Skip Headers
Oracle® Fusion Middleware Security and Administrator's Guide for Web Services
11g Release 1 (11.1.1.7)

Part Number B32511-09
Go to Documentation Home
Home
Go to Book List
Book List
Go to Table of Contents
Contents
Go to Master Index
Master Index
Go to Feedback page
Contact Us

Go to previous page
Previous
Go to next page
Next
PDF · Mobi · ePub

1 Overview of Web Services Security and Administration

Companies worldwide are actively deploying service-oriented architectures (SOA) using Web services, both in intranet and internet environments. While Web services offer many advantages over traditional alternatives (for example, distributed objects or custom software), deploying networks of interconnected Web services still presents key challenges, particularly in terms of security and administration.

This chapter provides an overview of Web services security and administration in Oracle Fusion Middleware 11g.

Note:

Oracle Web Services Manager and Oracle Infrastructure Web Services are also supported on IBM WebSphere. Differences in behavior, and any limitations, are described in "Managing Web Services on IBM WebSphere" in Oracle Fusion Middleware Third-Party Application Server Guide.

Web Services Security and Administration in Oracle Fusion Middleware 11g

The following highlights the main features of Oracle Fusion Middleware 11g Release 1 (11.1.1):

Web Service Security and Administration Tasks

The following list provides an example of the tasks required to secure and administer Web services:

The steps to develop, secure, and administer Web services vary based on the Web service category in use. The following sections outline the steps required:

Securing and Administering Oracle Infrastructure Web Services

To secure and administer Oracle Infrastructure Web services:

Part II, "Basic Administration" and Part III, "Advanced Administration" describe how to secure and administer SOA, ADF, and WebCenter services in detail.

Securing and Administering WebLogic Web Services

To secure and administer WebLogic Web services:

Table 1-3 Tools Used to Secure and Administer WebLogic Web Services

Use this tool . . . To perform the following tasks . . .

Oracle Enterprise Manager Fusion Middleware Control

Leverage Oracle WSM to perform the following tasks:

  • Enforce policies at run time.

  • Manage Oracle WSM security policies and attach to WebLogic Java EE Web services (not clients).

  • Advertise policies for JAX-WS WebLogic Web services secured with Oracle WSM security policies.

  • Test the WebLogic Web service.

  • Monitor the run-time performance of WebLogic Web services.

For more information about Oracle WSM, see "Understanding Oracle WSM Policy Framework".

To access Oracle Enterprise Manager Fusion Middleware Control, see "Accessing Oracle Enterprise Manager Fusion Middleware Control".

For more information about Oracle Enterprise Manager Fusion Middleware Control, see "Getting Started Using Oracle Enterprise Manager Fusion Middleware Control" in Oracle Fusion Middleware Administrator's Guide.

Note: The following features are not supported for WebLogic Web services in the 11g release:

  • WS-SecureConversation, WS-Trust, MTOM, WS-Addressing, WS-ReliableMessaging, or WS-AtomicTransaction using Oracle WSM policies.

  • Security and administration of JAX-RPC WebLogic Web services.

Oracle WebLogic Server Administration Console

Secure and manage WebLogic Web services.

To access the Oracle WebLogic Server Administration Console, see "Accessing Oracle WebLogic Administration Console".

For more information about using the Oracle WebLogic Server Administration Console to secure and administer WebLogic Web services, see "Web Services" in the Oracle WebLogic Server Administration Console Help.


Part IV, "WebLogic Web Service Administration" provides a roadmap for securing and administering WebLogic Web services.

Accessing the Security and Administration Tools

The following sections describe how to access the security and administration tools described in the previous sections.

Accessing Oracle Enterprise Manager Fusion Middleware Control

To access Oracle Enterprise Manager Fusion Middleware Control:

  1. Start the Oracle WebLogic Server instance.

    For more information, see "Start and stop servers" in the Oracle WebLogic Server Administration Console Help.

  2. Open a supported Web browser and navigate to the following URL:

    http://hostname:port/em
    

    The Login page displays.

  3. Enter the username and password.

    The default user name for the administrator user is weblogic. This is the account you can use to log in to Fusion Middleware Control for the first time. The password is the one you supplied during the installation of Oracle Fusion Middleware.

  4. Click Login.

For more information, see "Getting Started Using Oracle Enterprise Manager Fusion Middleware Control" in Oracle Fusion Middleware Administrator's Guide.

Accessing Oracle WebLogic Administration Console

To access Oracle WebLogic Administration Console:

  1. Start the Oracle WebLogic Server.

    For more information, see "Start and stop servers" in the Oracle WebLogic Server Administration Console Help.

  2. Open a supported Web browser and navigate to one of the following URLs:

    http://hostname:port/console
    https://hostname:port/console
    

    hostname specifies the DNS name or IP address of the Oracle WebLogic Administration Server and port specifies the address of the port on which the Oracle WebLogic Administration Server is listening for requests (7001 by default).

    Use https if you started the Oracle WebLogic Server using the Secure Sockets Layer (SSL).

    For a list of supported browsers, see System Requirements and Supported Platforms for Oracle WebLogic Server at: http://www.oracle.com/technology/software/products/ias/files/fusion_certification.html.

    The Login page displays.

  3. Enter the username and password.

    You may have specified the username and password during the installation process. This may be the same username and password that you use to start the Oracle Administration Server. Or, a username that is granted one of the default global security roles.

  4. Click Log In.

For more information, see "Start the Console" in the Oracle WebLogic Server Administration Console Help.

Accessing the Web Services Custom WLST Commands

To access the Web services WLST commands:

  1. Go to the Oracle Common home directory for your installation, for example /home/Oracle/Middleware/oracle_common.

    For information about the Oracle Common home directory and installing Oracle Fusion Middleware, see the Oracle Fusion Middleware Installation Planning Guide.

  2. Start WLST using the WLST.sh/cmd command located in the oracle_common/common/bin directory. For example:

    • /home/Oracle/Middleware/oracle_common/common/bin/wlst.sh (UNIX)

    • C:\Oracle\Middleware\oracle_common\common\bin\wlst.cmd (Windows)

    When executed, these commands start WLST in offline mode. To use the Web services WLST commands, you must use WLST in online mode.

  3. Start Oracle WebLogic Server.

    For more information, see "Start and stop servers" in the Oracle WebLogic Server Administration Console Help.

  4. Connect to the running WebLogic Server instance using the connect() command. For example, the following command connects WLST to the Admin Server at the URL myAdminServer.example.com:7001 using the username/password credentials weblogic/welcome1:

    connect("weblogic","welcome1","t3://myAdminServer.example.com:7001")
    

For more information about using WLST, see "Using the WebLogic Scripting Tool" in Oracle WebLogic Scripting Tool.

For more information about the Web Services WLST commands, see "Web Services Custom WLST Commands" in WebLogic Scripting Tool Command Reference.

Installing Oracle WSM on WebLogic Server

Oracle WSM is installed by default when you install Oracle Fusion Middleware SOA Suite or Oracle Application Development Runtime. However, if you have a standalone WebLogic Server environment with JAX-WS Web services and clients deployed, you can install Oracle WSM and use it to secure your Web services and clients.

Note:

Oracle WSM is licensed only through SOA Suite; a standalone license is not available. To secure Web service clients and services using Oracle WSM on base Weblogic Server, you must acquire a SOA Suite license in addition to a Weblogic Server license.

To use Oracle WSM with WebLogic Server, you need Java Required Files (JRF) and Oracle Enterprise Manager Fusion Middleware Control. JRF consists of those components, such as Oracle WSM, that provide common functionality for Oracle business applications and application frameworks. Oracle Enterprise Manager Fusion Middleware Control is used to secure and administer WebLogic Web services.

Neither JRF or Fusion Middleware Control are included in the WebLogic Server installation. The following procedure describes the steps required to install and configure Oracle WSM with WebLogic Server.

  1. Prepare for the installation by reviewing the concepts and requirements as described in the Oracle Fusion Middleware Installation Planning Guide.

  2. Download the following Oracle Fusion Middleware software components:

    • Oracle WebLogic Server

    • Oracle Application Development Runtime

    • Oracle Fusion Middleware Repository Creation Utility

    For download sites, see "Obtain the Oracle Fusion Middleware Software" in Oracle Fusion Middleware Installation Planning Guide.

  3. Create the MDS schema in your database.

    Oracle Application Developer includes Oracle WSM Policy Manager and Oracle WSM-PM Extension. These components require that the MDS schema exists in your database prior to installation. You must run the Repository Creation Utility (RCU) to create the MDS schema in your database. For instructions, see "Creating Schemas" in Oracle Fusion Middleware Repository Creation Utility User's Guide.

    Note:

    In the Select Components screen, be sure to select Metadata Services under AS Common Schemas.

  4. Install WebLogic Server. For detailed instructions, see Installation Guide for Oracle WebLogic Server.

    Be sure to take note of the location that you specify for the Middleware Home directory as you will need to provide it during the Application Developer installation.

  5. Install Application Developer. For detailed instructions, see "Installation Instructions" in Oracle Fusion Middleware Installation Guide for Application Developer.

    Note:

    In the Specify Installation Location screen, specify the Middleware home location that you provided during the WebLogic Server installation.

  6. Create a domain that includes Oracle Enterprise Manager, Oracle WSM, and JRF using the Configuration Wizard. For details, see "Configuring Application Developer" in Oracle Fusion Middleware Installation Guide for Application Developer.

    Note:

    In the Select Domain Source screen of the Configuration Wizard, select Oracle Enterprise Manager and Oracle WSM Policy Manager. Oracle JRF is automatically selected as a dependency.

You can now secure and administer WebLogic Web services as described in "Securing and Administering WebLogic Web Services".