OPSS: How To Grant A Specific Group To A Weblogic Domain Role If There Are More Than One Groups With Same Name (Doc ID 2718803.1)

Last updated on MARCH 01, 2023

Applies to:

Goal

1. What are the steps add the specific group "TEST_GROUP" from the <OU1> ou to a web logic domain role without it authorizing other groups with the same name in wlst?

2. The group names below are just samples. What are the steps to specify the full distinguished name (DN) or unique attribute value to set the correct principal in the grantAppRole command?

ie:

cn=TEST_GROUP,OU=<OU1>,dc=<COMPANY>,dc=com
cn=TEST_GROUP,OU=<OU2>,dc=<COMPANY>,dc=com
 

3. As there are two valid ldap groups with same name, then grantAppRole must be something like:

grantAppRole(appStripe="<APP_STRIPE>",appRoleName="<APPLICATION_ROLE_NAME>",principalClass="weblogic.security.principal.WLSGroupImpl",principalName="TEST_GROUP")

But which groups is setting the one under OU=<OU1> or OU=<OU2>.

Solution

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.