Configuration Options Related Tasks Related Topics
Use this page to define the security configuration of a remote Tuxedo access point that will be used with this WTC Service.
Access Control Lists (ACLs) limit the access to local services within a local Tuxedo access point by restricting the remote Tuxedo access points that can execute these services. Inbound policy from a remote Tuxedo access point is specified using the AclPolicy element. Outbound policy towards a remote Tuxedo access point is specified using the CredentialPolicy element. This allows WebLogic Server and Tuxedo applications to share the same set of users and the users are able to propagate their credentials from one system to the other. WebLogic Tuxedo Connector provides the following AppKey Generator plug-ins to provide user security information to Tuxedo:
Name | Description |
---|---|
ACL Policy |
The inbound access control list (ACL) policy toward requests from a remote Tuxedo access point. The allowed values are:
Note: If Interoperate is set to Yes, AclPolicy is ignored. MBean Attribute: |
Credential Policy |
The outbound access control list (ACL) policy toward requests to a remote Tuxedo access point. The allowed values are:
Note:If Interoperate is set to Yes, CredentialPolicy is ignored. MBean Attribute: |
Min Encryption Level |
The minimum encryption key length (in bits) this remote Tuxedo
access point uses when establishing a session connection. A value
of Value Restrictions:
MBean Attribute: Secure value: |
Max Encryption Level |
The maximum encryption key length (in bits) this remote Tuxedo
access point uses when establishing a session connection. A value
of Value Restrictions:
MBean Attribute: |
Allow Anonymous |
Specifies whether the anonymous user is allowed to access remote Tuxedo services.
Note: If the anonymous user is allowed to access Tuxedo,
the default AppKey will be used for MBean Attribute: |
Default AppKey |
The default AppKey value to be used by the anonymous user and other users who are not defined in the user database if the plug-in allows them to access Tuxedo.
Note: The MBean Attribute: |
AppKey Generator |
Specifies the type of AppKey plug-in used. The allowed values are:
MBean Attribute: |
Tp User File |
The full path to the user password file containing UID/GID information. (This field is only relevant if you specify TpUsrFile as the AppKey Generator.)
Note: This file is generated by the Tuxedo
MBean Attribute: |
Tuxedo UID Keyword |
The keyword for Tuxedo UID (User ID) used in the
WlsUser when using the Tuxedo migration utility
Note: The keyword is used to find Tuxedo UID in the user record in the embedded LDAP database. MBean Attribute: |
Tuxedo GID Keyword |
The keyword for Tuxedo GID (Group ID) used in the
WlsUser when using the Tuxedo migration utility
Note: The keyword is used to find Tuxedo GID in the user record in the embedded LDAP database. MBean Attribute: |
Custom AppKey Class |
The full pathname to the custom AppKey generator class. (This class is only relevant if you specify Custom as the AppKey Generator.)
Note: This class is loaded at runtime if the
MBean Attribute: |
Custom AppKey Param |
The optional parameters to be used by the custom AppKey class at the class initialization time. (This class is only relevant if you specify Custom as the AppKey Generator.) MBean Attribute: |