{"id":1749,"date":"2012-06-25T22:37:22","date_gmt":"2012-06-26T03:37:22","guid":{"rendered":"http:\/\/jianmingli.com\/wp\/?p=1749"},"modified":"2012-06-28T22:57:00","modified_gmt":"2012-06-29T03:57:00","slug":"oracle-web-services-manager-owsm","status":"publish","type":"post","link":"https:\/\/jianmingli.com\/wp\/?p=1749","title":{"rendered":"Oracle Web Services Manager (OWSM)"},"content":{"rendered":"

Overview<\/h2><\/span>\n

* Oracle OWSM 10g.
\n* Supports SOAP 1.1 only.
\n* OWSM console: http:\/\/host_name:port\/ccore
\n* Default login: admin\/oracle
\n* Supports common security policy steps
\n– authenticaiton
\n– authorization
\n– message encryption
\n– message signing
\n– credential management
\n– identity propagation via SAML tokens
\n– federation
\n* Provides nonsecurity steps
\n– log messages
\n– custom fault messages
\n– message transformation using XSLT
\n* Provides extensibility to create custom steps
\n* Provides content based routing from gateways<\/p>\n

Use Cases<\/h2><\/span>\n

* Protecting client access to web services
\n– by virtualizing them using gateway
\n– using server side agent
\n– using client side agent
\n* Limit accessing to external web services
\n– using gateway as a proxy server
\n* Mapping security credentials
\n– using gateway and server side agent
\n* Mediating heterogeneous protocols
\n– using gateway
\n* SAML token propagation
\n* Securing asynch service calls
\n– using server side gateway
\n– using server agent and client side gateway<\/p>\n

Add a New Gateway<\/h2><\/span>\n

* Policy Management -> Manage Policies -> Add New Component<\/p>\n

Component Name: TestGateway\r\nComponent Type: Gateway\r\nContainer Type: Oracle Web Services manager\r\nComponent URL: http:\/\/localhost\/gateway<\/pre>\n
* Click Register button. The return message should be:<\/p>\n
Component is added successfully. Id of the new Component is \"C0003001\".<\/pre>\n
Add a Service to OWSM Gateway<\/h2><\/span>\n
* Go to: Policy Management -> Register Services
\n* Click Gateway ‘Services’ link
\n* Click ‘Add New Service’ button
\n* Enter:
\nService Name (*):
\nService Version (*):
\nService Description:
\nWSDL URL:
\nService Protocol(*): HTTP(S)JMS(SSL)IBM MQSeriesHTTP PostCustom
\n* Click ‘Next’ button
\n* Click ‘Finish’, ‘OK’, ‘commit’, ‘OK’ when prompted.<\/p>\n
Test Web Service<\/h2><\/span>\n
* Go to: Tools -> Test Page
\n* Enter WSDL url.<\/p>\n
Policy Steps<\/h2><\/span>\n
* Policy steps can be assembled for
\n– request pipeline
\n– response pipeline
\n* Predefined Policy Steps
\nSecurity Steps
\n– Credential Management
\n– Authentication
\n– Authorization
\n– Integrity and Confidentiality
\n– Federation
\nNon-security Steps
\n– Log messages
\n– Custom fault messages
\n– Message transformation using XSLT<\/p>\n
Admin Tasks<\/h2><\/span>\n
Change Admin Password<\/h3><\/span>\n
* Admin password is maintained in a file named owsm\/bin\/manageUserGroups.properties<\/p>\n
\r\nuser_id=admin\r\nuser_password=oracle\r\n<\/pre>\n
Create Password File<\/h3><\/span>\n
* Create a new password file named ‘owsmpass.txt’ in ORACLE_HOME\\j2ee\\home
\n* Create a new username:password pair in newly created password file. For example,
\njohndoe:password
\n* Run password encryption command:
\ncd ORACLE_HOME\/OWSM_1\/owsm\/bin
\nwsmadmin md5encode ..\\..\\j2ee\\home\\owsmpass.txt johndoe
\nenter: password<\/p>\n
Add extract Credentials step<\/h3><\/span>\n
Credential location:
\n\/soapenv:Envelope\/soapenv:Body\/myns:MyElement\/<\/p>\n
Namespaces:
\nmyns=https:\/\/www.my.com\/2010\/my\/wsdl
\nmyns:SubscriberId
\nmyns:SubscriberToken<\/p>\n
References<\/h2><\/span>\n
* Oracle\u00ae Web Services Manager Administrator’s Guide<\/a>
\n* Creating a Custom Policy Step in Oracle Web Services Manager (Oracle WSM) <\/a>
\n* Oracle Web Services Manager (WSM) 10g: Use Case Scenarios<\/a>
\n* http:\/\/wiki.oracle.com\/page\/OWSM+Links<\/a>
\n* Understanding the Sample Custom Step<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"
Overview * Oracle OWSM 10g. * Supports SOAP 1.1 only. * OWSM console: http:\/\/host_name:port\/ccore * Default login: admin\/oracle * Supports common security policy steps – authenticaiton – authorization – message encryption – message signing – credential management – identity propagation … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[69,39,22,1],"tags":[],"class_list":["post-1749","post","type-post","status-publish","format-standard","hentry","category-oc4j","category-rr","category-soa","category-uncategorized"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p8cRUO-sd","_links":{"self":[{"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=\/wp\/v2\/posts\/1749","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1749"}],"version-history":[{"count":7,"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=\/wp\/v2\/posts\/1749\/revisions"}],"predecessor-version":[{"id":4870,"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=\/wp\/v2\/posts\/1749\/revisions\/4870"}],"wp:attachment":[{"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1749"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1749"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jianmingli.com\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1749"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}