Weblogic AdminServer startup permission issues

Recently while working with webogic, I encountered couple of start issues pointing to all kind of permission issue, so if you are getting the same ..  the fix for them is as below

This can happen after a patch or major upgrade of weblogic or any fusion middleware component.


wlserver_10.3/server/lib/weblogic.policy

grant codeBase "file:/MW_HOME/patch_wls1036/patch_jars/*" {
permission java.security.AllPermission;
};

grant codeBase "file:/MW_HOME/patch_ocp371/patch_jars/*" {
permission java.security.AllPermission;
};

grant codeBase "file:/MW_HOME/wlserver_10.3/common/lib/*" {
  permission java.security.AllPermission;
};

grant codeBase "file:/MW_HOME/wlserver_10.3/server/lib/*" {
  permission java.security.AllPermission;
};


config/fmwconfig/system-jazn-data.xml [OIM, OAM etc ]

<grant>
  <grantee>
    <codesource>
      <url>file:${wls.home}/../../patch_wls1036/patch_jars/*</url>
    </codesource>
  </grantee>
  <permissions>
    <permission>
      <class>oracle.security.jps.service.credstore.CredentialAccessPermission</class>
     <name>context=SYSTEM,mapName=oim,keyName=*</name>
     <actions>read,write</actions>
    </permission>
   </permissions>
</grant>

OHS 12c (12.1.3) webgate deployment and configuration

In this post, I will cover the deployment and configuration of webgate 12c webgate.

OHS 12c comes pre-bundled with a webgate so we don't have to separately download and install any webgate. If you have installed OHS then you have a webgate which you can configure to protect OHS. Also there is no gui screens involved as all configurations are done via command line tools.

In the previous post i covered installation and configuration of OHS 12c.

This post builds on top of that.

Step 1 deploy webgate

./deployWebGateInstance.sh -w /OHS_12c_WEBSERVER_HOME/webserver/instances/instance1/config/fmwconfig/components/OHS/ohs1 -oh /OHS_12c_MW_HOME/

Copying files from WebGate Oracle Home to WebGate Instancedir


Step 2 Config webgate

export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/OHS_12c_MW_HOME/lib
cd /OHS_12c_MW_HOME/webgate/ohs/tools/setup/InstallTools/

./EditHttpConf -w /OHS_12c_WEBSERVER_HOME/webserver/instances/instance1/config/fmwconfig/components/OHS/ohs1 -oh /OHS_12c_MW_HOME/


Step 3 Copy ObAccessClient.xml & cwallet.sso files for open mode of communication

Copy cwallet.sso and ObAccessClient.xml from 11g webgate deployment /var/oracle/fusionV11gR2/domains/OAM_DOMAIN/output to /OHS_12c_WEBSERVER_HOME/webserver/instances/instance11/config/fmwconfig/components/OHS/ohs1/webgate/config


Step 4 Restart OHS instances

cd /OHS_12c_WEBSERVER_HOME/webserver/instances/instance1/bin/


nohup ./startNodeManager.sh &


./startComponent.sh ohs1


Step 5 Test

Access http://ohs_host:ohs_port/
Get Redirected to oam server for authentication

Mandatory Oracle Weblogic Server 10.3.6 patches for OIAM R2 PS3 (11.1.2.3.0 )

Below is the list of the mandatory patch number required for the oracle weblogic 10.3.6 for the OIAM to work correctly later on