在 WebLogic WLST 离线域创建期间设置域凭据?
我已使用离线 WLST 沿着 readTemplate(template); 成功创建了 WLS 10.3.5 域set("名称","域名"); ...
仍然存在一个细节:我需要将每个域的“凭据”设置为跨所有域的通用随机值,以实现“全局信任”。这是控制台/域/安全/常规/高级/“凭据”背后的设置
问题:我找不到需要为此设置的属性(或其位置?)?
FWIW,我现在在 config.xml 文件级别使用后处理来将加密的通用值字符串注入为
,但我宁愿只通过 WLST 设置它,而不调整结果XML。
提前致谢, 马蒂亚斯
I have successfully created WLS 10.3.5 domains using offline WLST, along the lines of readTemplate(template); set("name","DomainName"); ...
One detail remains: I need to set the "Credential" of each domain to a common random value, across all domains, for "global trust". It's the setting that's behind Console / Domain / Security / General / Advanced / "Credential"
Question: I fail to find the property (or its location?) that one needs to set for this?
FWIW, I use post-processing on config.xml file level now to inject an encrypted common value string as <credential-encrypted>
, but I'd rather just set this via WLST without tweaking the resulting XML.
Thanks in advance,
Matthias
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(3)
我建议您使用 createDomain() 命令,它会很容易工作。
有关更多信息,您可以查看以下链接:
WLST 示例:域迁移变得简单
I suggest you to use createDomain() command it will be much easy to work.
For more you can see the following link:
WLST by Examples: Domain migration made simple
正如您在控制台上告诉您的导航一样,我在 WLST 导航属性位置上发现它位于以下路径中:
wls:/offline/mydomain/SecurityConfiguration/mydomain>ls()
-rw- CredentialEncrypted ?????????
它带有 -rw- 所以你可以更新它,对吗?
希望这会对您有所帮助。
As you told your navigation on the console, I found on WLST navigation property location it is having in the followingpath:
wls:/offline/mydomain/SecurityConfiguration/mydomain>ls()
-rw- CredentialEncrypted ????????
It is with -rw- so you can update it right?
Hope this will help you.
对,这有效。关键是不要在模板上工作,而是从其域目录中读取域。然后它只是设置属性
CredentialEncrypted
:shared_credential
应该是随机的。我使用了新创建的 config.xml 文件的十六进制编码摘要,其中包含足够的随机性。Right, this works. The key is to not work on the template, but to read the doman from its domain directory. Then it's just setting the attribute
CredentialEncrypted
:shared_credential
should be something random. I used a hex-encoded digest of the newly-created config.xml file, which contains enough randomness.