This MBean contains configuration information for the Read-Only SQL Authentication provider.Deprecation of MBeanHome and Type-Safe InterfacesThis is a type-safe interface for a WebLogic Server MBean, which you can import into your client classes and access through weblogic.management.MBeanHome. As of 9.0, the MBeanHome interface and all type-safe interfaces for WebLogic Server MBeans are deprecated. Instead, client classes that interact with WebLogic Server MBeans should use standard JMX design patterns in which clients use the javax.management.MBeanServerConnection interface to discover MBeans, attributes, and attribute types at runtime. For more information, see "Developing Manageable Applications with JMX" on http://www.oracle.com/technology/documentation/index.html.
If you use the getMBeanInfo
operation in MBeanTypeServiceMBean, supply the following value as this MBean's fully qualified interface name:
weblogic.security.providers.authentication.ReadOnlySQLAuthenticatorMBean
No factory methods. Instances of this MBean are created automatically.
Because this MBean extends or implements AuthenticationProviderMBean, you can also access this MBean by retrieving AuthenticationProviderMBeans. The following attributes contain AuthenticationProviderMBeans and its subtypes:
|
The following MBeans extend or implement this MBean type:
|
This section describes attributes that contain child MBeans. For more information about the MBean hierarchy, refer to WebLogic Server MBean Data Model.
|
Returns the realm that contains this security provider. Returns null if this security provider is not contained by a realm.
Factory Methods | No explicit creator method. The child shares the lifecycle of its parent. |
Privileges | Read only |
Type | RealmMBean |
This section describes the following attributes:
Returns how the login sequence uses the Authentication provider.
A REQUIRED
value specifies this LoginModule must
succeed. Even if it fails, authentication proceeds down the list of
LoginModules for the configured Authentication providers. This
setting is the default.
A REQUISITE
value specifies this LoginModule must
succeed. If other Authentication providers are configured and this
LoginModule succeeds, authentication proceeds down the list of
LoginModules. Otherwise, control is return to the application.
A SUFFICIENT
value specifies this LoginModule need
not succeed. If it does succeed, return control to the application.
If it fails and other Authentication providers are configured,
authentication proceeds down the LoginModule list.
An OPTIONAL
value specifies this LoginModule need
not succeed. Whether it succeeds or fails, authentication proceeds
down the LoginModule list.
Privileges | Read/Write |
Type | java.lang.String |
Default Value | REQUIRED |
Legal Values |
|
Redeploy or Restart required | Changes take effect after you redeploy the module or restart the server. |
The name of the JDBC data source used for database access.
Privileges | Read/Write |
Type | java.lang.String |
A short description of the DBMS Authentication provider.
Privileges | Read only |
Type | java.lang.String |
Default Value | Provider that performs DBMS authentication |
Redeploy or Restart required | Changes take effect after you redeploy the module or restart the server. |
Indicates whether user and group descriptions are supported by the database used by the authentication provider.
Privileges | Read/Write |
Type | boolean |
Default Value | true |
Returns whether group membership hierachies found during recursive membership lookup will be cached. Ie: each subtree found will be cached.
Privileges | Read/Write |
Type | java.lang.Boolean |
Redeploy or Restart required | Changes take effect after you redeploy the module or restart the server. |
Returns the maximum number of seconds a group membership hierarchy entry is valid in the LRU cache.
Privileges | Read/Write |
Type | java.lang.Integer |
Default Value | 60 |
Redeploy or Restart required | Changes take effect after you redeploy the module or restart the server. |
Specifies whether recursive group membership searching is unlimited or limited. Valid values are unlimited and limited.
Privileges | Read/Write |
Type | java.lang.String |
Default Value | unlimited |
Legal Values |
|
Returns the maximum size of the LRU cache for holding group membership hierarchies if caching is enabled.
Privileges | Read/Write |
Type | java.lang.Integer |
Default Value | 100 |
Redeploy or Restart required | Changes take effect after you redeploy the module or restart the server. |
This specifies how many levels of group membership can be searched. This setting is valid only if Group Membership Searching is set to limited. Valid values are 0 and positive integers. For example, 0 indicates only direct group memberships will be found, a positive number indicates the number of levels to go down.
Privileges | Read/Write |
Type | java.lang.Integer |
Default Value | 0 |
Privileges | Read only |
Type | java.lang.String |
Default Value | ReadOnlySQLAuthenticator |
Redeploy or Restart required | Changes take effect after you redeploy the module or restart the server. |
No description provided.
Privileges | Read/Write |
Type | boolean |
The name of the Java class for the Read-Only DBMS Authentication Provider.
Privileges | Read only |
Type | java.lang.String |
Default Value | weblogic.security.providers.authentication.DBMSSQLReadOnlyAuthenticationProviderImpl |
Redeploy or Restart required | Changes take effect after you redeploy the module or restart the server. |
The SQL statement used to retrieve the description of a group. Only valid if Descriptions Supported is enabled. The SQL statement requires a single parameter for the group name and must return a resultSet containing at most a single record containing the group description.
Privileges | Read/Write |
Type | java.lang.String |
Default Value | SELECT G_DESCRIPTION FROM GROUPS WHERE G_NAME = ? |
The SQL statement used to retrieve the description of a specific user. Only valid if Descriptions Supported is enabled. The SQL statement requires a single parameter for the username and must return a resultSet containing at most a single record containing the user description.
Privileges | Read/Write |
Type | java.lang.String |
Default Value | SELECT U_DESCRIPTION FROM USERS WHERE U_NAME = ? |
The SQL statement used to look up a user's password. The SQL statement requires a single parameter for the username and must return a resultSet containing at most a single record containing the password.
Privileges | Read/Write |
Type | java.lang.String |
Default Value | SELECT U_PASSWORD FROM USERS WHERE U_NAME = ? |
The SQL statement used to look up a group. The SQL statement requires a single parameter for the group name and must return a resultSet containing at most a single record containing the group
Privileges | Read/Write |
Type | java.lang.String |
Default Value | SELECT G_NAME FROM GROUPS WHERE G_NAME = ? |
The SQL statement used to look up members of a group. The SQL statement requires two parameters: a group name and a member or group name. It must return a resultSet containing the group names that matched
Privileges | Read/Write |
Type | java.lang.String |
Default Value | SELECT G_MEMBER FROM GROUPMEMBERS WHERE G_NAME = ? AND G_MEMBER = ? |
The SQL statement used to retrieve group names that match a wildcard The SQL statement requires a single parameter for the wildcarded group name and return a resultSet containing matching group names
Privileges | Read/Write |
Type | java.lang.String |
Default Value | SELECT G_NAME FROM GROUPS WHERE G_NAME LIKE ? |
The SQL statement used to look up the groups a user or group is a member of. The SQL statement requires a single parameter for the username or group name and returns a resultSet containing the names of the groups that matched.
Privileges | Read/Write |
Type | java.lang.String |
Default Value | SELECT G_NAME FROM GROUPMEMBERS WHERE G_MEMBER = ? |
The SQL statement used to retrieve users that match a particular wildcard search The SQL statement requires a single parameter for the wildcarded usernames and returns a resultSet containing matching usernames
Privileges | Read/Write |
Type | java.lang.String |
Default Value | SELECT U_NAME FROM USERS WHERE U_NAME LIKE ? |
The SQL statement used to look up a user. The SQL statement requires a single parameter for the username and must return a resultSet containing at most a single record containing the user.
Privileges | Read/Write |
Type | java.lang.String |
Default Value | SELECT U_NAME FROM USERS WHERE U_NAME = ? |
The version number of the DBMS Authentication provider.
Privileges | Read only |
Type | java.lang.String |
Default Value | 1.0 |
Redeploy or Restart required | Changes take effect after you redeploy the module or restart the server. |
This section describes the following operations:
Advances the list to the next element in the list.
Operation Name | "advance" |
Parameters | Object [] {
cursor }
where:
|
Signature | String [] {
"java.lang.String" } |
Returns |
void
|
weblogic.management.utils.InvalidCursorException
Indicates that the caller is finished using the list, and that the resources held on behalf of the list may be released. If the caller traverses through all the elements in the list, the caller need not call this method. In other words, it is used to let the caller close the list without reading each element that is returned.
Operation Name | "close" |
Parameters | Object [] {
cursor }
where:
|
Signature | String [] {
"java.lang.String" } |
Returns |
void
|
weblogic.management.utils.InvalidCursorException
The name of the current item in the list. Returns null if there is no current item.
Operation Name | "getCurrentName" |
Parameters | Object [] {
cursor }
where:
|
Signature | String [] {
"java.lang.String" } |
Returns | String
|
weblogic.management.utils.InvalidCursorException
Gets a group's description.
Operation Name | "getGroupDescription" |
Parameters | Object [] {
groupName }
where:
|
Signature | String [] {
"java.lang.String" } |
Returns | String
|
weblogic.management.utils.NotFoundException
weblogic.management.utils.InvalidParameterException
Gets a user's description.
Operation Name | "getUserDescription" |
Parameters | Object [] {
userName }
where:
|
Signature | String [] {
"java.lang.String" } |
Returns | String
|
weblogic.management.utils.NotFoundException
weblogic.management.utils.InvalidParameterException
Indicates whether the specified group exists.
Operation Name | "groupExists" |
Parameters | Object [] {
groupName }
where:
|
Signature | String [] {
"java.lang.String" } |
Returns |
boolean
|
weblogic.management.utils.InvalidParameterException
Returns true if there are more objects in the list, and false otherwise.
Operation Name | "haveCurrent" |
Parameters | Object [] {
cursor }
where:
|
Signature | String [] {
"java.lang.String" } |
Returns |
boolean
|
weblogic.management.utils.InvalidCursorException
Indicates whether a user or group is a member of the group that you specify. A recursive search returns true if the member belongs to the group that you specify or to any of the groups contained within that group."
Operation Name | "isMember" |
Parameters | Object [] {
parentGroupName, memberUserOrGroupName, recursive }
where:
|
Signature | String [] {
"java.lang.String",
"java.lang.String",
"java.lang.Boolean" } |
Returns |
boolean
|
weblogic.management.utils.NotFoundException
weblogic.management.utils.InvalidParameterException
Searches for a user name that matches a pattern.
This method returns a cursor that you can pass to the methods
from weblogic.management.utils.NameListerMBean
(which
this MBean extends) to iterate through the returned list.
This method does not sort the results.
Operation Name | "listGroups" |
Parameters | Object [] {
groupNameWildcard, maximumToReturn }
where:
|
Signature | String [] {
"java.lang.String",
"java.lang.Integer" } |
Returns | String
|
weblogic.management.utils.InvalidParameterException
Searches for a user name that matches a pattern.
This method returns a cursor that you can pass to the methods
from weblogic.management.utils.NameListerMBean
(which
this MBean extends) to iterate through the returned list.
This method does not sort the results.
Operation Name | "listUsers" |
Parameters | Object [] {
userNameWildcard, maximumToReturn }
where:
|
Signature | String [] {
"java.lang.String",
"java.lang.Integer" } |
Returns | String
|
weblogic.management.utils.InvalidParameterException
Indicates whether the specified user exists.
Operation Name | "userExists" |
Parameters | Object [] {
userName }
where:
|
Signature | String [] {
"java.lang.String" } |
Returns |
boolean
|
weblogic.management.utils.InvalidParameterException
Operation Name | "wls_getDisplayName" |
Parameters | null |
Signature | null |
Returns | String
|