PacktPub book review for 'Securing Weblogic Server 12c'

I got invitation from PacktPub Publication to review the newly published 'Securing Weblogic Server 12c' book. I was quite excited to review this book on latest technology.

Who is this book for?
This book is for weblogic 12c enthusiasts, administrators and security admin.

What do you expect from this book?
This book begins with security concepts of Weblogic 12c. As Weblogic is J2EE app server, java security concepts are covered. It talks more about Weblogic security realm. Interesting part is it explains how Weblogic 12c can be configured for Microsoft Active Directory to support Kerberos SSO in Microsoft domain network.

What I liked about this book?
It gives step-by-step explanation to the problem statement. It discuss troubleshooting  for many issues.  It also gives recommendation for performance. 

inactive BAM user

there are scenario when user is shown as inactive when he logs in BAM console. Follow these steps to activate the user.

1. go to tmp folder of BAM in the domain 
cd $domain_home/servers/Managed_bam_server01/tmp/_WL_user/oracle-bam_11.1.1

2. search for BAM config file
find . -name BAMServerConfig.xml

3. edit the file config file 
vi ./568z2c/config/BAMServerConfig.xml

4. make following property false
<EnableBackgroundUserGroupValidation>false</EnableBackgroundUserGroupValidation>

Enable .out log file for managed server on weblogic 10.x

I was wondering why .out file is not getting updated on my managed server. There is quick fix
enable this in weblogic console
domain > Environment > Servers > server > Logging >
General > Advanced > Redirect stdout logging enabled

and restart server.

auto claim in human task

When a task in human workflow is assigned to a group, the user has to acquire it before he can take action on the assigned task. Normally, The user is presented with 'Claim' button in task form. Imagine, this user has 100 tasks assigned, then he has to select the task and click on claim and then take further action; this process is very painful. How about Auto-claim?

Auto claim can be enabled by adding enableautoclaim as 'true'. shown below

<enableautoclaim>true</enableAutoClaim>

Add this element, as last element in .task file.

What happens? when user clicks on the assigned task, he is presented with 'Claim' button along with other actions e.g. Approve, Reject etc. He can acquire task, by clicking 'Claim'. If he clicks on action buttons ('Approve' or 'Reject' etc.), the task is automatically acquired, and the outcome is updated as per definition of task.

BAM data objects import/export

BAM comes with iCommand for admin purpose. iCommand is in $MW_HOME/ORACLE_SOA/bam/bin folder.

Follow these steps to export:
1) edit config/BAMICommandConfig.xml file. change ADCServerName and port number, where BAM server is running
2) create export.xml

<?xml version="1.0" encoding="utf-8"?>
<OracleBAMCommands continueonerror="1">
<!-- to export data-object "myDO" -->
<Export name="/operations/myProject/myDO" file="myDataObject.xml" contents="0" />
<!-- to export data-object "myDO_1" -->
<Export name="/operations/myProject/myDO_1" file="myDataObject1.xml" contents="0" />
<!-- export all reports -->
<Export type="report" all="1" file="AllReports.xml" />
<!-- export specific report -->
<Export type="report" name="/public/shared/myReport" file="myReport.xml" />
</OracleBAMCommands>

3) execute iCommand as follow

> icommand -cmdfile export.xml

Follow these steps for import
1) edit config/BAMICommandConfig.xml file. change ADCServerName and port number, where BAM server on which configuration needs to be imported.
2) execute following commands to import previously created xml files:
>icommand -cmd import -mode update -file myDataObject.xml
>icommand -cmd import -mode update -file myDataObject_1.xml
>icommand -cmd import -mode overwrite -file myReport.xml

Applies to: Oracle BAM 11.1.1.4.0
Reference: http://download.oracle.com/docs/cd/E12839_01/integration.1111/e10224/bam_app_icommand.htm

Java embedding in BPEL 2.0

According to BPEL 2.0 specifications, java embedding is not available as standard activity. Though BPEL 2.0 allows to define and use non-standard activity using <extensionActivity> element. So you will find following syntax changes from BPEL 1.1.

In Oracle SOA suite, <bpelx:exec> element appears inside <extensionactivity> element.

Also, the java import has different syntax as below:
<import importtype="http://schemas.oracle.com/bpel/extension/java" location="class/package name"></import>

Here is an example:
<process name="myTest" targetNamespace="http://test.oracle.com/bpel2.0/myTest">
. . .
. . .
<import location="java.util.Date"
importType="http://schemas.oracle.com/bpel/extension/java"/>
. . .
<sequence>
. . .
<extensionActivity>
<bpelx:exec language="java">
System.out.println("Current time is: "+ new Date());
</bpelx:exec>
</extensionActivity>


QR codes

I was amazed by QR codes recently. Its easy way of sharing information visually. This information can be grabbed using barcode scanner(through camera); so just by pointing camera, you grab it.

I am happy that QR codes are used in android very nicely. All application's URL are encoded using QR. it saves effort to remember, type and locate application. All you need is barcode scanner application. QR code generators are available online as well http://zxing.appspot.com/generator/

I see many more usage of this technology in future.