Securing WebLogic Server 12c - Luca Masini - E-Book

Securing WebLogic Server 12c E-Book

Luca Masini

0,0
22,79 €

-100%
Sammeln Sie Punkte in unserem Gutscheinprogramm und kaufen Sie E-Books und Hörbücher mit bis zu 100% Rabatt.

Mehr erfahren.
Beschreibung

Security is a must in modern Enterprise architecture, and WebLogic implements a very complete and complex architecture for configuration and implementation, and we need to deeply know in technologies, terminology and how the security process works between all actors.
Transparent security of your applications and Weblogic infrastructure need a good knowledge of the issues you can incur in this long and error prone configuration process.
"Securing WebLogic Server 12c" will simplify a complex world like WebLogic Security, helping the reader to implement and configure. It's the only fast guide that will let you develop and deploy in a production system with best practices both from the development world and the operation world.
This book will try to make a clear picture of Java EE Security with clean and simple step-by-step examples that will guide the reader to security implementation and configuration
From the concepts of Java EE Security to the development of secure application, from the configuration of a realm to the setup of Kerberos Single Sign on, every concept is expressed in simple terms and surrounded by examples and pictures. Finally, also a way to develop WebLogic Security Providers with Maven, so that you can add the security part of your infrastructure to your enterprise best practices.

Das E-Book können Sie in Legimi-Apps oder einer beliebigen App lesen, die das folgende Format unterstützen:

EPUB
MOBI

Seitenzahl: 113

Veröffentlichungsjahr: 2012

Bewertungen
0,0
0
0
0
0
0
Mehr Informationen
Mehr Informationen
Legimi prüft nicht, ob Rezensionen von Nutzern stammen, die den betreffenden Titel tatsächlich gekauft oder gelesen/gehört haben. Wir entfernen aber gefälschte Rezensionen.



Table of Contents

Securing WebLogic Server 12c
Credits
About the Authors
About the Reviewers
www.PacktPub.com
Support files, eBooks, discount offers and more
Why Subscribe?
Free Access for Packt account holders
Instant Updates on New Packt Books
Preface
What this book covers
What you need for this book
Who this book is for
Conventions
Reader feedback
Customer support
Downloading the example code
Errata
Piracy
Questions
1. WebLogic Security Concepts
General concept of security in Java EE
WebLogic security architecture
Identifying – Subjects, Principals, and Credentials
WebLogic resources
Writing custom providers – MBeans
Authentication Providers
Authentication under WebLogic
MBean and JAAS
Multipart Authentication Provider
Perimeter Authentication
Identity Assertion
Credential Mapper
JASPIC and Java EE
JACC
Summary
2. WebLogic Security Realm
Configuration of local LDAP server: user/roles/lockout
Users and groups
Users section
Groups section
Security role condition
Basic
Date and time-based
Context element
User lockout
Unlocking user
Configuring an external LDAP for Authentication/Authorization
Configuring a new provider
Control Flag
Active Directory provider-specific configuration
Connection
Users
Groups
Static groups
General
Performance options
Principal Validator Cache
Troubleshooting problems
User lockout in an Active Directory context
Using Identity Assertion
Summary
3. Java EE Security with WebLogic
Setting up an Enterprise Maven project
Creating the modules with maven-archetype-plugin
Installing the WebLogic Server and the WebLogic Maven plugin
Configuring wls-maven-plugin into the EAR POM
Split deploy and beabuild-maven-plugin
Launching our Hello Maven and WebLogic world application
Securing the web module
Standard DD mapping
Custom Roles Mapping
Programmatic security
Programmatic security with WebLogic XACML provider
A RESTful and secure EJB component
Bean packaged into the WAR module
Changing Security Identity with RunAs
Securing the EJB module
Summary
4. Creating Custom Authentication Providers with Maven
The Maven project
Creating the Maven project
Dependencies
Reconfiguring standard plugins
Adding WebLogic MBeanMaker to the POM
Defining the MBean with an MDF File
Writing the MBean implementation
Initializing the provider
Implementation of the provider
Custom JAAS LoginModule
The login() method
Lifecycle methods – commit(), abort(), and logout()
A simple SSO JSP
Running the provider
Summary
5. Integrating with Kerberos SPNEGO Identity Assertion
Using Identity Assertion SSO Kerberos in a Microsoft domain
Windows client needs to be in the Active Directory domain
Windows client session needs to be logged in the Active Directory domain
Integrated Windows Authentication
DNS URL entry configuration and SPN definition
Technical Active Directory user
Keytab generation and the krb5 config file
JAAS file creation
WLS init startup arguments configuration
SPNEGO Identity asserter configuration
Debugging issues
Summary
Index

Securing WebLogic Server 12c

Securing WebLogic Server 12c

Copyright © 2012 Packt Publishing

All rights reserved. No part of this book may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written permission of the publisher, except in the case of brief quotations embedded in critical articles or reviews.

Every effort has been made in the preparation of this book to ensure the accuracy of the information presented. However, the information contained in this book is sold without warranty, either express or implied. Neither the authors, nor Packt Publishing, and its dealers and distributors will be held liable for any damages caused or alleged to be caused directly or indirectly by this book.

Packt Publishing has endeavored to provide trademark information about all of the companies and products mentioned in this book by the appropriate use of capitals. However, Packt Publishing cannot guarantee the accuracy of this information.

First published: November 2012

Production Reference: 1201112

Published by Packt Publishing Ltd.

Livery Place

35 Livery Street

Birmingham B3 2PB, UK.

ISBN 978-1-84968-778-2

www.packtpub.com

Credits

Authors

Luca Masini

Rinaldi Vincenzo

Reviewers

Andrea Fiorentini

Michel Schildmeijer

Acquisition Editor

Rukhsana Khambatta

Commissioning Editor

Priyanka Shah

Technical Editor

Dominic Pereira

Copy Editors

Aditya Nair

Alfida Paiva

Project Coordinator

Michelle Quadros

Proofreader

Maria Gould

Indexer

Tejal Daruwale

Production Coordinator

Melwyn D'sa

Cover Work

Melwyn D'sa

Cover Image

Sheetal Aute

About the Authors

Luca Masini is a Senior Software Engineer and Architect who started as a Game Developer for Commodore 64 (Football Manager) and Commodore Amiga (Ken il Guerriero); he soon switched to object-oriented programming and, from its inception in 1995, he was always attracted to the Java language.

He worked on this passion as a consultant for some major Italian banks, developing and integrating major software projects for which he has often taken on the technical leadership role. He adapted Java Enterprise in environments where COBOL was the flagship platform, converting them from mainframe-centric to distributed.

He then shifted his focus to open source, starting from Linux, and then enterprise frameworks, with which he was able to introduce concepts like IoC, ORM, and MVC with minimum impact. He was an early adopter of Spring, Hibernate, Struts, and a whole host of other technologies that in the long run have given his customers a technological advantage and because of which development costs have also lowered.

Lately, however, his attention has been completely directed towards the simplification and standardization of development with Java EE, and for this reason he's now working at the Information and Communications Technology department of a large Italian company to introduce advanced build tools (Maven and Continuous Integration), archetypes of projects, and Agile Development with plain standards.

He has worked on the following books published by Packt Publishing:

Google Web ToolkitSpring Web Flow 2Spring Persistence with Hibernate

Dedicated to my skunk
(Dedicato alla mia puzzola)

Vincenzo Rinaldi was born in Milan, Italy, and continues to live and work there. He has over 10 years of experience with system administration in critical contexts, where he contributes with designing, managing, and supporting internal IT infrastructures. He studies and researches many technologies, products, Operating Systems, and custom implementations on a daily basis to meet the business processes. He works with many suppliers, internal teams, and customer services in a mass retail company and coordinates a team to work in the middleware, Operating Systems, and DB stack.

He is an RHCE Certified Engineer and also has great experience in WebLogic setup and administration, generally in the middleware layer.

You can read more about him on his Linkedin profile at http://www.linkedin.com/in/vincenzorinaldi.

The first big thanks goes to my pregnant wife Nadia and my son Mattia, they have supported me with their energy. One big thanks to my colleague Luca Masini and all those colleagues who supported me in the writing of this book.

About the Reviewers

Andrea Fiorentini graduated in Multimedia Systems and Telecommunications Engineering from the University of Siena in the year 2003. He attended a course for an internship at the company for which he works since June 2004 as a systems engineer and programmer.

The company for which he works is dedicated to providing services to the cooperative credit banks in Italy. He has a sound knowledge of the Oracle database, Application Server (iAS), WebLogic Server, and Business Intelligence software. He has also finished a training course in Oracle named "Developing Oracle Web Services Using Java Technology".

For the last two years he has been the head of the development team at the company that he works for, which specializes in technology-oriented Java using instruments such as GWT+, GXT, and EJB 3.0.

Thank you very much Luca Masini for giving me this opportunity. I'm very glad I helped in the writing of this book.

Michel Schildmeijer was born in the Netherlands, in the hot summer of 1966. He has lived his entire life in the capital, Amsterdam. After middle school, he started studying Pharmacy. After 4 years, he had to fulfill his military duty at the Royal Dutch Air force, where he worked in a pharmacy.

After this period, he got a job as a Quality Inspector at a pharmacy company; but after about two years he switched his job for a position in a hospital pharmacy, where he has worked for over 10 years.

In the meantime, he married his wife, Tamara, and had two kids, Marciano and Robin. His personal life wasn't always that easy, as his wife got extremely ill for a brief period and he had to take the entire responsibility of managing his family. Fortunately, he got plenty of support from his parents-in-law, who took great care of his kids.

While on his pharmacy job, around 1994, he got acquainted with the Medical Information System that was taking care of structuring patients' medical history and other information. This was a system running on HP UNIX, a MUMPS SQL database and text-based terminal. He started learning UNIX and MUMPS to give operational support. By then he became very enthusiastic, so he made a job switch and started working for some IT companies. Around the year 2000, he started using Oracle on a big banking application for settlements and clearance. The system was running on Oracle 7, AIX UNIX, BEA WebLogic, and BEA Tuxedo. This was the first time that he had worked with WebLogic. From then on, he gained more and more specialized knowledge in Middleware and Oracle. He has worked on many projects for the same. Around 2006, he started working on several projects for IBM in the Oracle Middleware team, administering, configuring, and tweaking large Oracle Middleware systems with Oracle SOA Suite, Oracle Portal, Oracle HTTP, and many more.

In 2008, he started working for Randstad Holding, and gained more and more expertise in developing the middleware infrastructure around applications. He began research on migrating the Oracle Application Server 10g and SOA Suite 10g to the 11g platform. Around that same period, Oracle acquired BEA.

From working in Brussels for Belgacom—a large Telco company in Belgium—he started his own as an Oracle Fusion Middleware Architect, for AMIS, an IT company specializing in Oracle and JAVA.

His focus was always on developing the infrastructure for many companies and advising them how to migrate or build a new middleware platform based on the latest 11g techniques. He also became an instructor, teaching all the basics of Oracle WebLogic.

For him, the reason to review this book was to get familiar with the new features in WebLogic 12c, because he thinks it's a great product with a lot of new features, especially the new JAVA EE 6 features and the Exalogic optimizations.

Michel is now working for Qualogy as a member of the Exalogic Squad Team.

I would like to thank my wife, Tamara, whose life is sometimes a difficult struggle. I would also like to thank Janny and Steef, who took care of my kids Marciano and Robin. I owe thanks to my great kids too.

www.PacktPub.com

Support files, eBooks, discount offers and more

You might want to visit www.PacktPub.com for support files and downloads related to your book.

Did you know that Packt offers eBook versions of every book published, with PDF and ePub files available? You can upgrade to the eBook version at www.PacktPub.com and as a print book customer, you are entitled to a discount on the eBook copy. Get in touch with us at <[email protected]> for more details.

At www.PacktPub.com, you can also read a collection of free technical articles, sign up for a range of free newsletters and receive exclusive discounts and offers on Packt books and eBooks.

http://PacktLib.PacktPub.com

Do you need instant solutions to your IT questions? PacktLib is Packt's online digital book library. Here, you can access, read and search across Packt's entire library of books. 

Why Subscribe?

Fully searchable across every book published by PacktCopy and paste, print and bookmark contentOn demand and accessible via web browser

Free Access for Packt account holders

If you have an account with Packt at www.PacktPub.com, you can use this to access PacktLib today and view nine entirely free books. Simply use your login credentials for immediate access.

Instant Updates on New Packt Books

Get notified! Find out when new books are published by following @PacktEnterprise on Twitter, or the Packt Enterprise Facebook page.

Preface

Security is a must in a modern Enterprise infrastructure, and WebLogic implements a very complete and complex architecture for configuration and implementation. That is why it is necessary to deeply know technologies, terminologies, and how the security process works between all actors. Securing WebLogic Server 12c aims to simplify the complex world of WebLogic Security, helping the reader to implement standard Java EE application security, and configuring it inside WebLogic with clean and simple step-by-step examples. This guide will let you develop and deploy in a production system with the best practices, both from the development world and the operation world. From the concepts of Java EE Security to the development of secure applications, from the configuration of a realm to the setup of Kerberos Single Sign-on, every concept is expressed in simple terms and completed by working examples and pictures. Finally, a way to develop WebLogic security providers with Maven is provided, so that you can add the security part of your infrastructure to your enterprise best practices.

What this book covers

Chapter 1, WebLogic Security Concepts, covers the custom concepts and framework that implement security inside the WebLogic server.

Chapter 2, WebLogic Security Realm, will allow you to understand in detail how the internal LDAP works and also explain the necessary configuration. Also explained in this chapter is how an existing LDAP server can be integrated with WebLogic. This chapter includes a complete troubleshooting section that will help you overcome some typical configuration mistakes.

Chapter 3, Java EE Security with WebLogic