Master Note on Oracle WebLogic Server Security and Authentication Support Patterns
(Doc ID 761136.1)
Last updated on AUGUST 31, 2020
Oracle WebLogic Server - Version 6.1 and later Information in this document applies to any platform.
This master note provides links to support patterns on problems with WebLogic Server (WLS) security and authentication.
Kerberos & SPNEGO Configuration Issues
This document explains how to troubleshoot issues while configuring SSO with Kerberos/SPNEGO and WebLogic Server. It is intended to cover WebLogic Server 10.0 and higher. <Note 1332241.1> has more details.
Understanding WebLogic Security Providers
This document explains what the security providers are and how they are used in an application. It also describes some common issues that have been raised by customers and explains how to debug and analyze such issues. <Note 779219.1> has more details.
Understanding and Investigating SSL Issues
This document explains troubleshooting steps for dealing with problems where two communicating parties using the SSL (Secure Socket Layer) protocol cannot establish a connection due to an SSL failure. See <Note 1078957.1>.
SSL and Plug-In
This pattern explains how to use the WebLogic Server plug-in and SSL. It describes in detail questions to ask when setting up the architecture for the environment. The three web Servers used as examples are: Apache, iPlanet (SunOne), and Microsoft IIS. <Note 780026.1>
SSL Details: Basic Constraints
Warnings related to basic constraints are coming up on the server side. <Note 1084556.1>
Troubleshooting Web Services and SSL Issues (Transport-level Security)
This document has been written to cover most of the issues raised by customers when using Web Services and SSL. The document discusses most common issues both in 1-way SSL and 2-way SSL, and provides explanations on how the tests were achieved. <Note 1086572.1>
Investigating Domain Trust Issues
Intercommunication between two WebLogic Server domains results in a security exception. <Note:1332288.1> has more details.
Troubleshooting LDAP Issues
WebLogic Server cannot connect to LDAP or cannot find users/groups to do role mapping, embedded LDAP locking problems occur, or performance issues are encountered related to client authentication. <Note 1077534.1>
Connecting to an LDAP Server Over SSL from WebLogic
This document has been written to cover most of the issues raised by customers when using LDAP servers over SSL. This document will assume that the configuration on the LDAP server has been properly made and that SSL is up and running. However, this document will cover the most common issues raised by customers as well as explain how to debug and analyze such issues. <Note 1086628.1>
Understanding LDAP Group Membership Search (Static and Dynamic)
This pattern is for customers who will be using their LDAP servers with a dynamic group mechanism as well as a static mechanism. Also, it describes how to read and interpret debug information. <Note 1082916.1>
Authentication Errors Starting WLS
WebLogic Server does not start and throws errors relating to admin password, admin authorization or LDAP. <Note 1087194.1>
Re-Encrypting Domain Passwords
The username/password encryption for a domain becomes invalid resulting in a JSAFE_PaddingException, disallowing the server to start up. See <Note:1087296.1> for details.
SSL Configuration and Node Manager
Node Manager can fail to start the managed server due to faulty SSL configuration. This pattern details steps that should be taken to correctly create self-signed certificates, obtain commercial certificates, and configure the keystore. A checklist is provided for troubleshooting Node Manager and SSL problems. Common problems and their resolutions are also explained. <Note 1088993.1>
To view full details, sign in with your My Oracle Support account.
Don't have a My Oracle Support account? Click to get started!