dir
c:/oracle/domains/oes_secured
Note: Specify the name of an appropriate domain to be secured.
ssm.instance.name
oestutorialssm
Any appropriate name. A directory will be created under wls-ssm/instance using this name with appropriate content for the new SSM instance.
This property will need to be uncommented.
ssm.conf.id
MyAppName
Note that this defaults to MyAppName and can be any appropriate value.
ales.resource.root

//app/policy/MyApp
The name of the resources root in the ASI console.
This property will need to be uncommented.
ales.identity.dir

MyDir
Enter any appropriate value. The script will query for the value, if it is not provided.
This property will need to be uncommented.
ales.organization.scope Enter an appropriate value.
This property will need to be uncommented.
Defaults to MyOrg which is sufficient for the tutorial.
db.login
db.password
oesuser/oespassword
Account name and password previously used. In this tutorial, it is password.
These properties will need to be uncommented.
ales.admin.name
ales.admin.password
admin/password
Default is admin/password. Enter the appropriate password for the Oracle Entitlements Server administrator account.
If not entered the name will be required when running configtool.
ssm.admin.name
ssm.admin.password
weblogic/Welcome1
Enter the appropriate username and password for the domain being secured.
These properties will need to be uncommented.
db.jdbc.url
jdbc:oracle:thin:@localhost:1521:XE
Enter the appropriate URL for the database being used. In the tutorial, Oracle XE is used on localhost.
This property will need to be uncommented.

db.jdbc.driver

oracle.jdbc.driver.OracleDriver
Enter the appropriate JDBC driver. The driver must be in the class path. For this tutorial, Oracle XE is used, and the required driver is provided and present.
scm.name
adminconfig
Uncomment and insure that the value is set to adminconfig.

Save your changes and close Notepad.

.

Confirm that the settings are correct by running the following command:

configtool.bat -check oes_secured_config.properties

Correct any errors and repeat until the command runs successfully.

.


To configure the domain to use Oracle Entitlements Server for security, return to the command prompt and run the following command:

configtool.bat -process oes_secured_config.properties

To configure the domain to use Oracle Entitlements Server for security

You should see status resembling that shown below. If there are any errors between the Loading ALES Policy and set password for user statements, you've made an error.

.


 If errors were detected, you must restore your domain, and remove the newly created instance in the wls-ssm/instance/subdirectory. After restoring the domain and removing the instance, correct whatever error was made and rerun  the OES configuration tool.


.


You may now restart the domain and log in to the console normally. Congratulations! You have successfully created a WLS domain secured by Oracle Entitlements Server.  


Summary

The preceding steps documented the process of installing the Oracle Entitlements Administration software and WebLogic Server SSM. 

In this tutorial, you have learned how to:


Oracle Is The Information Company About Oracle | Oracle RSS Feeds | Careers | Contact Us | Site Maps | Legal Notices | Terms of Use | Your Privacy Rights