JOSSO 2.4. Weblogic Integration

Transcription

1 JOSSO 2.4 Weblogic Integration

2 JOSSO 2.4 : Weblogic Integration

3 1. Introduction Weblogic Integration Overview Prerequisites and Requirements Weblogic Agent Install Assumptions Activation Automatic Activation Manual Activation Configure SSO Agent Front-channel URLs Webservice endpoint IDM Webservice descritor Restart Weblogic Configure Weblogic Security Jossify your application for Weblogic - Quick Start Web Applications Create the weblogic.xml descriptor Add the wls-login-redirect.jsp page Configure the <login-config> section in the web.xml descriptor Configure JOSSO Servlet Filters Copy additional resources EJB applications Create the weblogic-ejb-jar.xml descriptor iii

4 Chapter 1. Introduction This guide will walk you through the steps to get a JOSSO 1.8 Agent build up and running in Weblogic. JOSSO Agents follow a different versioning scheme that the server Weblogic Integration Overview TBD 1

5 Chapter 2. Prerequisites and Requirements To make a quick JOSSO setup we will need: JDK 1.7+ : For optimal results Weblogic 11g (10.x) JOSSO For the purposes of this guide, we will assume the following facts: JDK #71 is located at /opt/jdk1.7.0_71 Weblogic 10.0 is located at /opt/bea/wlserver_10.0 JOSSO #19 is located at /opt/atricore/josso-ee

6 Chapter 3. Weblogic Agent Install You will have to install an agent in each container onto which Jossifyed web application will run. For example, if you have applications deployed on Weblogic and JBoss, you will have to install an agent in each container. Agents are part of the Service Provider (partner application) runtime environment. The SSO agent acts as a filter that handles the SSO protocol and manages the container security context. The security context provides information about the current user like the user identifier, roles and properties. These values depend on how you configured the Identity Provider. Te context can be accessed by applications using standard Java EE Security API for both web and EJB tiers. See the provided sample application for details Assumptions Based on Swire s documentation on Oracle Webcenter Sites installation, the following assumptions are made: Oracle Java Development Kit 7 is used by WCS Weblogic server 11g ( internal version) is used. Weblogic server is installed at: /opt/oracle/middleware. The Weblogic domain used is sso_domain The Weblocic server used is AdminServer You MUST modify these instructions accordingly when using different deployment settings Activation There are two ways to install or activate the agent in your server: automatic and manual. The first one will copy all resources to your server based on the execution environment properties. The second option requires that you manually perform this task. We provide scripts that can be used during manual activation Automatic Activation If the execution environment is properly configured, you can use JOSSO 2 Activation option (only in update #19 and above). The activation will install all required JARs and the josso-agentconfig.xml file. Go to the execution environment Activation section and check the Reactivate option and save the identity appliance. When activating a remote server you need to start a JOSSO instance on the target environment as well and configure the remote host endpoint, for instance: You can stop and remove the JOSSO install after activating the application server. Future updates to the configuration can be done by just replacing the agent configuration file. 3

7 Weblogic Agent Install Manual Activation The manual activation also requires a JOSSO instance on the target server, but you don t need to start it. We will only use resources included in the install. Copy Resources. The following script will copy all resources to the domain lib folderl #!/bin/bash JOSSO_HOME="/opt/atricore/josso-ee-2.4.2" WL_HOME="/opt/Oracle/Middleware/wlserver_10.3" WL_DOMAIN="/opt/Oracle/Middleware/user_projects/domains/sso_domain" find "$JOSSO_HOME"/josso -name xbean-spring jar -exec cp {} "$WL_DOMAIN"/lib \; find "$JOSSO_HOME"/josso -name aopalliance-1.0.jar -exec cp {} "$WL_DOMAIN"/lib \; find "$JOSSO_HOME"/josso -name blueprint-parser jar -exec cp {} "$WL_DOMAIN"/lib \; find "$JOSSO_HOME"/josso -name commons-beanutils jar -exec cp {} "$WL_DOMAIN"/lib \; find "$JOSSO_HOME"/josso -name commons-codec-1.4.jar -exec cp {} "$WL_DOMAIN"/lib \; find "$JOSSO_HOME"/josso -name commons-collections-3.0.jar -exec cp {} "$WL_DOMAIN"/lib \; find "$JOSSO_HOME"/josso -name commons-digester-1.5.jar -exec cp {} "$WL_DOMAIN"/lib \; find "$JOSSO_HOME"/josso -name commons-discovery-0.2.jar -exec cp {} "$WL_DOMAIN"/lib \; find "$JOSSO_HOME"/josso -name commons-httpclient-3.1.jar -exec cp {} "$WL_DOMAIN"/lib \; find "$JOSSO_HOME"/josso -name commons-lang-2.0.jar -exec cp {} "$WL_DOMAIN"/lib \; find "$JOSSO_HOME"/josso -name commons-logging jar -exec cp {} "$WL_DOMAIN"/lib \; find "$JOSSO_HOME"/josso -name commons-logging-api jar -exec cp {} "$WL_DOMAIN"/lib \; find "$JOSSO_HOME"/josso -name commons-modeler-1.1.jar -exec cp {} "$WL_DOMAIN"/lib \; find "$JOSSO_HOME"/josso -name josso-agents-bin snapshot-jaxws.jar -exec cp {} "$WL_DOMAIN"/lib \; find "$JOSSO_HOME"/josso -name josso-agent-shared snapshot.jar -exec cp {} "$WL_DOMAIN"/ lib \; find "$JOSSO_HOME"/josso -name josso-servlet-agent snapshot.jar -exec cp {} "$WL_DOMAIN"/ lib \; find "$JOSSO_HOME"/josso -name josso-weblogic10-agent snapshot.jar -exec cp {} "$WL_DOMAIN"/lib \; find "$JOSSO_HOME"/josso -name log4j jar -exec cp {} "$WL_DOMAIN"/lib \; find "$JOSSO_HOME"/josso -name org.apache.aries.blueprint.api jar -exec cp {} "$WL_DOMAIN"/lib \; find "$JOSSO_HOME"/josso -name org.apache.aries.blueprint.noosgi jar -exec cp {} "$WL_DOMAIN"/lib \; find "$JOSSO_HOME"/josso -name slf4j-api jar -exec cp {} "$WL_DOMAIN"/lib \; find "$JOSSO_HOME"/josso -name slf4j-log4j jar -exec cp {} "$WL_DOMAIN"/lib \; find "$JOSSO_HOME"/josso -name spring-aop jar -exec cp {} "$WL_DOMAIN"/lib \; find "$JOSSO_HOME"/josso -name spring-beans jar -exec cp {} "$WL_DOMAIN"/lib \; find "$JOSSO_HOME"/josso -name spring-context jar -exec cp {} "$WL_DOMAIN"/lib \; find "$JOSSO_HOME"/josso -name spring-core jar -exec cp {} "$WL_DOMAIN"/lib \; Copy Agent Configuration file. You need to export the configuration for the execution environment and copy the file while renaming it to josso-agent-config.xml. The target location is the $WL_DOMAIN folder: 4

8 Weblogic Agent Install cp /tmp/josso-agent-wl-config.xml $WL_DOMAIN/ Compile SSO Agent Managed Beans. Weblogic requires that you compile Authentication Providers using its own tools, to create Managed Beans (extensions). The mbean.bat script is used for this task. If all paths are correctly configured, running the script will install the SSO Authenticator after compiling and packaging the authenticator. #!/bin/bash JAVA_HOME="/opt/Oracle/jdk6" JOSSO_HOME="/opt/atricore/josso-ee-2.4.2" WL_HOME="/opt/Oracle/Middleware/wlserver_10.3" WL_DOMAIN="/opt/Oracle/Middleware/user_projects/domains/sso_domain" PATH=$JAVA_HOME/bin:$PATH mkdir "$WL_DOMAIN"/lib/mbeantypes "$JAVA_HOME"/bin/java -Dfiles="$JOSSO_HOME"/josso/dist/agents/src/josso-weblogic10-agentmbeans-src -DMDF="$JOSSO_HOME"/josso/dist/agents/src/josso-weblogic10-agent-mbeans-src/org/ josso/wls10/agent/mbeans/jossoauthenticatorproviderimpl.xml - DtargetNameSpace=urn:org:josso:wls10:agent:mbeans -DschemaLocation="$JOSSO_HOME"/josso/dist/ agents/src/josso-weblogic10-agent-mbeans-src/org/josso/wls10/agent/mbeans/ JOSSOAuthenticatorProviderImpl.xml -DpreserveStubs=false -DcreateStubs=true -classpath josso/dist/agents/bin/josso-agent-shared snapshot.jar:"$josso_home"/josso/dist/agents/ bin/josso-jboss32-agent snapshot.jar:"$josso_home"/josso/dist/agents/bin/josso-jboss40- agent snapshot.jar:"$josso_home"/josso/dist/agents/bin/josso-tomcat85-agent SNAPSHOT.jar:"$JOSSO_HOME"/josso/dist/agents/bin/josso-liferay5-agent SNAPSHOT.jar:"$JOSSO_HOME"/josso/dist/agents/bin/josso-weblogic10-agent SNAPSHOT.jar:"$JOSSO_HOME"/josso/dist/agents/bin/josso-gatein-agent-main SNAPSHOT.jar:"$JOSSO_HOME"/josso/dist/agents/bin/josso-agents-bin SNAPSHOT- axis.jar:"$josso_home"/josso/dist/agents/bin/josso-jbportal27-agent SNAPSHOT.jar:"$JOSSO_HOME"/josso/dist/agents/bin/josso-tomcat50-agent SNAPSHOT.jar:"$JOSSO_HOME"/josso/dist/agents/bin/josso-alfresco-agent SNAPSHOT.jar:"$JOSSO_HOME"/josso/dist/agents/bin/josso-servlet-agent SNAPSHOT.jar:"$JOSSO_HOME"/josso/dist/agents/bin/josso-jboss42-agent SNAPSHOT.jar:"$JOSSO_HOME"/josso/dist/agents/bin/josso-tomcat60-agent SNAPSHOT.jar:"$JOSSO_HOME"/josso/dist/agents/bin/josso-applet-agent SNAPSHOT.jar:"$JOSSO_HOME"/josso/dist/agents/bin/josso-jboss7-agent SNAPSHOT.jar:"$JOSSO_HOME"/josso/dist/agents/bin/josso-jaspi-agent SNAPSHOT.jar:"$JOSSO_HOME"/josso/dist/agents/bin/josso-weblogic12-agent SNAPSHOT.jar:"$JOSSO_HOME"/josso/dist/agents/bin/josso-weblogic92-agent SNAPSHOT.jar:"$JOSSO_HOME"/josso/dist/agents/bin/josso-gatein-agent-authenticator SNAPSHOT.jar:"$JOSSO_HOME"/josso/dist/agents/bin/josso-tomcat70-agent SNAPSHOT.jar:"$JOSSO_HOME"/josso/dist/agents/bin/josso-tomcat80-agent SNAPSHOT.jar:"$JOSSO_HOME"/josso/dist/agents/bin/josso-tomcat55-agent SNAPSHOT.jar:"$JOSSO_HOME"/josso/dist/agents/bin/josso-geronimo-agent SNAPSHOT.jar:"$JOSSO_HOME"/josso/dist/agents/bin/josso-liferay6-agent SNAPSHOT.jar:"$JOSSO_HOME"/josso/dist/agents/bin/josso-jboss5-agent SNAPSHOT.jar:"$JOSSO_HOME"/josso/dist/agents/bin/3rdparty/activation-1.1.jar:"$JOSSO_HOME"/ 5

9 Weblogic Agent Install 6 josso/dist/agents/bin/3rdparty/asm jar:"$josso_home"/josso/dist/agents/bin/3rdparty/ geronimo-ws-metadata_2.0_spec jar:"$josso_home"/josso/dist/agents/bin/3rdparty/xbeanspring jar:"$josso_home"/josso/dist/agents/bin/3rdparty/springcore jar:"$josso_home"/josso/dist/agents/bin/3rdparty/cxf-rt-bindingsxml jar:"$josso_home"/josso/dist/agents/bin/3rdparty/commonshttpclient-3.1.jar:"$josso_home"/josso/dist/agents/bin/3rdparty/geronimo-staxapi_1.0_spec jar:"$josso_home"/josso/dist/agents/bin/3rdparty/blueprintparser jar:"$josso_home"/josso/dist/agents/bin/3rdparty/commonscollections-3.0.jar:"$josso_home"/josso/dist/agents/bin/3rdparty/logbackclassic jar:"$josso_home"/josso/dist/agents/bin/3rdparty/commonslogging jar:"$josso_home"/josso/dist/agents/bin/3rdparty/geronimoactivation_1.1_spec jar:"$josso_home"/josso/dist/agents/bin/3rdparty/commonsdigester-1.5.jar:"$josso_home"/josso/dist/agents/bin/3rdparty/commonsbeanutils jar:"$josso_home"/josso/dist/agents/bin/3rdparty/ org.apache.aries.blueprint.api jar:"$josso_home"/josso/dist/agents/bin/3rdparty/cxf-rtfrontend-jaxws jar:"$josso_home"/josso/dist/agents/bin/3rdparty/cxf-rt-wsaddr jar:"$josso_home"/josso/dist/agents/bin/3rdparty/cxf-rt-bindingssoap jar:"$josso_home"/josso/dist/agents/bin/3rdparty/xmlschema jar:"$josso_home"/ josso/dist/agents/bin/3rdparty/spring-aop jar:"$josso_home"/josso/dist/agents/ bin/3rdparty/commons-modeler-1.1.jar:"$josso_home"/josso/dist/agents/bin/3rdparty/cxf-toolscommon jar:"$josso_home"/josso/dist/agents/bin/3rdparty/jcl-overslf4j jar:"$josso_home"/josso/dist/agents/bin/3rdparty/geronimoannotation_1.0_spec jar:"$josso_home"/josso/dist/agents/bin/3rdparty/ wsdl4j jar:"$josso_home"/josso/dist/agents/bin/3rdparty/cxf-api jar:"$josso_home"/ josso/dist/agents/bin/3rdparty/wstx-asl jar:"$josso_home"/josso/dist/agents/ bin/3rdparty/axis-ant-1.4.jar:"$josso_home"/josso/dist/agents/bin/3rdparty/commonsdiscovery-0.2.jar:"$josso_home"/josso/dist/agents/bin/3rdparty/cxf-rt-databindingjaxb jar:"$josso_home"/josso/dist/agents/bin/3rdparty/portal-identitylib ga.jar:"$josso_home"/josso/dist/agents/bin/3rdparty/geronimojavamail_1.4_spec-1.6.jar:"$josso_home"/josso/dist/agents/bin/3rdparty/commonslang-2.0.jar:"$josso_home"/josso/dist/agents/bin/3rdparty/axis-saaj-1.4.jar:"$josso_home"/ josso/dist/agents/bin/3rdparty/cxf-rt-core jar:"$josso_home"/josso/dist/agents/ bin/3rdparty/geronimo-jaxws_2.1_spec-1.0.jar:"$josso_home"/josso/dist/agents/bin/3rdparty/ aopalliance-1.0.jar:"$josso_home"/josso/dist/agents/bin/3rdparty/jaxbimpl jar:"$josso_home"/josso/dist/agents/bin/3rdparty/ org.apache.aries.blueprint.noosgi jar:"$josso_home"/josso/dist/agents/bin/3rdparty/ org.apache.aries.proxy.api jar:"$josso_home"/josso/dist/agents/bin/3rdparty/springbeans jar:"$josso_home"/josso/dist/agents/bin/3rdparty/saaj-api-1.3.jar:"$josso_home"/ josso/dist/agents/bin/3rdparty/commons-codec-1.3.jar:"$josso_home"/josso/dist/agents/ bin/3rdparty/slf4j-api jar:"$josso_home"/josso/dist/agents/bin/3rdparty/ org.apache.aries.blueprint.core jar:"$josso_home"/josso/dist/agents/bin/3rdparty/ neethi jar:"$josso_home"/josso/dist/agents/bin/3rdparty/jaxb-api-2.1.jar:"$josso_home"/ josso/dist/agents/bin/3rdparty/saaj-impl jar:"$josso_home"/josso/dist/agents/ bin/3rdparty/axis-1.4.jar:"$josso_home"/josso/dist/agents/bin/3rdparty/axiswsdl4j jar:"$josso_home"/josso/dist/agents/bin/3rdparty/axisjaxrpc-1.4.jar:"$josso_home"/josso/dist/agents/bin/3rdparty/log4j jar:"$josso_home"/ josso/dist/agents/bin/3rdparty/commons-logging-api jar:"$josso_home"/josso/dist/agents/ bin/3rdparty/fastinfoset jar:"$josso_home"/josso/dist/agents/bin/3rdparty/xmlresolver-1.2.jar:"$josso_home"/josso/dist/agents/bin/3rdparty/cxf-rt-frontendsimple jar:"$josso_home"/josso/dist/agents/bin/3rdparty/cxf-commonschemas jar:"$josso_home"/josso/dist/agents/bin/3rdparty/springcontext jar:"$josso_home"/josso/dist/agents/bin/3rdparty/cxf-commonutilities jar:"$josso_home"/josso/dist/agents/bin/3rdparty/logbackcore jar:/"$wl_home"/server/lib/eccpressoasn1.jar:/"$wl_home"/server/lib/ EccpressoJcae.jar:/"$WL_HOME"/server/lib/cryptoj.jar:/"$WL_HOME"/server/lib/ bea_wls_remote_deployer.jar:/"$wl_home"/server/lib/wlthint3client.jar:/"$wl_home"/server/lib/ EccpressoCore.jar:/"$WL_HOME"/server/lib/weblogic-zh_CN.jar:/"$WL_HOME"/server/lib/mysqlconnector-java-commercial bin.jar:/"$WL_HOME"/server/lib/wllog4j.jar:/"$WL_HOME"/ server/lib/ojdbc6.jar:/"$wl_home"/server/lib/jcom.jar:/"$wl_home"/server/lib/

10 Weblogic Agent Install jrmp.jar:/"$wl_home"/server/lib/xqrl.jar:/"$wl_home"/server/lib/weblogic-fr.jar:/"$wl_home"/ server/lib/weblogic.jar:/"$wl_home"/server/lib/weblogic-de.jar:/"$wl_home"/server/lib/ weblogic-l10n.jar:/"$wl_home"/server/lib/wldeploy.jar:/"$wl_home"/server/lib/weblogicja.jar:/"$wl_home"/server/lib/weblogic-spring.jar:/"$wl_home"/server/lib/ cryptojfips.jar:/"$wl_home"/server/lib/wlw-langx-zh_cn.jar:/"$wl_home"/server/lib/wlw-langxzh_tw.jar:/"$wl_home"/server/lib/wlw-langx-ko.jar:/"$wl_home"/server/lib/xmlx.jar:/"$wl_home"/ server/lib/jms51-interop.jar:/"$wl_home"/server/lib/wls-api.jar:/"$wl_home"/server/lib/ wljmxclient.jar:/"$wl_home"/server/lib/aqapi.jar:/"$wl_home"/server/lib/ bea_wls_async_response.jar:/"$wl_home"/server/lib/wldb2.jar:/"$wl_home"/server/lib/ webserviceclient+ssl.jar:/"$wl_home"/server/lib/weblogic-es.jar:/"$wl_home"/server/lib/ wljmsclient.jar:/"$wl_home"/server/lib/ons.jar:/"$wl_home"/server/lib/weblogicko.jar:/"$wl_home"/server/lib/wseeclient.jar:/"$wl_home"/server/lib/ wlsafclient.jar:/"$wl_home"/server/lib/pcl2.jar:/"$wl_home"/server/lib/wsse.jar:/"$wl_home"/ server/lib/wlw-langx.jar:/"$wl_home"/server/lib/weblogic-zh_tw.jar:/"$wl_home"/server/lib/ wlinformix.jar:/"$wl_home"/server/lib/wl-j2ee-client.jar:/"$wl_home"/server/lib/ ucp.jar:/"$wl_home"/server/lib/wlcommons-logging.jar:/"$wl_home"/server/lib/weblogicit.jar:/"$wl_home"/server/lib/wlsybase.jar:/"$wl_home"/server/lib/diagnosticsagent.jar:/"$wl_home"/server/lib/wlnmclient.jar:/"$wl_home"/server/lib/ fmwgenerictoken.jar:/"$wl_home"/server/lib/mejb.jar:/"$wl_home"/server/lib/ wlconnector.jar:/"$wl_home"/server/lib/wlw-langx-ja.jar:/"$wl_home"/server/lib/ wljarbuilder.jar:/"$wl_home"/server/lib/weblogic-pt_br.jar:/"$wl_home"/server/lib/ wlsaft3client.jar:/"$wl_home"/server/lib/webservices.jar:/"$wl_home"/server/lib/ wlcipher.jar:/"$wl_home"/server/lib/wlsqlserver.jar:/"$wl_home"/server/lib/ wlclient.jar:/"$wl_home"/server/lib/jrmpclient.jar:/"$wl_home"/server/lib/api.jar:/"$wl_home"/ server/lib/webserviceclient.jar:/"$wl_home"/server/lib/wlw-wsee-soapfault.jar:"$java_home"/ lib/tools.jar:"$java_home"/jre/lib/psfont.properties.ja:"$java_home"/jre/lib/ fontconfig.suse.10.properties.src:"$java_home"/jre/lib/currency.data:"$java_home"/jre/lib/ fontconfig.suse.10.bfc:"$java_home"/jre/lib/alt-rt.jar:"$java_home"/jre/lib/ deploy:"$java_home"/jre/lib/jfr:"$java_home"/jre/lib/charsets.jar:"$java_home"/jre/lib/ amd64:"$java_home"/jre/lib/sound.properties:"$java_home"/jre/lib/ fontconfig.redhat.5.bfc:"$java_home"/jre/lib/cmm:"$java_home"/jre/lib/management:"$java_home"/ jre/lib/fontconfig.turbo.bfc:"$java_home"/jre/lib/plugin.jar:"$java_home"/jre/lib/ fontconfig.redhat.6.properties.src:"$java_home"/jre/lib/jvm.hprof.txt:"$java_home"/jre/lib/ content-types.properties:"$java_home"/jre/lib/jfr.jar:"$java_home"/jre/lib/ calendars.properties:"$java_home"/jre/lib/fontconfig.redhat.6.bfc:"$java_home"/jre/lib/ applet:"$java_home"/jre/lib/fontconfig.suse.11.bfc:"$java_home"/jre/lib/ net.properties:"$java_home"/jre/lib/fontconfig.bfc:"$java_home"/jre/lib/zi:"$java_home"/jre/ lib/meta-index:"$java_home"/jre/lib/deploy.jar:"$java_home"/jre/lib/ fontconfig.redhat.5.properties.src:"$java_home"/jre/lib/management-agent.jar:"$java_home"/jre/ lib/javaws.jar:"$java_home"/jre/lib/images:"$java_home"/jre/lib/security:"$java_home"/jre/lib/ resources.jar:"$java_home"/jre/lib/jce.jar:"$java_home"/jre/lib/jfxrt.jar:"$java_home"/jre/ lib/classlist:"$java_home"/jre/lib/flavormap.properties:"$java_home"/jre/lib/ fontconfig.suse.11.properties.src:"$java_home"/jre/lib/desktop:"$java_home"/jre/lib/ rt.jar:"$java_home"/jre/lib/ext:"$java_home"/jre/lib/ fontconfig.turbo.properties.src:"$java_home"/jre/lib/psfontj2d.properties:"$java_home"/jre/ lib/fontconfig.properties.src:"$java_home"/jre/lib/jsse.jar:"$java_home"/jre/lib/ logging.properties:"$java_home"/jre/lib/oblique-fonts:"$java_home"/jre/lib/fonts:"$java_home"/ jre/lib/jexec:"$java_home"/jre/lib/javafx.properties:"$java_home"/jre/lib/locale weblogic.management.commo.weblogicmbeanmaker "$JAVA_HOME"/bin/java -Dfiles="$JOSSO_HOME"/josso/dist/agents/src/josso-weblogic10-agentmbeans-src -DMJF=/"$WL_DOMAIN"/lib/mbeantypes/josso-weblogic10-agent-mbeans.jar - DpreserveStubs=false -DcreateStubs=true -classpath "$JOSSO_HOME"/josso/dist/agents/bin/jossoagents-bin SNAPSHOT-jaxws.jar:"$JOSSO_HOME"/josso/dist/agents/bin/josso-agentshared SNAPSHOT.jar:"$JOSSO_HOME"/josso/dist/agents/bin/josso-jboss32-agent SNAPSHOT.jar:"$JOSSO_HOME"/josso/dist/agents/bin/josso-jboss40-agent SNAPSHOT.jar:"$JOSSO_HOME"/josso/dist/agents/bin/josso-tomcat85-agent SNAPSHOT.jar:"$JOSSO_HOME"/josso/dist/agents/bin/josso-liferay5-agent SNAPSHOT.jar:"$JOSSO_HOME"/josso/dist/agents/bin/josso-weblogic10-agent

11 Weblogic Agent Install 8 SNAPSHOT.jar:"$JOSSO_HOME"/josso/dist/agents/bin/josso-gatein-agent-main SNAPSHOT.jar:"$JOSSO_HOME"/josso/dist/agents/bin/josso-agents-bin SNAPSHOT- axis.jar:"$josso_home"/josso/dist/agents/bin/josso-jbportal27-agent SNAPSHOT.jar:"$JOSSO_HOME"/josso/dist/agents/bin/josso-tomcat50-agent SNAPSHOT.jar:"$JOSSO_HOME"/josso/dist/agents/bin/josso-alfresco-agent SNAPSHOT.jar:"$JOSSO_HOME"/josso/dist/agents/bin/josso-servlet-agent SNAPSHOT.jar:"$JOSSO_HOME"/josso/dist/agents/bin/josso-jboss42-agent SNAPSHOT.jar:"$JOSSO_HOME"/josso/dist/agents/bin/josso-tomcat60-agent SNAPSHOT.jar:"$JOSSO_HOME"/josso/dist/agents/bin/josso-applet-agent SNAPSHOT.jar:"$JOSSO_HOME"/josso/dist/agents/bin/josso-jboss7-agent SNAPSHOT.jar:"$JOSSO_HOME"/josso/dist/agents/bin/josso-jaspi-agent SNAPSHOT.jar:"$JOSSO_HOME"/josso/dist/agents/bin/josso-weblogic12-agent SNAPSHOT.jar:"$JOSSO_HOME"/josso/dist/agents/bin/josso-weblogic92-agent SNAPSHOT.jar:"$JOSSO_HOME"/josso/dist/agents/bin/josso-gatein-agent-authenticator SNAPSHOT.jar:"$JOSSO_HOME"/josso/dist/agents/bin/josso-tomcat70-agent SNAPSHOT.jar:"$JOSSO_HOME"/josso/dist/agents/bin/josso-tomcat80-agent SNAPSHOT.jar:"$JOSSO_HOME"/josso/dist/agents/bin/josso-tomcat55-agent SNAPSHOT.jar:"$JOSSO_HOME"/josso/dist/agents/bin/josso-geronimo-agent SNAPSHOT.jar:"$JOSSO_HOME"/josso/dist/agents/bin/josso-liferay6-agent SNAPSHOT.jar:"$JOSSO_HOME"/josso/dist/agents/bin/josso-jboss5-agent SNAPSHOT.jar:"$JOSSO_HOME"/josso/dist/agents/bin/3rdparty/activation-1.1.jar:"$JOSSO_HOME"/ josso/dist/agents/bin/3rdparty/asm jar:"$josso_home"/josso/dist/agents/bin/3rdparty/ geronimo-ws-metadata_2.0_spec jar:"$josso_home"/josso/dist/agents/bin/3rdparty/xbeanspring jar:"$josso_home"/josso/dist/agents/bin/3rdparty/springcore jar:"$josso_home"/josso/dist/agents/bin/3rdparty/cxf-rt-bindingsxml jar:"$josso_home"/josso/dist/agents/bin/3rdparty/commonshttpclient-3.1.jar:"$josso_home"/josso/dist/agents/bin/3rdparty/geronimo-staxapi_1.0_spec jar:"$josso_home"/josso/dist/agents/bin/3rdparty/blueprintparser jar:"$josso_home"/josso/dist/agents/bin/3rdparty/commonscollections-3.0.jar:"$josso_home"/josso/dist/agents/bin/3rdparty/logbackclassic jar:"$josso_home"/josso/dist/agents/bin/3rdparty/commonslogging jar:"$josso_home"/josso/dist/agents/bin/3rdparty/geronimoactivation_1.1_spec jar:"$josso_home"/josso/dist/agents/bin/3rdparty/commonsdigester-1.5.jar:"$josso_home"/josso/dist/agents/bin/3rdparty/commonsbeanutils jar:"$josso_home"/josso/dist/agents/bin/3rdparty/ org.apache.aries.blueprint.api jar:"$josso_home"/josso/dist/agents/bin/3rdparty/cxf-rtfrontend-jaxws jar:"$josso_home"/josso/dist/agents/bin/3rdparty/cxf-rt-wsaddr jar:"$josso_home"/josso/dist/agents/bin/3rdparty/cxf-rt-bindingssoap jar:"$josso_home"/josso/dist/agents/bin/3rdparty/xmlschema jar:"$josso_home"/ josso/dist/agents/bin/3rdparty/spring-aop jar:"$josso_home"/josso/dist/agents/ bin/3rdparty/commons-modeler-1.1.jar:"$josso_home"/josso/dist/agents/bin/3rdparty/cxf-toolscommon jar:"$josso_home"/josso/dist/agents/bin/3rdparty/jcl-overslf4j jar:"$josso_home"/josso/dist/agents/bin/3rdparty/geronimoannotation_1.0_spec jar:"$josso_home"/josso/dist/agents/bin/3rdparty/ wsdl4j jar:"$josso_home"/josso/dist/agents/bin/3rdparty/cxf-api jar:"$josso_home"/ josso/dist/agents/bin/3rdparty/wstx-asl jar:"$josso_home"/josso/dist/agents/ bin/3rdparty/axis-ant-1.4.jar:"$josso_home"/josso/dist/agents/bin/3rdparty/commonsdiscovery-0.2.jar:"$josso_home"/josso/dist/agents/bin/3rdparty/cxf-rt-databindingjaxb jar:"$josso_home"/josso/dist/agents/bin/3rdparty/portal-identitylib ga.jar:"$josso_home"/josso/dist/agents/bin/3rdparty/geronimojavamail_1.4_spec-1.6.jar:"$josso_home"/josso/dist/agents/bin/3rdparty/commonslang-2.0.jar:"$josso_home"/josso/dist/agents/bin/3rdparty/axis-saaj-1.4.jar:"$josso_home"/ josso/dist/agents/bin/3rdparty/cxf-rt-core jar:"$josso_home"/josso/dist/agents/ bin/3rdparty/geronimo-jaxws_2.1_spec-1.0.jar:"$josso_home"/josso/dist/agents/bin/3rdparty/ aopalliance-1.0.jar:"$josso_home"/josso/dist/agents/bin/3rdparty/jaxbimpl jar:"$josso_home"/josso/dist/agents/bin/3rdparty/ org.apache.aries.blueprint.noosgi jar:"$josso_home"/josso/dist/agents/bin/3rdparty/ org.apache.aries.proxy.api jar:"$josso_home"/josso/dist/agents/bin/3rdparty/springbeans jar:"$josso_home"/josso/dist/agents/bin/3rdparty/saaj-api-1.3.jar:"$josso_home"/

12 Weblogic Agent Install 9 josso/dist/agents/bin/3rdparty/commons-codec-1.3.jar:"$josso_home"/josso/dist/agents/ bin/3rdparty/slf4j-api jar:"$josso_home"/josso/dist/agents/bin/3rdparty/ org.apache.aries.blueprint.core jar:"$josso_home"/josso/dist/agents/bin/3rdparty/ neethi jar:"$josso_home"/josso/dist/agents/bin/3rdparty/jaxb-api-2.1.jar:"$josso_home"/ josso/dist/agents/bin/3rdparty/saaj-impl jar:"$josso_home"/josso/dist/agents/ bin/3rdparty/axis-1.4.jar:"$josso_home"/josso/dist/agents/bin/3rdparty/axiswsdl4j jar:"$josso_home"/josso/dist/agents/bin/3rdparty/axisjaxrpc-1.4.jar:"$josso_home"/josso/dist/agents/bin/3rdparty/log4j jar:"$josso_home"/ josso/dist/agents/bin/3rdparty/commons-logging-api jar:"$josso_home"/josso/dist/agents/ bin/3rdparty/fastinfoset jar:"$josso_home"/josso/dist/agents/bin/3rdparty/xmlresolver-1.2.jar:"$josso_home"/josso/dist/agents/bin/3rdparty/cxf-rt-frontendsimple jar:"$josso_home"/josso/dist/agents/bin/3rdparty/cxf-commonschemas jar:"$josso_home"/josso/dist/agents/bin/3rdparty/springcontext jar:"$josso_home"/josso/dist/agents/bin/3rdparty/cxf-commonutilities jar:"$josso_home"/josso/dist/agents/bin/3rdparty/logbackcore jar:/"$wl_home"/server/lib/eccpressoasn1.jar:/"$wl_home"/server/lib/ EccpressoJcae.jar:/"$WL_HOME"/server/lib/cryptoj.jar:/"$WL_HOME"/server/lib/ bea_wls_remote_deployer.jar:/"$wl_home"/server/lib/wlthint3client.jar:/"$wl_home"/server/lib/ EccpressoCore.jar:/"$WL_HOME"/server/lib/weblogic-zh_CN.jar:/"$WL_HOME"/server/lib/mysqlconnector-java-commercial bin.jar:/"$WL_HOME"/server/lib/wllog4j.jar:/"$WL_HOME"/ server/lib/ojdbc6.jar:/"$wl_home"/server/lib/jcom.jar:/"$wl_home"/server/lib/ jrmp.jar:/"$wl_home"/server/lib/xqrl.jar:/"$wl_home"/server/lib/weblogic-fr.jar:/"$wl_home"/ server/lib/weblogic.jar:/"$wl_home"/server/lib/weblogic-de.jar:/"$wl_home"/server/lib/ weblogic-l10n.jar:/"$wl_home"/server/lib/wldeploy.jar:/"$wl_home"/server/lib/weblogicja.jar:/"$wl_home"/server/lib/weblogic-spring.jar:/"$wl_home"/server/lib/ cryptojfips.jar:/"$wl_home"/server/lib/wlw-langx-zh_cn.jar:/"$wl_home"/server/lib/wlw-langxzh_tw.jar:/"$wl_home"/server/lib/wlw-langx-ko.jar:/"$wl_home"/server/lib/xmlx.jar:/"$wl_home"/ server/lib/jms51-interop.jar:/"$wl_home"/server/lib/wls-api.jar:/"$wl_home"/server/lib/ wljmxclient.jar:/"$wl_home"/server/lib/aqapi.jar:/"$wl_home"/server/lib/ bea_wls_async_response.jar:/"$wl_home"/server/lib/wldb2.jar:/"$wl_home"/server/lib/ webserviceclient+ssl.jar:/"$wl_home"/server/lib/weblogic-es.jar:/"$wl_home"/server/lib/ wljmsclient.jar:/"$wl_home"/server/lib/ons.jar:/"$wl_home"/server/lib/weblogicko.jar:/"$wl_home"/server/lib/wseeclient.jar:/"$wl_home"/server/lib/ wlsafclient.jar:/"$wl_home"/server/lib/pcl2.jar:/"$wl_home"/server/lib/wsse.jar:/"$wl_home"/ server/lib/wlw-langx.jar:/"$wl_home"/server/lib/weblogic-zh_tw.jar:/"$wl_home"/server/lib/ wlinformix.jar:/"$wl_home"/server/lib/wl-j2ee-client.jar:/"$wl_home"/server/lib/ ucp.jar:/"$wl_home"/server/lib/wlcommons-logging.jar:/"$wl_home"/server/lib/weblogicit.jar:/"$wl_home"/server/lib/wlsybase.jar:/"$wl_home"/server/lib/diagnosticsagent.jar:/"$wl_home"/server/lib/wlnmclient.jar:/"$wl_home"/server/lib/ fmwgenerictoken.jar:/"$wl_home"/server/lib/mejb.jar:/"$wl_home"/server/lib/ wlconnector.jar:/"$wl_home"/server/lib/wlw-langx-ja.jar:/"$wl_home"/server/lib/ wljarbuilder.jar:/"$wl_home"/server/lib/weblogic-pt_br.jar:/"$wl_home"/server/lib/ wlsaft3client.jar:/"$wl_home"/server/lib/webservices.jar:/"$wl_home"/server/lib/ wlcipher.jar:/"$wl_home"/server/lib/wlsqlserver.jar:/"$wl_home"/server/lib/ wlclient.jar:/"$wl_home"/server/lib/jrmpclient.jar:/"$wl_home"/server/lib/api.jar:/"$wl_home"/ server/lib/webserviceclient.jar:/"$wl_home"/server/lib/wlw-wsee-soapfault.jar:"$java_home"/ lib/tools.jar:"$java_home"/jre/lib/psfont.properties.ja:"$java_home"/jre/lib/ fontconfig.suse.10.properties.src:"$java_home"/jre/lib/currency.data:"$java_home"/jre/lib/ fontconfig.suse.10.bfc:"$java_home"/jre/lib/alt-rt.jar:"$java_home"/jre/lib/ deploy:"$java_home"/jre/lib/jfr:"$java_home"/jre/lib/charsets.jar:"$java_home"/jre/lib/ amd64:"$java_home"/jre/lib/sound.properties:"$java_home"/jre/lib/ fontconfig.redhat.5.bfc:"$java_home"/jre/lib/cmm:"$java_home"/jre/lib/management:"$java_home"/ jre/lib/fontconfig.turbo.bfc:"$java_home"/jre/lib/plugin.jar:"$java_home"/jre/lib/ fontconfig.redhat.6.properties.src:"$java_home"/jre/lib/jvm.hprof.txt:"$java_home"/jre/lib/ content-types.properties:"$java_home"/jre/lib/jfr.jar:"$java_home"/jre/lib/ calendars.properties:"$java_home"/jre/lib/fontconfig.redhat.6.bfc:"$java_home"/jre/lib/ applet:"$java_home"/jre/lib/fontconfig.suse.11.bfc:"$java_home"/jre/lib/ net.properties:"$java_home"/jre/lib/fontconfig.bfc:"$java_home"/jre/lib/zi:"$java_home"/jre/ lib/meta-index:"$java_home"/jre/lib/deploy.jar:"$java_home"/jre/lib/

13 Weblogic Agent Install fontconfig.redhat.5.properties.src:"$java_home"/jre/lib/management-agent.jar:"$java_home"/jre/ lib/javaws.jar:"$java_home"/jre/lib/images:"$java_home"/jre/lib/security:"$java_home"/jre/lib/ resources.jar:"$java_home"/jre/lib/jce.jar:"$java_home"/jre/lib/jfxrt.jar:"$java_home"/jre/ lib/classlist:"$java_home"/jre/lib/flavormap.properties:"$java_home"/jre/lib/ fontconfig.suse.11.properties.src:"$java_home"/jre/lib/desktop:"$java_home"/jre/lib/ rt.jar:"$java_home"/jre/lib/ext:"$java_home"/jre/lib/ fontconfig.turbo.properties.src:"$java_home"/jre/lib/psfontj2d.properties:"$java_home"/jre/ lib/fontconfig.properties.src:"$java_home"/jre/lib/jsse.jar:"$java_home"/jre/lib/ logging.properties:"$java_home"/jre/lib/oblique-fonts:"$java_home"/jre/lib/fonts:"$java_home"/ jre/lib/jexec:"$java_home"/jre/lib/javafx.properties:"$java_home"/jre/lib/locale weblogic.management.commo.weblogicmbeanmaker 3.3. Configure SSO Agent We need to configure the SSO Agent and modify properties related with the new environment we are installing like the IDM server host name. The SSO Agent is configured with the following file: josso-agent-config.xml. /opt/oracle/middleware/user_projects/domains/sso_domain These are the properties that may need to be updated, in particular the endpoint Front-channel URLs Modify protocol, server name and port to match the SSO system. This is the value users will access using the web browser.(i.e. ). Also udpate URI Path, replace WCS with the proper execution environment name taken from the JOSSO server. (Identiy Appliance Definintion) gatewayloginurl gatewaylogouturl ignoredreferrers Webservice endpoint Modify JOSSO Server name and port used by the agent to perform webservices calls. This is an internal network name and port that must be resolved and accessible from the application server environment. (i.e. vsvr059085:8081 ) endpoint IDM Webservice descritor Modify JAR file path. Make sure that the path to josso-agents-bin snapshot-jaxws.jar is correct if no internet connection is available. 10

14 Weblogic Agent Install wsdllocation 3.4. Restart Weblogic Now we must restart all weblogic servers and enable the JOSSO Security Provider 3.5. Configure Weblogic Security After restarting weblogic, we need to enable the SSO Authenticator. Access weblogic console and click the Security Realms in the left. Then click on myrealm. Select the Providers tab and click New. You now need to add a new JOSSOProvider as shown in the picture: Now modify the Default Authenticator settings by selecting it from the list, set the Control Flag to SUFFICIENT Do the same for thew new JOSSOAuthenticator settings by selecting it from the list, set the Control Flag to SUFFICIENT Finally select the Reorder option and rearrange the authenticators as follow: You must restart all Weblogic servers after this change. 11

15 Chapter 4. Jossify your application for Weblogic - Quick Start We provide a sample web application that you can review and use to test your Weblogic deployment, incljuding both EJB and WEB tiers: github: josso-partner-wl10 [ Web Applications Create the weblogic.xml descriptor In your web application, create the weblogic.xml descriptor in the WEB-INF folder and map all the roles your application will use. weblogic.xml. <?xml version= "1.0" encoding= "UTF-8"?> <weblogic-web-app xmlns=" xmlns:j2ee=" xmlns:xsi=" xsi:schemalocation=" > <security-role-assignment> <role-name>role1</role-name> <principal-name>role1</principal-name> </security-role-assignment> </weblogic-web-app> Add the wls-login-redirect.jsp page Copy the wls-login-redirect.jsp page provided by josso to your application resources directory. login-redirect.jsp. <%@page contenttype= "text/html; charset=iso " language= "java" session= " true " %> <% response.sendredirect(request.getcontextpath() + "/josso-wls/josso_login.jsp" ); %> Configure the <login-config> section in the web.xml descriptor Use the following login configuration for the web applicationweb.xml 12

16 Jossify your application for Weblogic - Quick Start <login-config> <auth-method>form</auth-method> <form-login-config> <form-login-page>/wls-login-redirect.jsp</form-login-page> <form-error-page>/wls-login-redirect.jsp</form-error-page> </form-login-config> </login-config> Configure JOSSO Servlet Filters web.xml (Weblogic 10.0).... <!-- Uncomment if you need identity in public resources <filter> <filter-name>wlauthenticatorproviderfilter</filter-name> <description>weblogic 10.0 Authenticator Provider Serlvet Filter</description> <filter-class>org.josso.wls10.agent.wlsagentservletfilter</filter-class> </filter> --> <!-- Comment if you need identity in public resources --> <filter> <filter-name>wlsessionenforcementservletfilter</filter-name> <description>weblogic 10.0 Session Enforcement Servlet Filter</description> <filter-class>org.josso.wls10.agent.wlssessionenforcementservletfilter</filter-class> </filter>... <!-- <filter-mapping> <filter-name>wlauthenticatorproviderfilter</filter-name> <url-pattern>/*</url-pattern> </filter-mapping> --> <filter-mapping> <filter-name>wlsessionenforcementservletfilter</filter-name> <url-pattern>/*</url-pattern> </filter-mapping>...web.xml (Weblogic 9.2)... <!-- Uncomment if you need identity in public resources <filter> <filter-name>wlauthenticatorproviderfilter</filter-name> <description>weblogic 9.2 Authenticator Provider Serlvet Filter</description> <filter-class>org.josso.wls92.agent.wlsagentservletfilter</filter-class> </filter> --> <!-- Comment if you need identity in public resources --> <filter> <filter-name>wlsessionenforcementservletfilter</filter-name> <description>weblogic 9.2 Session Enforcement Servlet Filter</description> <filter-class>org.josso.wls92.agent.wlssessionenforcementservletfilter</filter-class> </filter>... <!-- <filter-mapping> 13

17 Jossify your application for Weblogic - Quick Start <filter-name>wlauthenticatorproviderfilter</filter-name> <url-pattern>/*</url-pattern> </filter-mapping> --> <filter-mapping> <filter-name>wlsessionenforcementservletfilter</filter-name> <url-pattern>/*</url-pattern> </filter-mapping> Copy additional resources Create a josso-wls folder in your application resources directory and copy the following files : josso_login.jsp josso_logout.jsp josso_security_check.jsp You can find this files here The three of them contain the same jsp script : <%response.senderror(javax.servlet.http.httpservletresponse.sc_not_found);%> 4.2. EJB applications Create the weblogic-ejb-jar.xml descriptor Add all the security role assignments to your application needs. weblogic-ejb-jar.xml. <?xml version= "1.0" encoding= "ISO "?> <weblogic-ejb-jar xmlns=" xmlns:xsi=" xsi:schemalocation=" > <weblogic-enterprise-bean>... </weblogic-enterprise-bean> <security-role-assignment> <role-name>role1</role-name> <principal-name>role1</principal-name> </security-role-assignment> </weblogic-ejb-jar> 14