|
BEA Systems, Inc. | |||||||||||
| PREV CLASS NEXT CLASS | FRAMES NO FRAMES | |||||||||||
| SUMMARY: NESTED | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD | |||||||||||
MBeanHome interface.)
This MBean is used to specify domain-wide defaults for the WebApp container. In general, these properties can be overridden at the cluster level (in ClusterMBean, if the same property is present there), the server level (in ServerMBean, if the same property is present there) or for a specific Web application (in weblogic.xml).
This is a type-safe interface for a
WebLogic Server MBean, which you can import into your client
classes and access through
weblogic.management.MBeanHome. As of 9.0, the
MBeanHome interface and all type-safe interfaces for
WebLogic Server MBeans are deprecated. Instead, client classes that
interact with WebLogic Server MBeans should use standard JMX design
patterns in which clients use the
javax.management.MBeanServerConnection interface to
discover MBeans, attributes, and attribute types at runtime. For
more information, see "Developing Manageable Applications with JMX"
on http://www.oracle.com/technology/documentation/index.html.
| Field Summary |
| Fields inherited from interface weblogic.management.configuration.ConfigurationMBean |
DEFAULT_EMPTY_BYTE_ARRAY |
| Method Summary | |
int |
getMaxPostSize()
The maximum post size this server allows for reading HTTP POST data in a servlet request. |
int |
getMaxPostTimeSecs()
Max Post Time (in seconds) for reading HTTP POST data in a servlet request. |
String |
getMimeMappingFile()
Returns the name of the file containing mime-mappings for the domain. |
String |
getP3PHeaderValue()
Returns the P3PHeader value that will be sent with all responses for http requests (if non-null). |
int |
getPostTimeoutSecs()
The amount of time this server waits between receiving chunks of data in an HTTP POST data before it times out. |
String |
getXPoweredByHeaderLevel()
WebLogic Server uses the X-Powered-By HTTP header, as recommended by the Servlet 2.4 specification, to publish its implementation information. |
boolean |
isAllowAllRoles()
In the security-constraints elements defined in a Web application's web.xml deployment descriptor, the auth-constraint element indicates the user roles that should be permitted access to this resource collection. |
boolean |
isAuthCookieEnabled()
Whether authcookie feature is enabled or not. |
boolean |
isClientCertProxyEnabled()
Specifies whether or not to honor the WL-Proxy-Client-Cert header coming with the request. |
boolean |
isFilterDispatchedRequestsEnabled()
Indicates whether or not to apply filters to dispatched requests. |
boolean |
isHttpTraceSupportEnabled()
Returns the value of HttpTraceSupportEnabled. |
boolean |
isJSPCompilerBackwardsCompatible()
Global property to determine the behavior of the JSP compiler. |
boolean |
isOptimisticSerialization()
When OptimisticSerialization is turned on, WebLogic server does not serialize-deserialize context and request attributes upon getAttribute(name) when a request gets dispatched across servlet contexts. |
boolean |
isOverloadProtectionEnabled()
This parameter is used to enable overload protection in the webapp container against low memory conditions. |
boolean |
isReloginEnabled()
Beginning with the 9.0 release the FORM/BASIC authentication behavior has been modified to conform strictly to the J2EE Specification. |
boolean |
isRtexprvalueJspParamName()
Global property which determines the behavior of the JSP compiler when a jsp:param attribute "name" has a request time value. |
boolean |
isWAPEnabled()
Indicates whether the session ID should include JVM information. |
boolean |
isWeblogicPluginEnabled()
Specifies whether or not the proprietary WL-Proxy-Client-IP header should be honored. |
boolean |
isWorkContextPropagationEnabled()
Indicates whether or not WorkContextPropagation is enabled. |
void |
setAllowAllRoles(boolean allowAllRoles)
Sets the value of the backward compatibility switch AllowAllRoles attribute. |
void |
setAuthCookieEnabled(boolean enable)
Sets the value of the isAuthCookieEnabled attribute. |
void |
setClientCertProxyEnabled(boolean ccp)
A value of true causes proxy-server plugins to pass
identity certificates from clients to all web applications that are
deployed on all server instances in the domain. |
void |
setFilterDispatchedRequestsEnabled(boolean enabled)
Sets the value of the backward-compatibility parameter "FilterDispatchedRequestsEnabled". |
void |
setHttpTraceSupportEnabled(boolean tse)
Attackers may abuse HTTP TRACE functionality to gain access to information in HTTP headers such as cookies and authentication data. |
void |
setJSPCompilerBackwardsCompatible(boolean compat)
Sets the value of the JSPCompilerBackwardsCompatible parameter. |
void |
setMaxPostSize(int bytes)
Sets the value of the maxPostSize attribute. |
void |
setMaxPostTimeSecs(int secs)
Max Post Time (in seconds) for reading HTTP POST data in a servlet request. |
void |
setMimeMappingFile(String mimeMapping)
Sets the mimeMapping file name for the domain. |
void |
setOptimisticSerialization(boolean b)
Sets the OptimisticSerialization value. |
void |
setOverloadProtectionEnabled(boolean enabled)
Sets the value of OverloadProtectionEnabled param |
void |
setP3PHeaderValue(String p3pHeader)
If set to a non-null value a "P3P" header will always be sent with all responses for http requests. |
void |
setPostTimeoutSecs(int secs)
Sets the value of the postTimeoutSecs attribute. |
void |
setReloginEnabled(boolean enabled)
Enables re-login for FORM/BASIC authentication in webapps. |
void |
setRtexprvalueJspParamName(boolean rtexprvalue)
Sets the value of RtexprvalueJspParamName |
void |
setWAPEnabled(boolean enable)
Sets the value of the IsWAPEnabled attribute. |
void |
setWeblogicPluginEnabled(boolean wpe)
WLS HttpRequest.getRemoteAddr() used to rely on X-Forwarded-For for its returned value. |
void |
setWorkContextPropagationEnabled(boolean workContextPropagationEnabled)
Sets the value of WorkContextPropagationEnabled |
void |
setXPoweredByHeaderLevel(String xPoweredByHeaderLevel)
Sets the level for XPoweredBy header information |
| Methods inherited from interface weblogic.management.configuration.ConfigurationMBean |
freezeCurrentValue, getName, getNotes, isSet, restoreDefaultValue, setComments, setDefaultedMBean, setName, setNotes, setPersistenceEnabled, unSet |
| Methods inherited from interface weblogic.management.WebLogicMBean |
getMBeanInfo, getObjectName, getParent, getType, isCachingDisabled, isRegistered, setParent |
| Methods inherited from interface javax.management.DynamicMBean |
getAttribute, getAttributes, invoke, setAttribute, setAttributes |
| Methods inherited from interface javax.management.MBeanRegistration |
postDeregister, postRegister, preDeregister, preRegister |
| Methods inherited from interface javax.management.NotificationBroadcaster |
addNotificationListener, getNotificationInfo, removeNotificationListener |
| Methods inherited from interface weblogic.descriptor.DescriptorBean |
addBeanUpdateListener, addPropertyChangeListener, createChildCopy, createChildCopyIncludingObsolete, getDescriptor, getParentBean, isEditable, removeBeanUpdateListener, removePropertyChangeListener |
| Method Detail |
public int getMaxPostSize()
The maximum post size this server allows for reading HTTP POST data in a servlet request. A value less than 0 indicates an unlimited size.
setMaxPostSize(int),
WebServerMBean.getMaxPostSize()public int getMaxPostTimeSecs()
Max Post Time (in seconds) for reading HTTP POST data in a servlet request. MaxPostTime < 0 means unlimited
setMaxPostTimeSecs(int),
WebServerMBean.getMaxPostTimeSecs()public String getMimeMappingFile()
Returns the name of the file containing mime-mappings for the domain.
Format of the file should be: extension=mime-typeIf this file does not exist, WebLogic Server uses an implicit mime-mapping set of mappings defined in weblogic.utils.http.HttpConstants (DEFAULT_MIME_MAPPINGS). To remove a mapping defined in implicit map just set it to blank.
setMimeMappingFile(String)public String getP3PHeaderValue()
Returns the P3PHeader value that will be sent with all responses for http requests (if non-null). The value of this header should set to the location of the policy reference file for the Web site.
For details see: http://www.w3.org/TR/p3pdeployment#Locating_PRFAlternatively, a servlet filter can be used to set the P3P header.
setP3PHeaderValue(String)public int getPostTimeoutSecs()
The amount of time this server waits between receiving chunks of data in an HTTP POST data before it times out. (This is used to prevent denial-of-service attacks that attempt to overload the server with POST data.)
setPostTimeoutSecs(int),
WebServerMBean.getPostTimeoutSecs()public String getXPoweredByHeaderLevel()
WebLogic Server uses the X-Powered-By HTTP header, as recommended by the Servlet 2.4 specification, to publish its implementation information.
Following are the options:
setXPoweredByHeaderLevel(String)public boolean isAllowAllRoles()
In the security-constraints elements defined in a Web application's web.xml deployment descriptor, the auth-constraint element indicates the user roles that should be permitted access to this resource collection. Here role-name = "*" is a compact syntax for indicating all roles in the Web application. In previous releases, role-name = "*" was treated as all users/roles defined in the realm. This parameter is a backward-compatibility switch to restore old behavior. Default behavior is one required by the spec, meaning all roles defined in the web application. If set, the value defined in weblogic.xml (container-descriptor -> allow-all-roles) takes precedence (if set) over this value.
setAllowAllRoles(boolean)public boolean isAuthCookieEnabled()
Whether authcookie feature is enabled or not.
setAuthCookieEnabled(boolean),
WebServerMBean.isAuthCookieEnabled()public boolean isClientCertProxyEnabled()
Specifies whether or not to honor the WL-Proxy-Client-Cert header coming with the request.
setClientCertProxyEnabled(boolean),
ClusterMBean.isClientCertProxyEnabled(),
ServerMBean.isClientCertProxyEnabled()public boolean isFilterDispatchedRequestsEnabled()
Indicates whether or not to apply filters to dispatched requests. This is a backward compatibility flag. Until version 8.1, WebLogic Server applied ServletFilters (if configured for the Web application) on request dispatches (and includes/forwards). Servlet 2.4 has introduced the "Dispatcher" element to make this behavior explicit. The default value is Dispatcher=REQUEST. In order to be complaint with the J2EE specification, the default value for FilterDispatchedRequestsEnabled is false beginning with WebLogic Server 9.0. Note that if you are using old descriptors (meaning web.xml does not have version=2.4), then WebLogic Server automatically uses FilterDispatchedRequestsEnabled = true for the Web applications, unless filter-dispatched-requests-enabled is explicitly set to false in weblogic.xml. This means that old applications will work fine without any modification. Additionally, during migration of old domains to the 9.0 domain, the migration plugin automatically sets this flag to true.
setFilterDispatchedRequestsEnabled(boolean)public boolean isHttpTraceSupportEnabled()
Returns the value of HttpTraceSupportEnabled.
setHttpTraceSupportEnabled(boolean),
ClusterMBean.setHttpTraceSupportEnabled(boolean),
ServerMBean.setHttpTraceSupportEnabled(boolean)public boolean isJSPCompilerBackwardsCompatible()
Global property to determine the behavior of the JSP compiler. When this property set to "true", the JSP compiler throws a translation error for JSPs that do not conform to the JSP2.0 specification. This property exists for backward compatibility.
public boolean isOptimisticSerialization()
When OptimisticSerialization is turned on, WebLogic server does not serialize-deserialize context and request attributes upon getAttribute(name) when a request gets dispatched across servlet contexts. This means you will need to make sure that the attributes common to Web applications are scoped to a common parent classloader (they are application-scoped) or placed in the system classpath if the two Web applications do not belong to the same application. When OptimisticSerialization is turned off (which is the default) WebLogic Server does serialize-deserialize context and request attributes upon getAttribute(name) to avoid the possibility of ClassCastExceptions. The value of OptimisticSerialization can also be overridden for specific Web applications by setting the optimistic-serialization value in weblogic.xml.
isOptimisticSerialization()public boolean isOverloadProtectionEnabled()
This parameter is used to enable overload protection in the webapp container against low memory conditions. When a low memory situation occurs, new session creation attempts will result in weblogic.servlet.SessionCreationException. The application code needs to catch this exception and take proper action. Alternatively appropriate error-pages can be configured in web.xml against weblogic.servlet.SessionCreationException. This check is performed only on memory and replicated sessions.
weblogic.servlet.SessionCreationException,
setOverloadProtectionEnabled(boolean)public boolean isReloginEnabled()
Beginning with the 9.0 release the FORM/BASIC authentication behavior has been modified to conform strictly to the J2EE Specification. If a user has logged-in but does not have privileges to access a resource, the 403 (FORBIDDEN) page will be returned. Turn this flag on to enable the old behavior, which was to return the user to the login form.
setReloginEnabled(boolean)public boolean isRtexprvalueJspParamName()
Global property which determines the behavior of the JSP compiler when a jsp:param attribute "name" has a request time value. Without this property set to "true", the JSP compiler throws an error for a JSP using a request time value for the "name" attribute as mandated by the JSP 2.0 spec. This property exists for backward compatibility.
setRtexprvalueJspParamName(boolean)public boolean isWAPEnabled()
Indicates whether the session ID should include JVM information. (Checking this box may be necessary when using URL rewriting with WAP devices that limit the size of the URL to 128 characters, and may also affect the use of replicated sessions in a cluster.) When this box is selected, the default size of the URL will be set at 52 characters, and it will not contain any special characters.
setWAPEnabled(boolean),
WebServerMBean.isWAPEnabled()public boolean isWeblogicPluginEnabled()
Specifies whether or not the proprietary WL-Proxy-Client-IP header should be honored. (This is needed only when WebLogic plugins are configured.)
setWeblogicPluginEnabled(boolean),
ClusterMBean.isWeblogicPluginEnabled(),
ServerMBean.isWeblogicPluginEnabled()public boolean isWorkContextPropagationEnabled()
Indicates whether or not WorkContextPropagation is enabled. By default it is turned on. There is a little overhead involved in propagating WorkContexts. Therefore, if you don't care about WorkContext propagation, turn this value off in production environments.
setWorkContextPropagationEnabled(boolean)
public void setAllowAllRoles(boolean allowAllRoles)
throws InvalidAttributeValueException
Sets the value of the backward compatibility switch AllowAllRoles attribute.
allowAllRoles -
InvalidAttributeValueException
InvalidAttributeValueExceptionisAllowAllRoles()public void setAuthCookieEnabled(boolean enable)
Sets the value of the isAuthCookieEnabled attribute.
Enables use of additional secure AuthCookie to make access to https pages with security constraints more secure. The session cookie will not be sufficient to gain access. This property can be overridden at WebServerMBean level.
isAuthCookieEnabled(),
WebServerMBean.setAuthCookieEnabled(boolean)public void setClientCertProxyEnabled(boolean ccp)
A value of true causes proxy-server plugins to pass
identity certificates from clients to all web applications that are
deployed on all server instances in the domain.
A proxy-server plugin encodes each identify certification in the
WL-Proxy-Client-Cert header and passes the header to
WebLogic Server instances. Each WebLogic Server instance takes the
certificate information from the header, trusting that it came from
a secure source, and uses that information to authenticate the
user.
If you specify true, use a ConnectionFilter to ensure that each
WebLogic Server instance accepts connections only from the machine
on which the proxy-server plugin is running. Specifying
true without using a connection filter creates a
potential security vulnerability because the
WL-Proxy-Client-Cert header can be spoofed.
A value of true overrides the value that each
server instance within the domain specifies with ServerMBean.setClientCertProxyEnabled(boolean).
By default (or if you specify false):
Each server instance can determine whether its applications trust certificates sent from the proxy server plugin.
If a server instance does not set a value for its
ClientCertProxyEnabled attribute (or if it specifies
false), the weblogic.xml deployment
descriptor for each Web application determines whether the Web
application trusts certificates sent from the proxy server
plugin.
By default (or if the deployment descriptor specifies
false), users cannot log in to the Web application
from a proxy server plugin.
ccp - The new clientCertProxyEnabled valueisClientCertProxyEnabled(),
ClusterMBean.setClientCertProxyEnabled(boolean),
ServerMBean.setClientCertProxyEnabled(boolean)
public void setFilterDispatchedRequestsEnabled(boolean enabled)
throws InvalidAttributeValueException
Sets the value of the backward-compatibility parameter "FilterDispatchedRequestsEnabled".
enabled -
InvalidAttributeValueExceptionisFilterDispatchedRequestsEnabled()public void setHttpTraceSupportEnabled(boolean tse)
Attackers may abuse HTTP TRACE functionality to gain access to information in HTTP headers such as cookies and authentication data. In the presence of other cross-domain vulnerabilities in Web browsers, sensitive header information could be read from any domains that support the HTTP TRACE method.
This attribute is for disabling HTTP TRACE support. It is present also in ClusterMBean and ServerMBean so the attribute HttpTraceSupportEnabled can be set differently for different clusters/servers
isHttpTraceSupportEnabled(),
ClusterMBean.setHttpTraceSupportEnabled(boolean),
ServerMBean.setHttpTraceSupportEnabled(boolean)public void setJSPCompilerBackwardsCompatible(boolean compat)
Sets the value of the JSPCompilerBackwardsCompatible parameter.
compat -
public void setMaxPostSize(int bytes)
throws InvalidAttributeValueException
Sets the value of the maxPostSize attribute. This parameter can be overridden at the WebServerMBean level.
Max Post Size (in bytes) for reading HTTP POST data in a servlet request. MaxPostSize < 0 means unlimited.
bytes - The new maxPostSize value
InvalidAttributeValueExceptiongetMaxPostSize(),
WebServerMBean.setMaxPostSize(int)
public void setMaxPostTimeSecs(int secs)
throws InvalidAttributeValueException
Max Post Time (in seconds) for reading HTTP POST data in a servlet request. MaxPostTime < 0 means unlimited. This param can be overridden at WebServerMBean level.
secs - The new maxPostTimeSecs value
InvalidAttributeValueExceptiongetMaxPostTimeSecs(),
WebServerMBean.setMaxPostTimeSecs(int)public void setMimeMappingFile(String mimeMapping)
Sets the mimeMapping file name for the domain.
mimeMapping - getMimeMappingFile()public void setOptimisticSerialization(boolean b)
Sets the OptimisticSerialization value.
b - isOptimisticSerialization()public void setOverloadProtectionEnabled(boolean enabled)
Sets the value of OverloadProtectionEnabled param
enabled - isOverloadProtectionEnabled()public void setP3PHeaderValue(String p3pHeader)
If set to a non-null value a "P3P" header will always be sent with all responses for http requests. The value of the P3P header will be the value assigned to this configuration parameter. The value should be equal to the location of the policy reference file for the Web site.
For details see: http://www.w3.org/TR/p3pdeployment#Locating_PRFAlternatively, a servlet filter can be used to set the P3P header.
p3pHeader - P3P Header value (location of the policy reference file)getP3PHeaderValue()
public void setPostTimeoutSecs(int secs)
throws InvalidAttributeValueException
Sets the value of the postTimeoutSecs attribute.
Timeout (in seconds) for reading HTTP POST data in a servlet request. This parameter can be overridden at the WebServerMBean level.
secs - The new postTimeoutSecs value
InvalidAttributeValueExceptiongetMaxPostTimeSecs(),
WebServerMBean.setPostTimeoutSecs(int)public void setReloginEnabled(boolean enabled)
Enables re-login for FORM/BASIC authentication in webapps. Corresponding weblogic.xml element: container-descriptor -> relogin-enabled takes precendence over this value (if set).
enabled - ReloginEnabled valueisReloginEnabled()public void setRtexprvalueJspParamName(boolean rtexprvalue)
Sets the value of RtexprvalueJspParamName
rtexprvalue - isRtexprvalueJspParamName()public void setWAPEnabled(boolean enable)
Sets the value of the IsWAPEnabled attribute. This property can be overridden at WebServerMBean level.
enable - The new WAPEnabled valueisWAPEnabled(),
WebServerMBean.setWAPEnabled(boolean)public void setWeblogicPluginEnabled(boolean wpe)
WLS HttpRequest.getRemoteAddr() used to rely on X-Forwarded-For for its returned value. This is a security hole as the HTTP header can be easily mocked and we end up with returning a wrong value. This is improved by introducing a proprietary header WL-Proxy-Client-IP from our plugins and this header will only be used if WLS is configured to use our plugins. This is duplicated both in ClusterMBean and ServerMBean so the attribute WeblogicPluginEnabled can be used cluster-wide. ClusterMBean overrides ServerMBean
wpe - The new weblogicPluginEnabled valueisWeblogicPluginEnabled(),
ClusterMBean.setWeblogicPluginEnabled(boolean),
ServerMBean.setWeblogicPluginEnabled(boolean)public void setWorkContextPropagationEnabled(boolean workContextPropagationEnabled)
Sets the value of WorkContextPropagationEnabled
workContextPropagationEnabled - isWorkContextPropagationEnabled()public void setXPoweredByHeaderLevel(String xPoweredByHeaderLevel)
Sets the level for XPoweredBy header information
xPoweredByHeaderLevel - getXPoweredByHeaderLevel()
|
Documentation is available at http://download.oracle.com/docs/cd/E13222_01/wls/docs90 Copyright 2005 BEA Systems Inc. |
||||||||||
| PREV CLASS NEXT CLASS | FRAMES NO FRAMES | ||||||||||
| SUMMARY: NESTED | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD | ||||||||||