RDBMSSecurityStoreMBean


Overview  |   Related MBeans  |   Attributes  |   Operations

Overview

The MBean that represents configuration attributes for a RDBMS security store. It is used to specify the required and optional properties for connecting to a RDBMS back-end store.

   
Fully Qualified Interface NameIf you use the getMBeanInfo operation in MBeanTypeServiceMBean, supply the following value as this MBean's fully qualified interface name:
weblogic.management.security.RDBMSSecurityStoreMBean
Factory Methods No factory methods. Instances of this MBean are created automatically.


Related MBeans

This section describes attributes that provide access to other MBeans.


    Realm

    Returns the realm that contains this RDBMS security store. Returns null if this RDBMS security store is not contained by a realm.

           
    Privileges Read only
    TypeRealmMBean
    Relationship type: Reference.


    Attributes

    This section describes the following attributes:


    ConnectionProperties

    The JDBC driver specific connection parameters. This attribute is a comma-delimited list of key-value properties to pass to the driver for configuration of JDBC connection pool, in the form of xxKey=xxValue, xxKey=xxValue. The syntax of the attribute will be validated and an InvalidAttributeValueException is thrown if the check failed.

           
    Privileges Read/Write
    Typejava.lang.String

    ConnectionURL

    The URL of the database to which to connect. The format of the URL varies by JDBC driver.

    The URL is passed to the JDBC driver to create the physical database connections.

           
    Privileges Read/Write
    Typejava.lang.String

    DriverName

    The full package name of the JDBC driver class used to create the physical database connections in the connection pool. Note that this driver class must be in the classpath of any server to which it is deployed.

    For example:

    1. oracle.jdbc.OracleDriver
    2. com.microsoft.sqlserver.jdbc.SQLServerDriver

    It must be the name of a class that implements the java.sql.Driver interface. The full pathname of the JDBC driver is available in the documentation.

           
    Privileges Read/Write
    Typejava.lang.String

    JMSExceptionReconnectAttempts

    The number of times to attempt to reconnect if the JMS system notifies Kodo of a serious connection error. The default is 0, and by default the error is logged but ignored. The value cannot be less than 0.

           
    Privileges Read/Write
    Typeint
    Default Value0
    Minimum value0

    JMSTopic

    The JMS topic to which the Kodo remote commit provider should publish notifications and subscribe for notifications sent from other JVMs. This setting varies depending on the application server in use.

           
    Privileges Read/Write
    Typejava.lang.String

    JMSTopicConnectionFactory

    The JNDI name of a javax.jms.TopicConnectionFactory instance to use for finding JMS topics. This setting varies depending on the application server in use. Consult the JMS documentation for details about how this parameter should be specified.

           
    Privileges Read/Write
    Typejava.lang.String

    JNDIPassword

    The password to authenticate the user defined in the JNDIUsername attribute for Kodo notification.

    When getting the value of this attribute, WebLogic Server does the following:

    1. Retrieves the value of the JNDIPasswordEncrypted attribute.

    2. Decrypts the value and returns the unencrypted password as a String.

    When you set the value of this attribute, WebLogic Server does the following:

    1. Encrypts the value.

    2. Sets the value of the JNDIPasswordEncrypted attribute to the encrypted value.

    Using this attribute (JNDIPassword) is a potential security risk because the String object (which contains the unencrypted password) remains in the JVM's memory until garbage collection removes it and the memory is reallocated. Depending on how memory is allocated in the JVM, a significant amount of time could pass before this unencrypted data is removed from memory.

    Instead of using this attribute, use JNDIPasswordEncrypted.

    For more information, see:

           
    Privileges Read/Write
    Typejava.lang.String
    Encryptedtrue

    JNDIPasswordEncrypted

    Returns the encrypted password to authenticate the user defined in the JNDIUsername attribute for Kodo notification.

    To set this attribute, use weblogic.management.EncryptionHelper.encrypt() to encrypt the value. Then set this attribute to the output of the encrypt() method.

    To compare a password that a user enters with the encrypted value of this attribute, go to the same WebLogic Server instance that you used to set and encrypt this attribute and use weblogic.management.EncryptionHelper.encrypt() to encrypt the user-supplied password. Then compare the encrypted values.

           
    Privileges Read/Write
    Typebyte[]
    Encryptedtrue

    JNDIUsername

    The JNDI user name used for Kodo notification.

           
    Privileges Read/Write
    Typejava.lang.String

    Name

    The name of this configuration.

           
    Privileges Read only
    Typejava.lang.String
    Default ValueRDBMSSecurityStore
    Redeploy or Restart required Changes take effect after you redeploy the module or restart the server.

    NotificationProperties

    The comma-delimited list of key-value properties to pass to the JNDI InitialContext on construction, in the form of xxKey=xxValue, xxKey=xxValue.

    The following are examples of keys:

    1. java.naming.provider.url:

      property for specifying configuration information for the service provider to use. The value of the property should contain a URL string (For example: iiops://localhost:7002).

    2. java.naming.factory.initial:

      property for specifying the initial context factory to use. The value of the property should be the fully qualified class name of the factory class that will create an initial context (For example: weblogic.jndi.WLInitialContextFactory).



    When setting the attribute, the syntax of its value is validated, and an InvalidAttributeValueException is thrown if the check fails.

           
    Privileges Read/Write
    Typejava.lang.String

    Password

    The password for the user specified in the Username attribute for connecting to the datastore.

    When getting the value of this attribute, WebLogic Server does the following:

    1. Retrieves the value of the PasswordEncrypted attribute.

    2. Decrypts the value and returns the unencrypted password as a String.

    When you set the value of this attribute, WebLogic Server does the following:

    1. Encrypts the value.

    2. Sets the value of the PasswordEncrypted attribute to the encrypted value.

    Note that use of the Password attribute is a potential security risk because the String object that contains the unencrypted password remains in the JVM's memory until garbage collection removes it and the memory is reallocated. Depending on how memory is allocated in the JVM, a significant amount of time could pass before this unencrypted data is removed from memory.

    Instead of using this attribute, use PasswordEncrypted.

    For more information, see:

           
    Privileges Read/Write
    Typejava.lang.String
    Encryptedtrue

    PasswordEncrypted

    Returns the encrypted password to authenticate the user defined in the Username attribute when connecting to the data store.

    To set this attribute, use weblogic.management.EncryptionHelper.encrypt() to encrypt the value. Then set this attribute to the output of the encrypt() method.

    To compare a password that a user enters with the encrypted value of this attribute, go to the same WebLogic Server instance that you used to set and encrypt this attribute and use weblogic.management.EncryptionHelper.encrypt() to encrypt the user-supplied password. Then compare the encrypted values.

           
    Privileges Read/Write
    Typebyte[]
    Encryptedtrue

    Username

    The username to use when connecting to the datastore.

           
    Privileges Read/Write
    Typejava.lang.String


    Operations

    This section describes the following operations:


    isSet

    Returns true if the specified attribute has been set explicitly in this MBean instance.

       
    Operation Name"isSet"
    ParametersObject [] {  propertyName }

    where:

    • propertyName is an object of type java.lang.String that specifies:

      property to check

    SignatureString [] { "java.lang.String" }
    Returns boolean
    Exceptions
    • java.lang.IllegalArgumentException

    unSet

    Restore the given property to its default value.

       
    Operation Name"unSet"
    ParametersObject [] {  propertyName }

    where:

    • propertyName is an object of type java.lang.String that specifies:

      property to restore

    SignatureString [] { "java.lang.String" }
    Returns void
    Exceptions
    • java.lang.IllegalArgumentException
      UnsupportedOperationException if called on a runtime implementation.

    wls_getDisplayName

    Returns the display name of an MBean.

    Deprecated 9.0.0.0

       
    Operation Name"wls_getDisplayName"
    Parametersnull
    Signaturenull
    ReturnsString