在 WebLogic WLST 离线域创建期间设置域凭据?

发布于 2024-12-15 02:29:46 字数 374 浏览 2 评论 0原文

我已使用离线 WLST 沿着 readTemplate(template); 成功创建了 WLS 10.3.5 域set("名称","域名"); ...

仍然存在一个细节:我需要将每个域的“凭据”设置为跨所有域的通用随机值,以实现“全局信任”。这是控制台/域/安全/常规/高级/“凭据”背后的设置

问题:我找不到需要为此设置的属性(或其位置?)?

FWIW,我现在在 config.xml 文件级别使用后处理来将加密的通用值字符串注入为 ,但我宁愿只通过 WLST 设置它,而不调整结果XML。

提前致谢, 马蒂亚斯

I have successfully created WLS 10.3.5 domains using offline WLST, along the lines of readTemplate(template); set("name","DomainName"); ...

One detail remains: I need to set the "Credential" of each domain to a common random value, across all domains, for "global trust". It's the setting that's behind Console / Domain / Security / General / Advanced / "Credential"

Question: I fail to find the property (or its location?) that one needs to set for this?

FWIW, I use post-processing on config.xml file level now to inject an encrypted common value string as <credential-encrypted> , but I'd rather just set this via WLST without tweaking the resulting XML.

Thanks in advance,
Matthias

如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。

扫码二维码加入Web技术交流群

发布评论

需要 登录 才能够评论, 你可以免费 注册 一个本站的账号。

评论(3

墨小沫ゞ 2024-12-22 02:29:46

我建议您使用 createDomain() 命令,它会很容易工作。

  1. createDomain('/olddoamin/path/template.jar','domainPath','user', 'passwd')

有关更多信息,您可以查看以下链接:
WLST 示例:域迁移变得简单

I suggest you to use createDomain() command it will be much easy to work.

  1. createDomain('/olddoamin/path/template.jar’,’domainPath’,’user’, ‘passwd’)

For more you can see the following link:
WLST by Examples: Domain migration made simple

花期渐远 2024-12-22 02:29:46

正如您在控制台上告诉您的导航一样,我在 WLST 导航属性位置上发现它位于以下路径中:

  1. wls:/offline/mydomain/SecurityConfiguration/mydomain>ls()

    -rw- CredentialEncrypted ?????????

它带有 -rw- 所以你可以更新它,对吗?

希望这会对您有所帮助。

As you told your navigation on the console, I found on WLST navigation property location it is having in the followingpath:

  1. wls:/offline/mydomain/SecurityConfiguration/mydomain>ls()

    -rw- CredentialEncrypted ????????

It is with -rw- so you can update it right?

Hope this will help you.

疧_╮線 2024-12-22 02:29:46

对,这有效。关键是不要在模板上工作,而是从其域目录中读取域。然后它只是设置属性CredentialEncrypted

readDomain(domain_dir)
cd('/SecurityConfiguration/' + 'domain_name)
set('CredentialEncrypted', encrypt(shared_credential,domain_dir))
updateDomain()
closeDomain()

shared_credential应该是随机的。我使用了新创建的 config.xml 文件的十六进制编码摘要,其中包含足够的随机性。

Right, this works. The key is to not work on the template, but to read the doman from its domain directory. Then it's just setting the attribute CredentialEncrypted:

readDomain(domain_dir)
cd('/SecurityConfiguration/' + 'domain_name)
set('CredentialEncrypted', encrypt(shared_credential,domain_dir))
updateDomain()
closeDomain()

shared_credential should be something random. I used a hex-encoded digest of the newly-created config.xml file, which contains enough randomness.

~没有更多了~
我们使用 Cookies 和其他技术来定制您的体验包括您的登录状态等。通过阅读我们的 隐私政策 了解更多相关信息。 单击 接受 或继续使用网站,即表示您同意使用 Cookies 和您的相关数据。
原文