Tuesday, April 29, 2014

OAM 11g R2 PS2 (11.1.2.2.0) : Web Gate 11.1.2.2.0 Installation and Configuration, Protecting Web Application

This post covers the installation and configuration of Oracle Access Manager Web Gate 11.1.2.2.0 to protect Oracle Web Tier Utilities Oracle HTTP Server (OHS) Default Web Application.

Please follow the instructions to install Oracle Web Tier Utilities 11.1.1.7.0  which includes the installation of OHS and Web Cache

Process Overview

  1. Install WebGate
  2. Configure Webgate
  3. Create OAM artifacts to protect  OHS

1. Install WebGate

Extract ofm_webgates_generic_11.1.2.2.0_disk1_1of1.zip and run the installer
setup.exe -jreLoc <JAVA_HOME_LOCATION>









2. Configure Webgate

 
Deploy WebGate



Microsoft Windows [Version 6.2.9200]
(c) 2012 Microsoft Corporation. All rights reserved.

C:\Oracle\Middleware\Oracle_OAMWebGate1\webgate\ohs\tools\deployWebGate>set LD_LIBRARY_PATH=c:\Oracle\Middleware\Oracle_WT1\LIB;c:\Oracle\Middleware\O
racle_OAMWebGate1\webgate\ohs\lib

C:\Oracle\Middleware\Oracle_OAMWebGate1\webgate\ohs\tools\deployWebGate>deployWebGateInstance.bat -w c:\Oracle\Middleware\Oracle_WT1\instances\instanc
e1\config\OHS\ohs1 -oh c:\Oracle\Middleware\Oracle_OAMWebGate1

Copying files
C:\Oracle\Middleware\Oracle_OAMWebGate1\webgate\ohs\config\oblog_config_wg.xml
1 File(s) copied
C:\Oracle\Middleware\Oracle_OAMWebGate1\webgate\ohs\tools\openssl\simpleCA\cacert.pem
1 File(s) copied
C:\Oracle\Middleware\Oracle_OAMWebGate1\webgate\ohs\tools\openssl\simpleCA\cakey.pem
1 File(s) copied
C:\Oracle\Middleware\Oracle_OAMWebGate1\webgate\ohs\tools\deployWebGate>cd c:\Oracle\Middleware\Oracle_OAMWebGate1\webgate\ohs\tools\

c:\Oracle\Middleware\Oracle_OAMWebGate1\webgate\ohs\tools>EditHttpConf -w c:\Oracle\Middleware\Oracle_WT1\instances\instance1\config\OHS\ohs1 -oh c:\O
racle\Middleware\Oracle_OAMWebGate1
'EditHttpConf' is not recognized as an internal or external command,
operable program or batch file.

c:\Oracle\Middleware\Oracle_OAMWebGate1\webgate\ohs\tools>cd EditHttpConf

c:\Oracle\Middleware\Oracle_OAMWebGate1\webgate\ohs\tools\EditHttpConf>EditHttpConf -w c:\Oracle\Middleware\Oracle_WT1\instances\instance1\config\OHS\
ohs1 -oh c:\Oracle\Middleware\Oracle_OAMWebGate1
The web server configuration file was successfully updated
c:\Oracle\Middleware\Oracle_WT1\instances\instance1\config\OHS\ohs1/httpd.conf has been backed up as c:\Oracle\Middleware\Oracle_WT1\instances\instanc
e1\config\OHS\ohs1/httpd.conf.ORIG

c:\Oracle\Middleware\Oracle_OAMWebGate1\webgate\ohs\tools\EditHttpConf>copy c:\Oracle\Middleware\user_projects\domains\base_domain\output\webgate11g_1
\* c:\Oracle\Middleware\Oracle_WT1\instances\instance1\config\OHS\ohs1\webgate\config
c:\Oracle\Middleware\user_projects\domains\base_domain\output\webgate11g_1\cwallet.sso
c:\Oracle\Middleware\user_projects\domains\base_domain\output\webgate11g_1\ObAccessClient.xml
        2 file(s) copied.

c:\Oracle\Middleware\Oracle_OAMWebGate1\webgate\ohs\tools\EditHttpConf>


 

































3. Create OAM Artifacts to Protect OHS Default Web Application


Create User Data Store

 


Create Authentication Module of type LDAP


Create Authentication Scheme


Use the above in Application Domains->webgate11g_1->Authentication Policies->Protected Resource Policies->Authentication Schemes->Deepak_LDAPScheme


Test 

Access 
http://OHSHost:OHSPort/