Andreas' Adventures

In another posting I described how to edit the system-jazn-data.xml in order to create a user. To my astonishment there seems to be a possibility to create these users using the Application Server Control. Here are the steps: In the ASC cluster topology click on the OC4J that contains the javasso. Click on Applications Select javasso Click on the module javasso-web Click on Security provider Select Realms In the realm jazn.com click on the number in the users column. In this screen you can create users!

In AS 10.1.3.x Oracle came up with the JavaSSO. Seems to be (from a high level perspective) a poor man's version of the SSO from the AS 10.1.2.x. Having said this it strikes me how little documentation is available for this feature. But we're explorers, aren't we? JavaSSO is based on a file based security provider. The two main files are: - jazn.xml - system-jazn-data.xml Both exist in the $OH/j2ee/ directory. This means that if you have more than one OC4J instance you need to edit both. The most basic task is to add a user. You can - of course try to do this by editing the xml files, but luckily Oracle provides the jazn.jar tool. Make sure that you use the correct java executable and start it: java -jar jazn.jar -adduser jazn.com andreas welcome1 You will be asked for the AbstractLoginModule username (oc4jadmin) and its password. Now we have a user but usually this has to be added to a role before it can do something useful: java -jar jazn.jar -grantrole users jazn.com an...

This is an error I made and I thought sharing this will prevent other from searching in the wrong direction (as I did). When installing the SOA Suite you might want to integrate this with the OID. However there is a small problem when during the setup of the SOA Suite two OC4J's are created. You will have oc4j_home and oc4j_soa for example. When you integrate the OID into the SOA Suite you will need to manipulate the jazn.jar file in the oc4j configuration directory. As you have two oc4j's you need to copy the jazn.xml to the respective directories - otherwise you will get to the SSO page but will never be able to log in.