Contents 1 Overview 2 Introduction to WLS Management Services iii

Transcription

1 Contents 1 Overview Objectives 1-2 Agenda 1-3 Target Audience 1-4 Course Objectives 1-5 Course Agenda 1-7 Classroom Guidelines 1-9 Course Environment 1-10 Summary 1-11 Practice 1-1 Overview: Obtaining a Grid VM Instance and Accessing Information 1-12 Practice 1-2 Overview: Connecting to Your Allocated Grid VM Instance Introduction to WLS Management Services Objectives 2-2 Agenda 2-3 What Is JMX? 2-4 MBeans 2-5 MBean Server 2-6 The Administration Server MBean Servers 2-7 The Managed Server MBean Server 2-9 Management Services 2-11 Management-Aware Applications 2-12 Section Summary 2-13 Agenda 2-14 JMX Layers 2-15 Instrumentation Layer 2-16 Agent Layer 2-17 Distributed Services Layer 2-18 JMX Layers 2-19 Management Interfaces 2-20 MBeanServerConnection Interface 2-21 Introspection 2-22 Introspection and Indirection 2-23 JMX Notification and Monitoring 2-24 iii

2 JMX Notification Configuration 2-25 Polling with Monitor MBeans 2-26 Creating a Monitor MBean 2-27 Section Summary 2-28 Practice 2-1 Overview: JMX Architecture and MBean Hierarchy 2-29 Summary WebLogic Server and JMX Objectives 3-2 Agenda 3-3 WLS Runtime MBean Lifecycle 3-4 WLS Configuration MBean Lifecycle 3-5 MBean Structure 3-7 MBean Structure Example 3-8 Section Summary 3-10 Agenda 3-11 WebLogic Server Administration Console 3-12 Identifying MBeans Using the Administration Console 3-13 WLS Administration Console and MBean Hierarchies 3-15 Identifying Child MBeans Using the Administration Console 3-16 What Is WLST? 3-18 Simplified Command-Line Access 3-20 Online and Offline Modes 3-21 WLST Navigation 3-22 WLST Navigation Example 3-23 MBean Editing Interface 3-24 WLST Versus the Administration Console 3-26 Accessing MBean Attributes 3-27 MBean Management Using WLST 3-29 Creating a Resource Using WLST 3-31 Deleting a Resource Using WLST 3-32 WLNav 3-33 Deployment 3-34 WLNav Functionality 3-35 Viewing MBeans Using WLNav 3-36 Creating an MBean Instance in WLNav 3-38 Deleting an MBean Instance in WLNav 3-41 WLST and Ant 3-42 Example 1: Calling a WLST Script Using Ant 3-44 Example 2: Calling a WLST Script Using Ant 3-45 Section Summary 3-46 iv

3 Practice 3-1 Overview: Navigating the MBean Hierarchies 3-47 Practice 3-2 Overview: Exploring and Comparing JMX Tools 3-48 Summary WLST Scripting Objectives 4-2 Agenda 4-3 WebLogic Scripting Tool (WLST) 4-4 Starting WLST 4-5 Built on Jython 4-6 Some WLST Commands 4-8 Secure Access 4-10 Section Summary 4-11 Agenda 4-12 Modes of Operation: Interactive 4-13 Modes of Operation: Scripted 4-14 Modes of Operation: Embedded 4-15 Section Summary 4-16 Agenda 4-17 Jython Highlights 4-18 A Jython Example 4-19 Jython Basics: Indentation and Definitions 4-20 Booleans, Loops, and Conditional Logic 4-21 Jython Basics: An Example 4-22 Jython Basics: Variables 4-23 File I/O Syntax 4-24 Jython Imports 4-25 Import Example 4-26 Imports and Environment Variables 4-27 Import Java Classes 4-28 Java Class Import Example 4-29 Namespace Clashes 4-31 Java, Jython, JMX, and WLST Combined 4-32 Jython: Additional Tips and Tricks 4-33 Section Summary 4-34 Practice 4-1 Overview: Using Jython, Java, and WLST 4-35 Agenda 4-36 Generating Jython Scripts 4-37 Administration Console WLST Recorder 4-38 Manual Recorder Control 4-39 Automatic Recorder Control 4-40 v

4 WLST Recorder Preferences 4-41 Generated Script Example 4-43 configtoscript Command 4-44 Other Commonly Used MBeans 4-45 Section Summary 4-46 Practice 4-2 Overview: WLST Scripting 4-47 Summary Oracle-Supplied WLST Solutions Objectives 5-2 Agenda 5-3 Ed.Lab Example Scripts 5-4 Best Practices 5-6 Section Summary 5-8 Agenda 5-9 Scripts Provided with WebLogic Server 5-10 Sample Online Scripts 5-11 Sample Offline Scripts 5-13 Section Summary 5-14 Agenda 5-15 WLST Documentation Listings 5-16 Navigating and Editing MBeans 5-17 Automating WebLogic Server Administration Tasks 5-18 Section Summary 5-21 Agenda 5-22 Project Background 5-23 Demonstrated Techniques 5-24 Section Summary 5-26 Practice 5-1 Overview: Creating and Monitoring a Domain Using Scripts 5-27 Practice 5-2 Overview: Changing Configuration Using Scripts 5-28 Summary Tailoring Scripts Objectives 6-2 Agenda 6-3 Domain Creation 6-4 Cluster Creation 6-6 Security 6-11 Security ReaderMBean Methods 6-12 Access Security ReaderMBeans 6-13 Invoke Security ReaderMBean Methods 6-14 vi

5 Add New Users 6-16 Create Users From An Input File 6-17 Practice 6-1 Overview (Optional): Student Project 6-19 Summary Understanding JMS Administration Objectives 7-2 Agenda 7-3 JMS Architecture 7-4 Messaging Models 7-5 PTP Messaging Model 7-6 Pub/Sub Messaging Model 7-7 WebLogic Server Implementation of JMS 7-8 WebLogic Server JMS Architecture 7-9 Section Summary 7-10 Agenda 7-11 Administering JMS 7-12 Administration Console 7-13 Common WLST Commands to Administer JMS 7-14 Section Summary 7-16 Agenda 7-17 JMS Message Management 7-18 WebLogic JMS Message Management Features 7-19 Viewing Messages 7-20 Creating Messages 7-22 Forwarding Messages 7-23 Importing/Exporting Messages 7-25 Importing Messages 7-26 Exporting Messages 7-27 Pausing and Resuming Operations 7-29 Production Pause and Resume 7-30 Section Summary 7-32 Practice 7-1 Overview: Administering JMS System Resources 7-33 Agenda 7-34 Redelivering Messages 7-35 Handling Redelivered Messages 7-36 Handling Poison Messages 7-37 Handling Duplicate Messages 7-39 Handling Expired Messages 7-40 Configure Expiration Policy on JMS Templates 7-41 Expired Message Scanning 7-42 vii

6 Section Summary 7-43 Agenda 7-44 Introduction to Distributed Destinations 7-45 Types of Distributed Destinations 7-47 Distributed Destination Load Balancing 7-48 Section Summary 7-49 Practice 7-2 Overview: Enabling Active Message Expiration 7-50 Summary Store and Forward Objectives 8-2 Agenda 8-3 Introduction to SAF 8-4 Uses of SAF 8-5 Advantages and Disadvantages of SAF 8-6 Components of SAF 8-7 Messaging Flow in SAF 8-8 Section Summary 8-9 Agenda 8-10 Creating a SAF Agent 8-11 Set Advanced Options 8-13 Thresholds and Quotas 8-14 Create a Remote SAF Context 8-15 Create a SAF Error Handling Resource 8-17 Create Imported SAF Destinations 8-19 Create SAF Queue/Topic in Imported SAF Destinations 8-21 Section Summary 8-24 Agenda 8-25 Configure SAF Between Two WebLogic Server Instances in a Cluster 8-26 Configure SAF Between WebLogic Server Instances in a Cluster 8-27 Configure SAF Across Two Clusters in a Domain 8-28 Configure SAF Across Different Domains 8-30 Section Summary 8-32 Practice 8-1 Overview: Configuring Store and Forward 8-33 Agenda 8-34 Monitoring SAF Agents 8-35 Monitor SAF Agent s Remote Endpoints 8-37 Manage SAF Agents 8-38 Pause and Resume SAF Agents 8-39 Pause and Resume Remote Endpoints 8-40 Section Summary 8-41 viii

7 Agenda 8-42 Debugging Store-and-Forward 8-43 SAF Debugging Scopes 8-44 Enabling SAF Debugging Through the Administration Console 8-46 Overview of SAF Message Life Cycle Logging for JMS Messages 8-47 SAF Message Life Cycle Events 8-48 SAF Message Life Cycle Log Files 8-49 Enable SAF Message Life Cycle Logging for JMS Messages 8-51 Section Summary 8-52 Practice 8-2 Overview:Monitoring SAF Agents 8-53 Summary Unit-of-Order and Path Service Objectives 9-2 Agenda 9-3 JMS Specification Ordered Message Delivery 9-4 Message Acknowledgement 9-6 WebLogic Server Unit-of-Order 9-7 Message Delivery with Unit-of-Order 9-8 JMS Specification and Unit-of-Order 9-9 Unit-of-Order Use Case 9-10 Message Processing Without Unit-of-Order 9-12 Message Processing with Unit-of-Order 9-13 Setting Unit-of-Order Administratively 9-14 Set Connection Factory Properties 9-15 Setting Unit-of-Order Programmatically 9-16 Section Summary 9-17 Agenda 9-18 Unit-of-Order Routing Methods 9-19 Path Service with Unit-of-Order 9-20 Create a Persistent Store 9-21 Configure Path Service 9-22 Section Summary 9-23 Agenda 9-24 Unit-of-Order Beyond a Single Server 9-25 Use Unit-of-Order with Distributed Destinations 9-26 Unit-of-Order with SAF 9-27 Unit-of-Order with a Messaging Bridge 9-28 Section Summary 9-29 Practice 9-1 Overview: Configuring Unit-of-Order 9-30 Summary 9-31 ix

8 10 Messaging Bridges Objectives 10-2 Agenda 10-3 Introduction to Messaging Bridge 10-4 Difference Between Messaging Bridge and SAF 10-5 When to Use a Messaging Bridge 10-6 Components of a Messaging Bridge 10-7 Section Summary 10-8 Agenda 10-9 Components of a Messaging Bridge Source and Target JMS Bridge Destinations Creating and Configuring Source and Target JMS Bridge Destinations Messaging Bridge Instance Creating Messaging Bridge Instance Enabling XA in Connection Factories for Messaging Bridges Configuring a Messaging Bridge Instance Preserving Message Properties in Messaging Bridge Instances Configuring Connection Retry for Messaging Bridge Instance Configuring Transaction Properties for a Messaging Bridge Instance Resource Adapters Resource Adapter Functions Configuring Resource Adapters Modifying Resource Adapters Section Summary Agenda Configuring a Messaging Bridge Using Messaging Bridge Components Case Study for Configuring a Messaging Bridge Across Clusters in the Same Domain Case Study for Configuring a Messaging Bridge Across Domains Section Summary Practice 10-1 Overview: Setting Up a Messaging Bridge Between Two Instances of WebLogic Server Agenda Introduction to Third-Party Messaging Tools Configuring a Messaging Bridge Between WebLogic Server and JBoss Configuring a Messaging Bridge Between WebLogic Server and MQSeries Section Summary Agenda Tuning WebLogic Server Messaging Bridges Changing Transaction Batch Size and Interval x

9 Changing Quality-of-Service (QoS) Using Multiple Messaging Bridge Instances Changing the Thread Pool Size Avoiding Durable Subscription Collocating Bridges with Their Source or Target Destination Changing the Asynchronous Mode Enabled Attribute Section Summary Practice 10-2 Overview: Setting Up a Messaging Bridge Between WebLogic Server and JBoss Summary Introducing WebLogic Security Objectives 11-2 Agenda 11-3 Introduction to WebLogic Server Security 11-4 Features of WebLogic Server 11-5 Section Summary 11-6 Agenda 11-7 Authentication 11-8 Authorization Auditing Identity and Trust Secure Sockets Layer (SSL) Java EE and WebLogic Security Section Summary Agenda Introduction to SSO SSO Architecture SSO Features SSO: Advantages and Disadvantages SSO Through BEA AquaLogic Enterprise Security SSO by Integrating WebLogic Security with SiteMinder SSO by Integrating WebLogic Security with GetAccess Section Summary Agenda Introduction to SAML SAML Key Concepts SAML Sequence SAML Structure Web Browser SSO Profiles POST Profile xi

10 Artifact Profile Section Summary Summary Understanding Security Realms Objectives 12-2 Agenda 12-3 Introduction to a Security Realm 12-4 Users and Groups 12-5 Security Roles and Policies 12-6 Security Providers 12-7 Security Provider Database 12-8 Section Summary 12-9 Agenda Introducing the Embedded LDAP Server Configuring the Embedded LDAP Server Replicating the Embedded LDAP Server Viewing Contents and Configuring Backups for the Embedded LDAP Server Importing and Exporting Information in the Embedded LDAP Server LDAP Access Control Section Summary Agenda Authentication Providers Identity Assertion Providers Principal Validation Providers Authorization Providers Adjudication Providers Auditing Providers Role Mapping Providers Credential Mapping Providers Certificate Lookup and Validation Providers Keystores Section Summary Practice 12-1 Overview: Configuring a New Security Realm Summary Configuring Non-Default Security Providers Objectives 13-2 Agenda 13-3 Introduction to Credential Mapping 13-4 Attributes of Credential Mapping 13-6 xii

11 Create a Credential Mapping 13-7 Section Summary 13-9 Agenda SSO and WebLogic Server What Is SAML? SAML History and Roadmap SAML Sequence SAML Architecture SAML Terminology Two HTTP-based Techniques Post Profile Artifact Profile WebLogic SAML Framework WLS SAML Components Example Introducing the SAML Credential Mapping Provider Configuring SAML Providers Configuring a Source Site Creating a SAML Credential Mapping Provider Configuring Source Site Federation Services Configuring SAML Relying Parties Adding Certificates to the Certificate Registry Configuring a Destination Site Creating a SAML Identity Assertion Provider Configuring Destination Site Federation Services Configuring SAML Asserting Parties Adding Certificates to the Certificate Registry Section Summary Agenda Introduction to XACML Key Concepts and Features of XACML XACML Framework Configuring the XACML Authorization Provider Configuring the XACML Role Mapping Provider Section Summary Agenda Introduction to the RDBMS Security Provider Common RDBMS Authentication Provider Attributes Configuring Authentication Providers Configuring the SQL Authenticator Configuring the Read-Only SQL Authenticator xiii

12 Configuring the Custom DBMS Authenticator Section Summary Agenda Introduction to the PKI Credential Mapping Provider Requirements for Configuring the PKI Credential Mapping Provider Attributes of the PKI Credential Mapping Provider Creating a PKI Credential Mapping Credential Action Section Summary Summary Securing WebLogic Resources Through SSL Objectives 14-2 Agenda 14-3 Introduction to SSL 14-4 Advanced Features of SSL 14-5 SSL Tunneling 14-6 SSL Protocol Version 14-8 SSL Session Behavior SSL Processes SSL Debugging SSL Certificate Validation One-Way and Two-Way SSL Section Summary Agenda Private Keys, Digital Certificates, and Trusted Certificate Authorities Supported Formats for Identity and Trust Obtaining Private Keys, Digital Certificates, and Trusted Certificate Authorities Keytool Utility X.509 Certificates Configuring Identity and Trust Configuring Identity and Trust Keystores How WebLogic Server Locates Trust Section Summary Agenda WebLogic Server SSL Requirement forenabling SSL Enabling SSL on WebLogic Server Configuring One-Way and Two-Way SSL Restart SSL Section Summary xiv

13 Practice 14-1 Overview: Creating Certificates and Configuring Two-Way SSL Agenda Introduction to Host Name Verification Verifying Whether Host Name Verification Is Enabled Disabling Host Name Verification Writing a Custom Host Name Verifier Configuring a Custom Host Name Verifier Section Summary Agenda Introduction to ncipher JCE Provider Features of ncipher Provisioning and Provisor User Management Securing PKI Certificates and Signing Operations Securing SSL Certificates on Web and Application Servers Securing Authentication and Signing Functions in Online Payment Systems Securing the Identity of Published Software Securing PINs and Passwords Installing and Configuring ncipher Section Summary Summary Diagnostics Framework and Logging Objectives 15-2 Agenda 15-3 WebLogic Diagnostic Framework 15-4 WLDF Subsystems 15-5 GENERATE 15-6 Data Creators 15-7 Custom Instrumentation 15-9 Diagnostic Monitors Diagnostic Actions Diagnostic Context Request Dyeing GATHER Data Collectors ANALYZE Data Accessors Watches and Notifications PERSIST Data Archiver Diagnostic Image Capture xv

14 Management Ease of Development and Integration ofthird-party Analytic Tools Section Summary Agenda Tools for Configuring WLDF Two Levels of Configuration Diagnostic System Modules Configuring a Harvester Configuring Notifications Configuring Watches Configuring Server-Level Instrumentation Configure a DyeInjection Monitor Accessing Diagnostic Data Configuring Diagnostic Images Capturing Diagnostic Images Configuring Diagnostic Archives WLDF Console Extension Displaying the Console Extension The WLDF Console Extension Anatomy of the Console Extension Displaying the Contents of the MBean Tree in the Metrics Tab Method Performance Charts Displaying Requests Displaying Methods Section Summary Practice 15-1 Overview: Diagnosing and Monitoring WebLogic Server Summary Work Managers Objectives 16-2 Agenda 16-3 Pre-9.x Version Thread Management 16-4 Work Managers 16-5 Default Work Manager 16-6 Work Manager Scheduling Guidelines 16-7 Section Summary 16-8 Agenda 16-9 Request Classes Fair Share Request Class Response Time Request Class Context Request Class xvi

15 Constraints Maximum Threads Constraints Minimum Threads Constraints Capacity Constraints Referencing Classes or Constraints Section Summary Agenda Global Work Managers Global Work Manager Component Global Work Managers Application-Level Work Manager Component-Level Configuration Component-Level Work Managers Web Application-Level Work Managers Stuck Thread Work Manager Section Summary Agenda Backward Compatibility Migration to Work Managers Section Summary Agenda Understanding CommonJ Accessing CommonJ Work Managers Mapping CommonJ to Work Managers Section Summary Practice 16-1 Overview: Using Work Managers Summary Appendix A: Practices and Solutions Index xvii

16 xviii