Mannu's World

In this post, I will talk about the top down authentication flow that starts from a URL and goes all the way down to an authentication plug in which handles the authentication and authorization logic. To start with when a user enter a URL and requests for a resource. Web gate intercept and looks for that URL  in the application domain.  Remember that application domain is tightly coupled to the Web gate. Web gate matches all the URL or resources to say and matches with closest resource defined. Next it looks for authentication scheme that is defined to protect that resource. Authentication scheme in turn invokes Authentication module that is defined.  It is here that you can define identification, Authentication, success, failure or any other steps or work flow that you want. Authentication module finally invokes Authentication plug in that points to a java code that performs the Auth or any other logic that you want to perform.  You can pass in input...

keytool -genkey -keyalg RSA -alias selfsigned -keystore keystore.jks -storepass password -validity 360 -keysize 2048 keytool -export -alias  selfsigned  -file  selfsigned .cer -keystore keystore.jks Once keystore is created and certficate file is exported Re-register the Java Connector service with  ConnectorServer.exe /uninstall ConnectorServer.exe /install -Djavax.use.ssl=true -Djavax.ssl.keystore=keystore.jks Restart the Java Connector Server. Copy the  selfsigned .cer and import the certificate to cacerts, demo-trust and hostname-truststore.jks (oim) keytool -import -trustcacerts -alias selfsigned -file selfsigned.cer -keystore cacerts

select RBE_REQUEST_KEY from REQUEST_BENEFICIARY_ENTITIES where ( RBE_ENTITY_NAME = 'My_Role_Name' AND RBE_OPERATION = 'ASSIGNROLES' AND RBE_REQUEST_KEY IN ( select REQUEST_KEY from REQUEST where ( REQUEST_STATUS = 'Obtaining Operation Approval' AND REQUEST_MODEL_NAME = 'Assign Roles' AND REQUESTER_KEY = '1368' )))

In this post I will talk about the peculiar issue that you will encounter if you deploy the OIA war file on the weblogic server and there is a failure in deployment of the war file. To fix this issue, you have to enable "Archived Real Path Enabled" Setting on the weblogic domain. Restart the Weblogic Admin and managed servers.

If you have integrated OIM and OIA and they are in the different domain then you will encounter the issue while running the import jobs. We need to establish trust between the 2 domains as below . Navigate to Home > Domain > Security, and check Cross Domain Security is Enabled. Click Advanced, enter the desired password in the Credential and Confirm Credential fields, and click Save. Repeat this configuration change for both domains using the same password value. Restart both Oracle WebLogic Servers.

keytool -importcert -alias youranyaliasname -trustcacerts -file /tmp/deepak/dubey/filename.pem -keystore /tmp/deepak/dubey/mycustomkeystore.jks on oim admin console hostname verification to none update xlconfig.xml to t3s and ssl port copy 3 jar files webservices+ssl.jar jcryptoj.jar change the keystores in OIA weblogic from the demo keystores to OIM's custom keystores OHS to OIM mod_wl_ohs.conf <Location /identity> SetHandler weblogic-handler WLCookieName oimjsessionid WebLogicHost deepak.dubey.com WebLogicPort 14001 Debug ALL SecureProxy ON WlSSLWallet "/tmp/deepak/dubey/wallets/ohs_proxy_ssl_wallet" WLIOTimeoutSecs 600 Idempotent OFF WLSRequest ON WLProxySSL ON WLProxySSLPassThrough ON </Location> change ssl.conf SSLWallet "/tmp/deepak/dubey/wallets/ohswallet" ./orapki wallet create -wallet /tmp/deepak/dubey/wallets/ohswallet -auto_login_only ./orapki wallet add -wallet /tmp/deepak/dubey/wallets/ohswallet -dn CN=hostname -keysize 2048 -self_signe...

In this post , I will be sharing some sample code related to submit action listener that gets invoked every time you hit the submit button on the request page. --------------------------------------------------------------------------------------------------------------------- package deepak.dubey.com; import  java.text.SimpleDateFormat; import  java.util.Date; import  javax.el.MethodExpression; import  javax.faces.application.FacesMessage; import  javax.faces.component.UIComponent; import  javax.faces.context.FacesContext; import  javax.faces.event.ActionEvent; public   class  CustomReqBean {      public  CustomReqBean() {          super ();     }                private  UIComponent startDateID;      private  UIComponent endDateID;  ...

In this post, I will list some of the server tuning parameter that can be used to tune oim managed server. JVM Memory For Hotspot JVM Min Heap Size(Xms) = 4GB, Max Heap Size(Xmx) = 8GB, PermSize(-X:PermSize) = 500m and PermGen size (-XX:MaxPermSize) = 1 GB. For JRockit JVM Min Heap Size(Xms) = 4GB, Max Heap Size(Xmx) = 8GB, PermSize(-X:PermSize) = N/A and PermGen size (-XX:MaxPermSize) = N/A To change the JVM memory setting: 1. If your OIM version is 11.1.2.1.0 or above, use DOMAIN_HOME/bin/setOIMDomainEnv.sh (Unix) or setOIMDomainEnv.cmd (Windows). If not, continue to use DOMAIN_HOME/bin/setDomainEnv.sh (Unix) or setDomainEnv.cmd (Windows) to change the heap size settings. 2. Change the value of DEFAULT_MEM_ARGS and PORT_MEM_ARGS from the default value and save. 3. Restart OIM Server

In this post, I will talk about simple queries to load a particular lookup with a values using database queries. select lku.lku_key into lku_key from lku where lku.LKU_TYPE_STRING_KEY = LookupName;   insert into "LKV" ("LKV_KEY","LKU_KEY","LKV_ENCODED","LKV_DECODED","LKV_LANGUAGE", "LKV_COUNTRY","LKV_VARIANT","LKV_DISABLED","LKV_DATA_LEVEL","LKV_CREATE","LKV_CREATEBY", "LKV_UPDATE","LKV_UPDATEBY","LKV_ROWVER") values (LKV_SEQ.nextval, lku_key, encodedValue,  decodedValue,'en', 'US', null, '0', null, sysdate, 1, sysdate, 1,  HEXTORAW('0000000000000000')); insert into lkv (lkv_key, lku_key, lkv_encoded, lkv_decoded, lkv_language, lkv_country, lkv_diabled,lkv_disabled,lkv_data_level,lkv_create,lkv_createby, lkv_update, lkv_updateby, lkv_rowver) values (LKV_SEQ.NEXTVAL,2222, 'encoded_key...

Oracle Identity Manager (OIM) 11G R2 PS3 (11.1.2.3.0) Configuration

Oracle Identity Manager (OIM) 11G R2 PS3 (11.1.2.3.0) Identity UI Screens