The Objective The purpose of this post to share the WLST script which helps in creating a new user in weblogic 11g or 12c and map them to righteous Group for privileges. Like Administrators, Deployers, Monitors etc. Version Compatibility Weblogic 12c (or) 11g The Properties file This is[...]
Read moreCategory: weblogic
A Simple SOAP Web service Application for Weblogic - Development and Testing
In this post, we are going to briefly cover, What is web services and its types? How to develop a Simple SOAP Web service for Weblogic? followed by deployment and testing using POSTMAN and SOAP UI We use Weblogic 12c application server as a platform to deploy our Simple SOAP[...]
Read moreTCPDump Capture HTTP GET/POST requests
TCPDUMP is a swiss army knife for all the administrators and developers when it comes to troubleshooting. This post is written for the people who work in middleware technologies. Web servers such as Apache, NGINX, Oracle HTTP, IHS web servers and application servers such as Weblogic, Websphere, Tomcat, Jboss Consider[...]
Read moreOracle WebLogic Java Deserialization Vulnerability (CVE-2018-2628)
Overview Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.2 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server via unsafe deserialization of Java objects. Successful[...]
Read morePOODLE fix in Weblogic
POODLE fix in Oracle weblogic server Overview Newer versions of web browsers (e.g. Chrome) are now configured with policies which only allow websites or portal which enforce the strongest encryption technology to be viewed. SSL version 3 is no more secure due to POODLE attack. Most of the browser[...]
Read moreOracle Weblogic Basic Authentication
Overview Oracle WebLogic Server authentication is enabled by default. However, this configuration prevents Oracle WebLogic Server from using application managed authentication. You must disable Oracle WebLogic Server authentication by setting the enforce-valid-basic-auth-credentials parameter to false. Procedure To disable Oracle WebLogic Server authentication: In a text editor, open the xmlfile from the domain folder. The config.xml file is in the Oracle/Middleware/user_projects/domains/domain_name/config directory. Locate the <security-configuration> Add the[...]
Read moreHow to Enable JMX port in weblogic 10, 11g, 12c
Weblogic 12c application server is more similar to weblogic 11g in terms of configuring the JMX port. To Enable the JMX port and configuration in weblogic, we have to update the jmxremote flags into setDomainEnv.sh (or) setDomainEnv.cmd file JMX monitoring is essential for better proactive monitoring and to perform diagnosis[...]
Read moreHow to integrate weblogic and apache web server - Steps
Weblogic and Apache Webserver integration To Integrate Weblogic Application server with Apache Webserver, We have to install weblogic plugin on the Apache HTTP Server. Plugins for Apache will be available on Oracle (or) you can find them in your weblogic installed location under " ServerRoot/server/plugins" Under plugins directory of weblogic server[...]
Read moreHow to deploy an application in Weblogic using REST API
Weblogic REST API (or) Weblogic RESTful services is an innovative approach to manage your weblogic application server. Weblogic REST API could help you do various administration tasks like start, stop, deployment tasks, monitoring, Resource creation like JDBC, Server, Cluster so on and so forth. Weblogic REST API can be easily[...]
Read moreWhat is weblogic tenant monitoring and how to use it - Step by Step
Weblogic Tenant monitoring is a predominant feature in weblogic REST API management services. Tenant monitoring enables you to monitor the weblogic resources fast and effective way. Tenant monitoring feature is available in both legacy 12.1 and 12.2 versions. Weblogic Tenant monitoring requires weblogic RESTful management services enabled at the weblogic domain.[...]
Read more