06.config.xml

●構成ウィザードで構築後

[weblogic@rhel71db config]$ cat config.xml

<?xml version="1.0" encoding="UTF-8"?>

<domain xsi:schemaLocation="http://xmlns.oracle.com/weblogic/security/wls http://xmlns.oracle.com/weblogic/security/wls/1.0/wls.xsd http://xmlns.oracle.com/weblogic/domain http://xmlns.oracle.com/weblogic/1.0/domain.xsd http://xmlns.oracle.com/weblogic/security http://xmlns.oracle.com/weblogic/1.0/security.xsd http://xmlns.oracle.com/weblogic/security/xacml http://xmlns.oracle.com/weblogic/security/xacml/1.0/xacml.xsd" xmlns="http://xmlns.oracle.com/weblogic/domain" xmlns:sec="http://xmlns.oracle.com/weblogic/security" xmlns:wls="http://xmlns.oracle.com/weblogic/security/wls" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">

<name>FP</name>

<domain-version>12.2.1.4.0</domain-version>

<security-configuration xmlns:xacml="http://xmlns.oracle.com/weblogic/security/xacml" xmlns:pas="http://xmlns.oracle.com/weblogic/security/providers/passwordvalidator">

<name>FP</name>

<realm>

<sec:authentication-provider xsi:type="wls:default-authenticatorType">

<sec:name>DefaultAuthenticator</sec:name>

</sec:authentication-provider>

<sec:authentication-provider xsi:type="wls:default-identity-asserterType">

<sec:name>DefaultIdentityAsserter</sec:name>

<sec:active-type>AuthenticatedUser</sec:active-type>

<sec:active-type>weblogic-jwt-token</sec:active-type>

</sec:authentication-provider>

<sec:role-mapper xsi:type="xacml:xacml-role-mapperType">

<sec:name>XACMLRoleMapper</sec:name>

</sec:role-mapper>

<sec:authorizer xsi:type="xacml:xacml-authorizerType">

<sec:name>XACMLAuthorizer</sec:name>

</sec:authorizer>

<sec:adjudicator xsi:type="wls:default-adjudicatorType">

<sec:name>DefaultAdjudicator</sec:name>

</sec:adjudicator>

<sec:credential-mapper xsi:type="wls:default-credential-mapperType">

<sec:name>DefaultCredentialMapper</sec:name>

</sec:credential-mapper>

<sec:cert-path-provider xsi:type="wls:web-logic-cert-path-providerType">

<sec:name>WebLogicCertPathProvider</sec:name>

</sec:cert-path-provider>

<sec:cert-path-builder>WebLogicCertPathProvider</sec:cert-path-builder>

<sec:name>myrealm</sec:name>

<sec:password-validator xsi:type="pas:system-password-validatorType">

<sec:name>SystemPasswordValidator</sec:name>

<pas:min-password-length>8</pas:min-password-length>

<pas:min-numeric-or-special-characters>1</pas:min-numeric-or-special-characters>

</sec:password-validator>

</realm>

<default-realm>myrealm</default-realm>

<credential-encrypted>{AES256}ynqtWIvvznIwY69sYGhR3JtcPlZCxj2H1MLffcdmVQElC6xqfbG4qXEUx1j/9w5/rkrHt1t1hrPLInePazinpUJ9UKYQmGj6SBICGU7RqWwl3M92ymlPFzmIfm2uHx/F</credential-encrypted>

<node-manager-username>YI9WCAoteI</node-manager-username>

<node-manager-password-encrypted>{AES256}L4UbgAG9VRyoLyT3DLvBxdiGn+ONhuTKcKUj/foaf74=</node-manager-password-encrypted>

</security-configuration>

<server>

<name>ADMIN_SRV</name>

<ssl>

<name>ADMIN_SRV</name>

<listen-port>7002</listen-port>

</ssl>

<listen-port>8180</listen-port>

<listen-address/>

<server-life-cycle-timeout-val>30</server-life-cycle-timeout-val>

<startup-timeout>0</startup-timeout>

</server>

<server>

<name>MANAGED_SRV</name>

<listen-port>8080</listen-port>

<listen-address/>

<server-life-cycle-timeout-val>30</server-life-cycle-timeout-val>

<startup-timeout>0</startup-timeout>

</server>

<production-mode-enabled>true</production-mode-enabled>

<embedded-ldap>

<name>FP</name>

<credential-encrypted>{AES256}la5XLC9M9DWsn/LKf1g0XSKM1pa7Mf+karnSyhNNpilLXz02t066sBq+4dOI71fR</credential-encrypted>

</embedded-ldap>

<configuration-version>12.2.1.4.0</configuration-version>

<admin-server-name>ADMIN_SRV</admin-server-name>

●WLSTで構築後

[weblogic@rhel71db config]$ cat config_diy.xml

<?xml version='1.0' encoding='UTF-8'?>

<domain xmlns="http://xmlns.oracle.com/weblogic/domain" xmlns:sec="http://xmlns.oracle.com/weblogic/security" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:wls="http://xmlns.oracle.com/weblogic/security/wls" xsi:schemaLocation="http://xmlns.oracle.com/weblogic/security/wls http://xmlns.oracle.com/weblogic/security/wls/1.0/wls.xsd http://xmlns.oracle.com/weblogic/domain http://xmlns.oracle.com/weblogic/1.0/domain.xsd http://xmlns.oracle.com/weblogic/security/xacml http://xmlns.oracle.com/weblogic/security/xacml/1.0/xacml.xsd http://xmlns.oracle.com/weblogic/security/providers/passwordvalidator http://xmlns.oracle.com/weblogic/security/providers/passwordvalidator/1.0/passwordvalidator.xsd http://xmlns.oracle.com/weblogic/security http://xmlns.oracle.com/weblogic/1.0/security.xsd">

<name>FPst</name>

<domain-version>12.2.1.4.0</domain-version>

<security-configuration>

<name>FPst</name>

<realm>

<sec:authentication-provider xsi:type="wls:default-authenticatorType">

<sec:name>DefaultAuthenticator</sec:name>

</sec:authentication-provider>

<sec:authentication-provider xsi:type="wls:default-identity-asserterType">

<sec:name>DefaultIdentityAsserter</sec:name>

<sec:active-type>AuthenticatedUser</sec:active-type>

<sec:active-type>weblogic-jwt-token</sec:active-type>

</sec:authentication-provider>

<sec:role-mapper xmlns:xac="http://xmlns.oracle.com/weblogic/security/xacml" xsi:type="xac:xacml-role-mapperType">

<sec:name>XACMLRoleMapper</sec:name>

</sec:role-mapper>

<sec:authorizer xmlns:xac="http://xmlns.oracle.com/weblogic/security/xacml" xsi:type="xac:xacml-authorizerType">

<sec:name>XACMLAuthorizer</sec:name>

</sec:authorizer>

<sec:adjudicator xsi:type="wls:default-adjudicatorType">

<sec:name>DefaultAdjudicator</sec:name>

</sec:adjudicator>

<sec:credential-mapper xsi:type="wls:default-credential-mapperType">

<sec:name>DefaultCredentialMapper</sec:name>

</sec:credential-mapper>

<sec:cert-path-provider xsi:type="wls:web-logic-cert-path-providerType">

<sec:name>WebLogicCertPathProvider</sec:name>

</sec:cert-path-provider>

<sec:cert-path-builder>WebLogicCertPathProvider</sec:cert-path-builder>

<sec:name>myrealm</sec:name>

<sec:password-validator xmlns:pas="http://xmlns.oracle.com/weblogic/security/providers/passwordvalidator" xsi:type="pas:system-password-validatorType">

<sec:name>SystemPasswordValidator</sec:name>

<pas:min-password-length>8</pas:min-password-length>

<pas:min-numeric-or-special-characters>1</pas:min-numeric-or-special-characters>

</sec:password-validator>

</realm>

<default-realm>myrealm</default-realm>

<credential-encrypted>{AES256}m35lhbxDiLUO/O8uU8lZwAbsjjmcgNh8vRwASYLgMCBVZ1jyYZAHZjpK9RwjR0lCRYAvU8UkmG+brdwlHIlWFyxX2fe3goDEcklXLwT/tC3Ghe6eLJKnQACTOZjOWcNb</credential-encrypted>

<node-manager-username>weblogic</node-manager-username>

<node-manager-password-encrypted>{AES256}1y5J8MnNQJRMOeaOQrRzbWmrlpFL+KL7xObL/8rWL28=</node-manager-password-encrypted>

</security-configuration>

<server>

<name>ADMIN_SRV</name>

<listen-port>8181</listen-port>

<listen-address></listen-address>

<server-life-cycle-timeout-val>30</server-life-cycle-timeout-val>

<startup-timeout>0</startup-timeout>

</server>

<server>

<name>MANAGED_SRV</name>

<listen-port>8081</listen-port>

<listen-port-enabled>true</listen-port-enabled>

<cluster xsi:nil="true"></cluster>

<web-server>

<web-server-log>

<number-of-files-limited>false</number-of-files-limited>

</web-server-log>

</web-server>

<listen-address></listen-address>

<java-compiler>javac</java-compiler>

<client-cert-proxy-enabled>false</client-cert-proxy-enabled>

<server-diagnostic-config>

<wldf-diagnostic-volume>Low</wldf-diagnostic-volume>

</server-diagnostic-config>

</server>

<embedded-ldap>

<name>FPst</name>

<credential-encrypted>{AES256}wTlbm1bdYloCU8U8KjCZLrJIEszvOto4X+g2Hjq4j6jHvIhX0QWmBu8GNkuQxUZO</credential-encrypted>

</embedded-ldap>

<configuration-version>12.2.1.4.0</configuration-version>

<admin-server-name>ADMIN_SRV</admin-server-name>

</domain>