This chapter describes the changes introduced in the 11gR1 and PS1 releases. The single most important new feature in the 11gR1 release is the introduction of the Oracle WebLogic Server as the environment where applications run and where security is provisioned.
The features introduced in the 11gR1 PS1 release include the following;
The class Resource Permission. For details, see Section 18.4, "The Class oracle.security.jps.ResourcePermission."
Principal name comparison has been enhanced. For details, see Section 3.7, "Principal Name Comparison Logic."
Manual settings for policy migration have been simplified. In particular, versioning the application is no longer required. For details, see Section 15.4.1, "Parameters Controlling Policy Migration," and Section 15.4.2, "Policy Parameter Configuration According to Behavior."
The WSLT command migrateSecurityStore supports the embedded LDAP store as a target. For details, see Section 15.4.8, "Migrating Identities with the Command migrateSecurityStore."
The configuration of the identity store has been simplified. For example, previously required properties such as username.attr and login.name.attr are no longer needed when configuring an LDAP identity store.
The WSLT command reassociateSecurityStore supports an existing LDAP node as a target. For details, see Section 8.4.2.11, "reassociateSecurityStore."
Oracle Fusion Middleware pages have been improved. In particular, using these pages, one can specify the SSO service to use in a domain. For details, see the following sections:
New sections added to this guide in this release include the following:
Section 8.1.3, "Cataloging Oracle Internet Directory Attributes"
Section 8.4.2.12, "Granting Policies to Anonymous and Authenticated Roles with WLST Commands"
Section 8.4.2.13, "Application Stripe for Versioned Applications in WLST Commands"
Section I.2.1, "Missing Policies in Reassociated Policy Store"
The features introduced in the 11gR1 release include the following;
Support for application policies and roles, and the authenticated and anonymous users and roles
Credential Store Framework
Auditing framework for Oracle Platform Security Services (OPSS) events for credential and policy management, and authorization checks
Support for application lifecycle security integrated with JDeveloper
Enhanced authorization framework
Consolidation of code-based and subject-based policies in system-jazn-data.xml
Management of security with Oracle Fusion Middleware and WLST commands
New security-related WLST commands
This release introduces the following changes:
Jazn is replaced with OPSS.
Jazn Realm API is replaced by the User and Role API.
Migration of OSDT toolkit from proprietary objects to JCE is desupported.
The identity store, as previously configured in system-jazn-data.xml, is replaced by the use of WebLogic authenticators.
The functions of Oracle Jazn Administration Tool are replaced as follows:
User and Role CRUD operations are replaced by the use of the Embedded LDAP configured and operated with the Oracle WebLogic Administration Console
The configuration of login modules is replaced with the use of the Oracle WebLogic Administration Console to configure authenticators
JavaSSO is no longer supported. On a Oracle WebLogic Server domain, Single Sign-On (SSO) is automatic within clusters only when session replication is turned on.
To upgrade from a previous release to the current, see any of the following documents;