Oracle&More

Checking CSR Validity

2019-08-30T01:21:00.002-07:00

You can use below link to validate a CSR

https://ssltools.digicert.com/checker/views/csrCheck.jsp

Generate a JKS (Key Store)

2019-08-29T08:12:00.000-07:00

Create a KeyStore:

keytool -genkey -alias mydomain -keyalg RSA -keystore KeyStore.jks -keysize 2048

Generate a CSR:

keytool -certreq -alias mydomain -keystore KeyStore.jks -file mydomain.csr

Import the root & intermediate certificates into your keystore:

keytool -import -trustcacerts -alias root -file root.crt -keystore KeyStore.jks

keytool -import -trustcacerts -alias intermediate -file intermediate.crt -keystore KeyStore.jks

Store and import your new certificate:

keytool -import -trustcacerts -alias mydomain -file mydomain.crt -keystore KeyStore.jks

Generate a SSL Certificate (Self Signed)

2019-08-29T08:06:00.000-07:00

Step 1:

openssl genrsa -des3 -out mykey.key 1024

Step 2: Generate a CSR

openssl req -new -key mykey.key -out certificate.csr
Country Name (2 letter code) [GB]: UK
State or Province Name (full name) [Berkshire]:London
Locality Name (eg, city) [Newbury]:London City
Organization Name (eg, company) [My Company Ltd]:Test Corp
Organizational Unit Name (eg, section) []:IT
Common Name (eg, your name or your server's hostname) []:test.abc.com
Email Address []:test@abc.com
Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:

Step 3: Remove the Passphrase from Key

To avoid your Apache or your webserver asking the passphrase every time a reboot is required. you can remove the pass phrase. Please ensure this key file is properly protected to avoid loosing the key through unauthorised access to the server.

cp mykey.key mykey.key.org
openssl rsa -in mykey.key.org -out mykey.key

Step 4: Generate a Self-Signed Certificate

Generate a temporary certificate that is valid for 365 days, :

openssl x509 -req -days 365 -in certificate.csr -signkey mykey.key -out certificate.crt

Importing Certificates in Java Key Store(JKS)

2019-08-29T07:13:00.000-07:00

whenever you are working with Weblogic and want to setup Certificates, you will need to configure the Java Key store, a file where certificates are stored.

You will first needs either a self signed certificate or a external certificate that you have requested through a third party like GlobalSign, etc.

Either way you will get a .crt or .pem file which includes the certificate. Store this certificate in a known location on your server. For example: /opt/certs/

Also note down the keystore location that is currently configured in Weblogic. Note down the full path in Custom Identity Keystore.

Listing of Certificates

keytool -list -keystore /keystore.jks -storepass ***

Importing a single certificate to a keystore

keytool -importcert -file newcert.pem -destkeystore /keystore.jks -deststoretype jks \
    -deststorepass *** -alias

Importing a keystore (PKCS12) to a JKS

keytool -importkeystore -srckeystore cert-key.p12 -srcstoretype pkcs12 -srcstorepass *** keystore /keystore.jks -deststoretype jks -deststorepass ***

After this has been imported into the JKS, you might need a restart of the application server.

Apache Reverse Proxy Configuration

2019-08-28T04:41:00.000-07:00

To configure a reverse proxy in Apache the conf file should be created in Apache Proxy Conf folder. You can run multiple instances of Apache Proxies on a single Server. In this example, I have created abc.xyz.com.conf file to configure the reverse proxy.
$ pwd
/etc/httpd/conf.proxies.d

$ cat abc.xyz.com.conf

--VirtualHost 63.2.77.187:80
ServerName abc.xyz.com
RedirectPermanent / https://abc.xyz.com/
--/VirtualHost

--VirtualHost 63.2.77.187:443
ServerName abc.xyz.com
ErrorLog logs/proxies/abc.xyz.com.err.log
CustomLog logs/proxies/abc.xyz.com.acc.log combined
--/VirtualHost
--IfModule ssl_module
    SSLEngine on
    SSLProxyEngine on
    SSLCertificateFile cert.d/abc.xyz.com.crt
    SSLCertificateKeyFile cert.d/abc.xyz.com.key
    SSLCertificateChainFile cert.d/abc.xyz.com.IntermediateCA.crt
--/IfModule ssl_module

# Proxy for /
--Location /
    ProxyPass https://redirect_URL.com/
    ProxyPassReverse https://redirect_URL.com/
--/Location
  # Proxy for /world
--Location /world/
    ProxyPass https://redirect_URL2.com/
    ProxyPassReverse https://redirect_URL2.com/
--/Location

Note: The Certificates are placed in the .cert folder. IntermedaiteCA is the rootCA Certificate.

Once configuration is done. use these commands to restart or check status. A stop/start is required post any configuration changes in this file.

sudo systemctl start httpd
sudo systemctl stop httpd
sudo systemctl status httpd

Other details:


SSL Certificates --->	/etc/httpd/cert.d
Proxy Configurations --->	/etc/httpd/conf.proxies.d
Apache Logs --->	/etc/httpd/logs/
Proxy Logs --->	/etc/httpd/logs/proxies/

book of Interest

2016-09-05T06:57:00.000-07:00

1. The Gift of the Holy Cross - by Lino Leitao.

2. Curry: A Tale of Cooks and Conquerors - By Lizzie Collingham

3. Unravelling History: The Village of Arossim, Goa. - By Themistocles D'Silva

4. The History of Mangalore Christain - By Alan Machado

5. Anjuna's Story across the ages, not just hippies - by Dominic PF Fernandes

6. Feasts, Feni and Firecrackers: Life of a Village Schoolboy in Portuguese Goa - by Mel D’Souza

https://www.researchgate.net/publication/200764375_Medieval_Goa_A_Socio-Economic_History

All Goan Books: http://www.goa1556.in/book/

https://books.google.ch/books/about/Historical_Sketch_of_Goa.html?id=FCAdLvuKG3sC&printsec=frontcover&source=kp_read_button&redir_esc=y#v=onepage&q&f=false

https://www.amazon.in/Goa-Daughters-Maria-Aurora-Couto/dp/0143033433#reader_0143033433

https://www.amazon.in/reader/8129129264/ref=rdr_sb_li_sims_1&state=01111#reader_8129129264

2015-03-31T02:31:00.003-07:00

OBIA Installation Guide Shahed Munir (Deliver BI): A very good Guide to OBIA Setup

https://app.box.com/shared/7q0gavzd63

2015-03-31T02:25:00.002-07:00

OBIA Quick Reference Guide: A presentation by Kevin McGinley (kevin.mcginley@accenture.com)

https://s3.amazonaws.com/rmc_docs/biforum2013_slides/mcginley_biapps.pdf

Oracle AIM Documentation (BRDs and MDs)

2015-03-10T06:23:00.001-07:00

http://oracleapps88.blogspot.ch/2011/12/what-is-oracles-application.html

http://oracleapps4u.blogspot.ch/2012/04/md-50-and-md-70-documents-oracle.html

http://myangle.co.uk/index.php/2012/04/oracle-aim-document-names/

Oracle SOA 11g Cluster - By Marc Kalderman

2015-03-05T02:34:00.001-08:00

http://www.namredlek.nl/orasoa/InstallSOASuite11gOnCluster_v1.pdf

Oracle Cold Failover Solution - By Marc Kalderman

2015-03-05T02:28:00.003-08:00

http://orasoa.blogspot.ch/2009/09/cold-failover-contingency-server.html

Oracle High Availability Best Practice Guides

2015-03-05T02:24:00.000-08:00

http://www.oracle.com/technetwork/database/features/availability/fusion-middleware-maa-155387.html

MAA Best Practices - Oracle Fusion Middleware

Oracle WebLogic Server
	Backup and Recovery Scenarios for Oracle WebLogic Server: 10.3
	Oracle WebLogic Server and Oracle Database: Oracle Integrated Maximum Availability Solutions
	Oracle WebLogic on Shared Storage: Best Practices

Oracle Identity Management MAA Best Practices
	Oracle Identity Management 11.1.2 - Enterprise Deployment Blueprint

Oracle Fusion Middleware MAA Best Practices
	Oracle RAC Database Aware Applications - A Developer’s Checklist
	High Availability Patching for Oracle Fusion Middleware
	Oracle Fusion Middleware HA Transformations: 11g
	Best Practices for Oracle WebCenter Custom Portal Apps in an Enterprise Topology
	Best Practices for Oracle FMW Webcenter Portal 11g Multi Data Center Deployment
	SOA 11g Database Growth Management Strategy
	Oracle WebLogic on Shared Storage: Best Practices
	Oracle 11g Fusion Middleware Lifecycle Management Using NetApp Technologies
	Best Practices for Oracle Fusion Middleware SOA 11g Multi Data Center Active-Active Deployment
	Oracle Fusion Middleware SOA 11g with Oracle Database Real Application Clusters Assessment
	Oracle Fusion Middleware SOA 11g High Availability Assessment
	Oracle Fusion Middleware SOA 11g Release 1: Using Secure Files

Oracle Fusion Middleware 11g High Availability and Enterprise Deployment Guide
	Oracle Fusion Middleware 11g High Availability Guide
	Oracle Fusion Middleware 11g Backup and Recovery
	Enterprise Deployment Guide for Oracle WebCenter Portal 11g
	Enterprise Deployment Guide for Oracle WebCenter Content 11g
	Enterprise Deployment Guide for Oracle SOA Suite 11g
	Enterprise Deployment Guide for Oracle Business Intelligence 11g
	Enterprise Deployment Guide for Oracle Portal 11.1.1.2
	Enterprise Deployment Guide for Oracle Forms, Reports and Discoverer 11.1.1.2

Oracle Fusion Middleware Disaster Recovery
	Oracle Site Guard
	Oracle Fusion Middleware Disaster Recovery Guide
	Automating Disaster Recovery using Oracle Site Guard for Oracle Exalogic with Exadata Database Machine
	Oracle Fusion Middleware Disaster Recovery using Oracle's Sun ZFS Storage Appliance
	Disaster Recovery Solution for Oracle Fusion Middleware 11g on Linux and NetApp Storage
	Oracle Fusion Middleware 11g Disaster Recovery Using HP Blade Servers and HP EVA Storage
	Oracle Fusion Middleware Disaster Recovery Solution Using HP EVA Storage
	Disaster Recovery Guide: Oracle SOA Suite 10g on Oracle WebLogic Server

Oracle Application Server 10g Release 4
	Oracle Application Server Enterprise Deployment Guide 10g Release 4 (10.1.4.0.1) (EDG - J2EE, EDG - OAM)
	Oracle Application Server High Availability Guide 10g (10.1.4.0.1)

Oracle Application Server 10g Release 3
	Deploying Oracle Business Intelligence Enterprise Edition with Oracle Active Data Guard
	Enterprise Deployment Guide for Oracle SOA Suite 10.1.3.4 on Oracle WebLogic Server 9.2
	Oracle Application Server Enterprise Deployment Guide 10g Release 3 (10.1.3.3.0) (EDG - SOA)
	Oracle Application Server Disaster Recovery Guide 10g Release 3 (10.1.3.3.0)
	Oracle Application Server Enterprise Deployment Guide10g Release 3 (10.1.3.2.0) (EDG - Web Center)
	Oracle Application Server High Availability Guide10g Release 3 (10.1.3.2.0)
	Oracle Application Server Enterprise Deployment Guide10g Release 3 (10.1.3.1.0) (EDG -SOA))
	Oracle Application Server High Availability Guide10g Release 3 (10.1.3.1.0)
	Oracle Business Intelligence Enterprise Edition Deployment Guide 10.1.3.2
	Oracle J2EE State Replication Guidelines and Best Practices
	Oracle SOA Suite XA and Oracle RAC Database Configuration Guide

Oracle Application Server 10g Release 2
	Oracle Application Server 10g High Availability Guide (10.1.2.0.2)
	Oracle Application Server Enterprise Deployment Guide 10g Release 2 (10.1.2) (EDG - IDM)
	Oracle Application Server 10g R2 HA Best Practices

Oracle Application Server 10g
	Oracle Application Server 10g Infrastructure Highly Available Architectures
	Highly Available Distributed Identity Management
	Highly Available Identity Management Deployment Example - Rack Mounted Identity Management
	Highly Available Identity Management Deployment Example - Cold Failover Cluster Identity Management
	Oracle9i Application Server Cold Failover Cluster Infrastructure Upgrade to Oracle Application Server 10g Cold Failover Cluster Infrastructure
	Transformation From A Single Host Oracle Application Server Infrastructure To An Oracle Application Server 10g Cold Failover Cluster Infrastructure

When OSB, ESB or BPEL

2015-02-25T06:00:00.001-08:00

Note: Article is taken from https://blogs.oracle.com/fmwsoa/entry/oracle_soa_suite_bpel_and

Oracle SOA Suite-BPEL and OSB

By srkastur on Jan 12, 2012

In my role as a presales consultant,I often get questions from customers on the specifics of Oracle SOA Suite and the individual components and their role within the larger spectrum of the overarching SOA Suite.

One of the most common questions is about the role of Oracle Service Bus and how does it differ from Mediator or ESB and BPEL?

To answer this,we first have to understand some history about the evolution of the Oracle SOA 11g stack of solutions.

From the above timeline,we can see that post the BEA acquisition ,the release of SOA Suite 11g in 2009 included the Oracle Service Bus.

The 10gR3 release included the ESB which has evolved in to the Mediator in the 11g release.

From the Oracle data sheets:

OSB is a 'A proven, lightweight integration Enterprise Service Bus (ESB) specifically designed for the task of integrating, virtualizing, and managing services in a shared services infrastructure, Oracle Service Bus allows you to achieve value more quickly with simple, code-free, configuration-based service integration'

and

'Oracle BPEL (Business Process Execution Language) Process Manager is a tool for designing and running business processes. This product provides a comprehensive,standards-based and easy to use solution for creating, deploying and managingcross-application business processes with both automated and human workflow steps – all in a service-oriented architecture'

In simpler terminology:

If the primary requirement is for a solutions to accomplish content based routing,transformation,message validations,enrichments and the integration is enterprise wide and features like message throttling,service virtualization,Reliable messaging are important,the Oracle Service Bus is a great fit .

If the requirement is for a solution to design, manage and run business processes which are stateful with functionalities like Human Workflow,Business Rules,monitoring and management and composite service implementations,the choice should be BPEL.

In reality ,most of the requirements are a combination of both of the above and a pattern of using OSB in conjunction with SOA /BPEL has emerged.

The rule of thumb is summarized in below table:

Oracle BPEL	Oracle Service Bus
Stateful and long running processes	Stateless messaging capablities
Service Orchestration	Service virtualization,message throttling,configuration based service configuration,Service pooling.
Composite implementation	Message validation,content based routing,transformation.
Integration of Rules and Human Workflow	XQuery and XSLT based message transforms.

Mediator has replaced the old ESB solution in SOA 10g-it is essentially installed as part of the SCA composite.Primary function of the mediator is to serve as an intermediary bus within the composite components.

Below is a table summarizing key differences between Mediator and OSB:

Mediator	Oracle Service Bus
Light weight intra composite mediation	Larger,more heavy weight inter composite enterprise service 'Bus'
Domain Value mapping and Xref(cross referencing ) support.	Serves as a logical proxy to physical services effectively providing service vitualization
Capablity to create data type assertions in XML trees.	Message throttling,service pooling and reliable messaging
Message transformation using XSLT.	Message transformation using XQuery and XSLT.
Development within JDeveloper	Eclipse or web console based development.

It is also intresting to note that there are potential areas where all three components offer some overlapping functionality namely:

Message Routing
Message Filter
XSLT transformation
Message validation
Asynchronous Messaging

In conclusion,it would be wise to analyze the requirements of a business problem thoroughly before choosing one over the other and in most cases the solution is a combination of the OSB,Mediator and BPEL.

Testing SMTP on UNIX and Windows

2014-03-10T09:06:00.000-07:00

On Windows:

Open a command Prompt and follow the below test.

telnet smtp-test1.domain.net 25

220 zuq60i-8841.domain.net ESMTP Sendmail ready

helo smtp-test1.domain.net

250 zuq60i-8841.domain.net Hello server1.com [169.56.0.219], pleased to meet you

MAIL FROM: test@domain.com

250 2.1.0 test@domain.com... Sender ok

RCPT TO:xyz@domain.com

250 2.1.5 xyz@domain.com... Recipient ok

DATA

354 Enter mail, end with "." on a line by itself

From: test@domain.com

To:xyz@domain.com

Subject: Testing ET SMTP Server

Please return the email to me at xyz1@domain.com

I’m currently testing the SMTP server.

Thanks,

Joel

250 2.0.0 s2ACefbM021550 Message accepted for delivery

Note: All red marked text need to be entered during testing. The Mail From address is the one registered during the SMTP mailbox configuration

On Unix:

$ echo "Subject: Send mail test" | /usr/lib/sendmail -v -f test@domain.com xyz1@domain.com

xyz1@domain.com... Connecting to [127.0.0.1] via relay...

220 usl20030123.domain.com; Fri, 15 Nov 2013 08:44:21 -0500

>>> EHLO usl20030123.am.hedani.net

250-NXHOST.NXDOMAIN Hello localhost.localdomain [127.0.0.1], pleased to meet you

250-ENHANCEDSTATUSCODES

250-PIPELINING

250-8BITMIME

250-SIZE 10485760

250-DSN

250-DELIVERBY

250 HELP

>>> MAIL From:<test@domain.com> SIZE=24

250 2.1.0 <test@domain.com>... Sender ok

>>> RCPT To:<xyz1@domain.com>

>>> DATA

250 2.1.5 <xyz1@domain.com>... Recipient ok

354 Enter mail, end with "." on a line by itself

>>> .

250 2.0.0 rAFDiLlP027717 Message accepted for delivery

xyz1@domain.com... Sent (rAFDiLlP027717 Message accepted for delivery)

Closing connection to [127.0.0.1]

>>> QUIT

221 2.0.0 NXHOST.NXDOMAIN closing connection

Useful OBIEE Links:

2014-02-10T10:26:00.001-08:00

Based on your local environment setup,some may not be accessible.
http://hostname:7001/console
      access Administran Server
http://hostname:7001/em
        Fusion Middleware Control (FMW)
http://hostname:9704/analytics
      verify the status of bi_server1.
http://hostname:9704/analytics/saw.dll?IBotSummary
      create agents
http://hostname:9704/analytics/saw.dll?bipublisherEntry&Action=new&itemType=.xdm
      create a new datamodel for BI Publisher
http://hostname:9704/analytics/saw.dll?bieehome
      access home page
http://hostname:9704/analytics/saw.dll?Admin
     Administration Page
http://hostname:9704/analytics/saw.dll?ManageGroups
      Manage catalog groups
http://hostname:9704/analytics/saw.dll?Sessions
      Manage sessions or for killing a session
http://hostname:9704/analytics/saw.dll?ManageIBotSessions
      Manage Agent sessions
http://hostname:9704/analytics/saw.dll?bipublisherEntry&Done=%2fanalytics%2fsaw.dll%3fAdmin&Action=admin
      Manage BI Publisher previleges
http://hostname:9704/analytics/olh/l_en/biee0194.htm
      launch help documents
http://hostname:9704/analytics/saw.dll?catalog&action=searchpanel&type=all
      perform Catalog search
http://hostname:9704/analytics/saw.dll?perfmon
      view Performance related metrics
http://hostname:9704/analytics/saw.dll?PrivilegeAdmin
      Manage various permissions with in analytics
http://hostname:9704/wsm-pm
      verify the status of Web Services Manager.
http://hostname:9704/xmlpserver
      accesss Oracle BI Publisher application.
http://hostname:9704/ui
      Oracle Real-Time Decisions application.
http://hostname:9704/bioffice/about.jsp
      verify the status of the Oracle BI for Microsoft Office application.
http://hostname:9704/bicomposer
      verify the status of the Oracle BI Composer application, if this link throw error implies bi composer is not configured.
http://slc01egt.us.oracle.com:9704/analytics/saw.dll?wsdl
                                        access web services.

How mIgrate OBIEE 11g Roles and Application Security from Dev to PROD

2014-02-10T10:21:00.003-08:00

Stage the system jazn data xml file from Dev and PROD in a temporary location respectively as shown below

/u01/obiee/stage/dev
/u01/obiee/stage/prod

Then also make a jps-config-policy.xml file as below in the stage direcry. Update the Location respectively and save the file

--?xml version="1.0" encoding="UTF-8" standalone='yes'?>
--jpsConfig xmlns="http://xmlns.oracle.com/oracleas/schema/11/jps-config-11_1.xsd"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://xmlns.oracle.com/oracleas/schema/11/jps-config-11_1.xsd"
schema-major-version="11" schema-minor-version="1">
--!-- This property is for jaas mode. Possible values are "off", "doas" and "doasprivileged" -->
--property name="oracle.security.jps.jaas.mode" value="off"/>
--propertySets>
--!-- SAML Trusted Issuer -->
--propertySet name="saml.trusted.issuers.1">
--property name="name" value="www.oracle.com"/>
--/propertySet> --/propertySets>
--serviceProviders>
--serviceProvider type="POLICY_SRE" name="policysre.xml.provider" class="oracle.security.jps.internal.policysre.xml.XmlPolicySreProvider"> --description>XML-based PolicySre Provider--/description> --/serviceProvider> --/serviceProviders>
--serviceInstances>
--!-- JPS XML Policy Sre Service Instance -->
--serviceInstance provider="policysre.xml.provider" location="/u01/obiee/stage/dev/system-jazn-data.xml" name="srcpolicysre.xml">
--description>File Based Policy Sre Service Instance--/description>
--/serviceInstance>
--serviceInstance provider="policysre.xml.provider" location="/cs/obiee/ial/stage/prod/system-jazn-data.xml" name="policysre.xml">
--description>File Based Policy Sre Service Instance--/description>
--/serviceInstance>
--/serviceInstances>
--jpsContexts default="default">
--!-- This is the default JPS context. All the mendary services and Login Modules must be configured in this default context -->
--jpsContext name="sourceFileSre">
--serviceInstanceRef ref="srcpolicysre.xml"/>
--/jpsContext> --jpsContext name="targetFileSre">
--serviceInstanceRef ref="policysre.xml"/>
--/jpsContext>
--/jpsContexts>
--/jpsConfig>
~

Now source the WLST : /middlewarehome/Oracle_BI1/common/bin
wlst.sh
migrateSecuritySre(type="appPolicies", srcApp="obi", configFile="/u01/obiee/stage/jps-config-policy.xml", src="sourceFileSre", dst="targetFileSre", overWrite="false")
Ignore any Warnings.
The prod (system-jazn-data.xml) file will be updated with the new roles from Dev (/u01/obiee/stage/prod).
Take this file and deploy in actual direcry in Prod.

How to check Ports assigned to Program in Windows

2013-12-18T02:29:00.002-08:00

To check the ports currently assigned in Windows. Go to C:\Windows\System32\drivers\etc directory and Open the file Services. This file has a listing of all services and the ports assigned to each service.

Example File:

# Copyright (c) 1993-2004 Microsoft Corp.
#
# This file contains port numbers for well-known services defined by IANA
#
# Format:
#
# / [aliases...]   [#]
#
echo                7/tcp
echo                7/udp
discard             9/tcp    sink null
discard             9/udp    sink null
systat             11/tcp    users                  #Active users
systat             11/udp    users                  #Active users
daytime            13/tcp
daytime            13/udp
qotd               17/tcp    quote                  #Quote of the day
qotd               17/udp    quote                  #Quote of the day
chargen            19/tcp    ttytst source          #Character generator
chargen            19/udp    ttytst source          #Character generator
ftp-data           20/tcp                           #FTP, data
ftp                21/tcp                           #FTP. control
ssh                22/tcp                           #SSH Remote Login Protocol

Master Note for OBIEE 11G Patch Releases

2013-12-06T09:00:00.003-08:00

OBIEE 11g: Required and Recommended Bundle Patches and Patch Sets (Doc ID 1488475.1)

Repoint OBIEE 11G to new RCU

2013-11-13T05:50:00.001-08:00

1. Login in to the weblogic console, navigate from left menu, services --> datasources and change all datasources to point to new DB from the list

2. Log in to EM, Then go to Business Intelligence folder à coreapplication àGo to the Deployment tab and then to Scheduler tab. Change the Datasource.

Finally you can check in the system_registry table if any changes are required (Don’t think anything is required here) But will be good to compare old and new table.

Now restart all services including Admin Server.

External LDAP user for Weblogic Administration

2013-11-13T05:29:00.002-08:00

How to Configure Users from an External LDAP for WebLogic Administration Purposes (Doc ID 1384908.1)

OBIEE 11g SSL/SSO/LDAP Notes

2013-11-13T05:20:00.002-08:00

OBIEE 11g: Authentication: Errors and Configuration Issues (Doc ID 1472856.1) - Master Note

OBIEE11g - SSL LDAP/ADSI Authentication Setup and Configuration (Doc ID 1326641.1)

OBIEE 11g: How To Setup ADSI LDAP Security Provider (Doc ID 1273961.1)

OBIEE 11g: Configuring Authentication and SSO with Active Directory and Windows Native Authentication (Doc ID 1274953.1)

How To Configure OBIEE 11g To Authenticate Using a Database Identity Store (SQL Authenticator) (Doc ID 1338007.1)

OBIEE11g: SSL Setup and Configuration (Doc ID 1326781.1)

NOTE:1390127.1 - OBIEE 11g: How To Check each Configuration Step when Configuring Authentication and SSO with Active Directory and Windows Native Authentication.

Configuring External LDAP Providers with "iplanet Directory Server" (Doc ID 352036.1)

Weblogic Server Not Closing LDAP (iPlanet) Connection (Doc ID 1308807.1)

Troubleshooting LDAP Issues Support Pattern (Doc ID 1077534.1)

How to Configure Users from an External LDAP for WebLogic Administration Purposes (Doc ID 1384908.1)

Capture top 10 cpu and memory Utilizing Processes when cpu reaches threshold

2013-10-24T15:28:00.000-07:00

#!/bin/sh

# This script will check for load above 80% and notify the support admin team as per the email define in TO varaible.

DATE=`date +%y%m%d-%H%M%S`

# Check the Load on the host

if [ `uptime | awk '{ print$10 }' | cut -d. -f1` -gt 80 ];

then

echo "============================================" >> /tmp/CPUload_$DATE

# Get a list of top 10 processes currently utilising the most CPU.

echo "List of Top Process:" /tmp/CPUload_$DATE

echo " " >> /tmp/CPUload_$DATE

echo " " >> /tmp/CPUload_$DATE

`ps -eo pcpu,pid,user,args | sort -k 1 -r | head -10 >> /tmp/CPUload_$DATE `

# Alert Support personnel about CPU as well the top 10 processes using most CPU

echo " " >> /tmp/CPUload_$DATE

echo " " >> /tmp/CPUload_$DATE

echo "List of Top 10 Mmemory Consuming Processes" >> /tmp/CPUload_$DATE

echo " " >> /tmp/CPUload_$DATE

echo " " >> /tmp/CPUload_$DATE

`ps axo %mem,pid,euser,cmd | sort -nr | head -n 10 >> /tmp/CPUload_$DATE `

echo " " >> /tmp/CPUload_$DATE

echo " " >> /tmp/CPUload_$DATE

echo "Load averages during this time" >> /tmp/CPUload_$DATE

echo " " >> /tmp/CPUload_$DATE

echo " " >> /tmp/CPUload_$DATE

uptime >> /tmp/CPUload_$DATE

echo " " >> /tmp/CPUload_$DATE

echo " " >> /tmp/CPUload_$DATE

free -m >> /tmp/CPUload_$DATE

else

mem=`free -b | awk '{ print$4}'`

echo $mem | cut -c7-

mem1=`echo $mem | cut -c7- `

x1=`echo $mem1 | cut -d " " -f1`

x2=`echo $mem1 | cut -d " " -f2`

x3=`echo $mem1 | cut -d " " -f3`

free=`expr $x1 + $x2`

if [ $free -lt 512000000 ];

then

# Get a list of top 10 processes currently utilising the most CPU.

echo "List of Top Process:" >> /tmp/MemLoad_$DATE

echo " " >> /tmp/MemLoad_$DATE

echo " " >> /tmp/MemLoad_$DATE

`ps -eo pcpu,pid,user,args | sort -k 1 -r | head -10 >> /tmp/MemLoad_$DATE `

# Alert Support personnel about CPU as well the top 10 processes using most CPU

echo " " >> /tmp/MemLoad_$DATE

echo " " >> /tmp/MemLoad_$DATE

echo "List of Top 10 Mmemory Consuming Processes" >> /tmp/MemLoad_$DATE

echo " " >> /tmp/MemLoad_$DATE

echo " " >> /tmp/MemLoad_$DATE

`ps axo %mem,pid,euser,cmd | sort -nr | head -n 10 >> /tmp/MemLoad_$DATE `
echo " " >> /tmp/MemLoad_$DATE

echo " " >> /tmp/MemLoad_$DATE

echo "Load averages during this time" >> /tmp/MemLoad_$DATE

echo " " >> /tmp/MemLoad_$DATE

echo " " >> /tmp/MemLoad_$DATE

uptime >> /tmp/MemLoad_$DATE

echo " " >> /tmp/MemLoad_$DATE

echo " " >> /tmp/MemLoad_$DATE

free -m >> /tmp/MemLoad_$DATE

else

continue

fi

fi

find '/tmp' -name '/tmp/CPUload*' -mtime +3 -exec rm {} \;

find '/tmp' -name '/tmp/MemLoad*' -mtime +3 -exec rm {} \;

exit

OBIEE 11g Security Articles from RittManmead Consulting

2013-10-02T07:06:00.002-07:00

http://www.rittmanmead.com/2012/03/obiee-11g-security-week-managing-application-roles-and-policies-and-managing-security-migrations-and-deployments/

http://www.rittmanmead.com/2012/03/obiee-11g-security-week-subject-area-catalog-and-functional-area-security-2/

http://www.rittmanmead.com/2012/03/obiee-11g-security-week-row-level-security/

http://www.rittmanmead.com/2012/03/obiee-11g-security-week-connecting-to-active-directory-and-obtaining-group-membership-from-database-tables/

http://www.rittmanmead.com/2010/10/obiee-11gr1-security-explained-an-11g-security-overview/

http://www.rittmanmead.com/2010/10/obiee-11gr1-security-explained-working-with-the-default-security-configuration/

WLST snippets to Add Remove users in Weblogic

2013-10-02T06:29:00.000-07:00

Put below code is .py script.
User-group.txt and RemoveUsers.txt has lines like
user email/Description group
user1 user1@gmail.com Area_manager

To Add Users with Groups:

for line in open("D:\data\ImportUser\user-groups.txt"):
    line = line.strip()
    if len(line) != 0:
       it=line.split(',')
       print 'Add User ========== user:', it[0], ' desc:', it[1], ' group:', it[2]
       if atnr.userExists(it[0]) == 0:
          print '   create user:', it[0]
          atnr.createUser(it[0],password,it[1])
       if atnr.isMember(it[2],it[0],true) == 0:
          print '   add group :', it[2], 'for user', it[0]
          atnr.addMemberToGroup(it[2],it[0])
       else:
            print '   User :', it[0], 'is already member of group', it[2]

To Remove Users:

for line in open("D:\data\RemoveUsers\RemoveUsers.txt"):
    line = line.strip()
    if len(line) != 0:
       it=line.split(',')
       print 'Remove Group ========== user:', it[0], 'group', it[2]
       if atnr.isMember(it[2],it[0],true) != 0:
          print '   remove group :', it[2], 'for user', it[0]
          atnr.removeMemberFromGroup(it[2], it[0])
       else:
          print '   User :', it[0], 'is not member of group', it[2]

Similar Other functions are:

atnr.createGroup(group,groupcomment)
atnr.createUser(user,password,user)

WLST for adding and removing users in EM

2013-10-02T05:36:00.000-07:00

/u01/obiee/middlewarehome/Oracle_BI1/common/bin$ ./wlst.sh (Sources the enviroment and required libraries for opss)

Initializing WebLogic Scripting Tool (WLST) ...
Welcome to WebLogic Server Administration Scripting Shell
Type help() for help on available commands
wls:/offline> connect('biadmin','XXXXXXXXX','localhost:29000')
Connecting to t3://localhost:29000 with userid biadmin ...
Successfully connected to Admin Server 'AdminServer' that belongs to domain 'bifoundation_domain'.
Warning: An insecure protocol was used to connect to the
server. To ensure on-the-wire security, the SSL port or
Admin port should be used instead.
wls:/bifoundation_domain/serverConfig> listAppRoles("obi")
Location changed to domainRuntime tree. This is a read-only tree with DomainMBean as the root.
For more help, use help(domainRuntime)
[ [Principal Clz Name : oracle.security.jps.service.policystore.ApplicationRole, Principal Name : BISystem, Type : APP_ROLE], Display Name : BI System Role, Description : null, Guid : F224900024E511E3BF8DAD4CACA361BB]
[ [Principal Clz Name : oracle.security.jps.service.policystore.ApplicationRole, Principal Name : BIAdministrator, Type : APP_ROLE], Display Name : BI Administrator Role, Description : null, Guid : F225053024E511E3BF8DAD4CACA361BB]
[ [Principal Clz Name : oracle.security.jps.service.policystore.ApplicationRole, Principal Name : BIAuthor, Type : APP_ROLE], Display Name : BI Author Role, Description : null, Guid : F225053124E511E3BF8DAD4CACA361BB]
[ [Principal Clz Name : oracle.security.jps.service.policystore.ApplicationRole, Principal Name : BIConsumer, Type : APP_ROLE], Display Name : BI Consumer Role, Description : null, Guid : F225053224E511E3BF8DAD4CACA361BB]

wls:/bifoundation_domain/serverConfig> grantAppRole('obi','BIAdministrator','weblogic.security.principal.WLSUserImpl','User1')
Already in Domain Runtime Tree

wls:/bifoundation_domain/serverConfig> listAppRoleMembers('obi','BIAdministrator')
Already in Domain Runtime Tree
[Principal Clz Name : weblogic.security.principal.WLSGroupImpl, Principal Name : BIAdministrators, Type : ENT_ROLE]
[Principal Clz Name : weblogic.security.principal.WLSUserImpl, Principal Name : User1, Type : ENT_USER]
[Principal Clz Name : weblogic.security.principal.WLSUserImpl, Principal Name : User2, Type : ENT_USER]
[Principal Clz Name : weblogic.security.principal.WLSUserImpl, Principal Name : User3, Type : ENT_USER]
[Principal Clz Name : weblogic.security.principal.WLSUserImpl, Principal Name : User4, Type : ENT_USER]

wls:/bifoundation_domain/serverConfig> revokeAppRole('obi','BIAdministrator','weblogic.security.principal.WLSUserImpl','User1')
Already in Domain Runtime Tree
wls:/bifoundation_domain/serverConfig> revokeAppRole('obi','BIAdministrator','weblogic.security.principal.WLSUserImpl','User2')
Already in Domain Runtime Tree
wls:/bifoundation_domain/serverConfig> grantAppRole('obi','BIAdministrator','weblogic.security.principal.WLSUserImpl','User1')
Already in Domain Runtime Tree
wls:/bifoundation_domain/serverConfig> exit ()

For More Info: Refer to section 9.3 Managing Application Policies with OPSS Scripts (Oracle® Fusion Middleware Application Security Guide
11g Release 1 (11.1.1)