bea.com | products | dev2dev | support | askBEA
 Download Docs   Site Map   Glossary 
Search

Administration Console Online Help

 Previous Next Contents Index  

 


WebLogic Auditing Provider-->General

Tasks     Related Topics     Attributes

Overview

Use this tab to configure a WebLogic Auditing provider for a security realm.

Note: The Administration Console refers to the WebLogic Auditing provider as the Default Auditor.

Auditing is the process whereby information about operating requests and the outcome of those requests are collected, stored, and disturbed for the purposes of non repudiation. In other words, auditing provides an electronic trail of computer activity. In the WebLogic Server security architecture, an Auditing provider is used to provide auditing services.

If configured, the WebLogic Server Security Framework will call through to an Auditing provider before and after security operations (such as authentication or authorization) have been performed, enabling audit event recording. The decision to audit a particular event is made by the Auditing provider itself and can be based on specific audit criteria and/or severity levels. The records containing the audit information may be written to output repositories such as an LDAP back-end, database, and a simple file.

All auditing information recorded by the WebLogic Auditing provider is saved in WL_HOME\yourdomain\DefaultAuditRecorder.log.

You can use a Custom Auditing provider instead of the WebLogic Auditing provider. For a Custom Auditing provider to be available through the WebLogic Server Administration Console, the MBean JAR file for the provider must be in the WL_HOME\lib\mbeantypes directory.

Tasks

Configuring a WebLogic Auditing Provider

Related Topics

Introduction to WebLogic Security

Managing WebLogic Security

Programmimg WebLogic Security

Developing Security Providers for WebLogic Server

Securing a WebLogic Server Deployment

Upgrading Security in WebLogic Server Version 6.x to WebLogic Server Version 7.0

Security FAQ

The Security page in the WebLogic Server documentation

Attributes

Table 1-7

Attribute Label

Description

Value Constraints

Name

The name of this configuration. WebLogic Server uses an MBean to implement and persist the configuration.

MBean: weblogic.security.
providers.audit.
DefaultAuditorMBean

Attribute: Name


Description

A short description of the WebLogic Auditing provider.

MBean: weblogic.security.
providers.audit.
DefaultAuditorMBean

Attribute: Description

Default: "WebLogic Auditing Provider"

Version

this security provider's version.

Each security provider's mbean should set the default value of this read-only attribute to a string that specifies the version of the provider (eg. 7.3.04). In other words, each security provider's mbean hard-wires its version. There are no conventions on the contents of the version string.

MBean: weblogic.security.
providers.audit.
DefaultAuditorMBean

Attribute: Version

Default: "1.0"

Severity

The severity level at which auditing is initiated.

MBean: weblogic.security.
providers.audit.
DefaultAuditorMBean

Attribute: Severity

Default: "ERROR"

 

Back to Top Previous Next