- Graph Developer's Guide for Property Graph
- Getting Started with Oracle Property Graphs
- Graph Visualization Application
- Kerberos Enabled Authentication for the Graph Visualization Application
- Preparing the Graph Visualization Application for Kerberos Authentication
7.5.2 Preparing the Graph Visualization Application for Kerberos Authentication
In order to use Kerberos authentication, you must enter your Active Directory
credentials in the Graph Visualization application login page.
To enable Kerberos authentication for the Graph Visualization application, follow the steps shown:
- Locate the
web.xml
file for your installation.You can locate theWEB-INF/web.xml
inside the Graph VisualizationWAR
file for your installation as shown in the following table:Table 7-4 Location of
WEB-INF/web.xml
fileType of Installation WAR file Location Standalone installation (RPM) graphviz-<version>-pgviz<graphviz-version>.war
/opt/oracle/graph/graphviz
Apache Tomcat Deployment: graphviz-<version>-pgviz<graphviz-version>-tomcat.war
<version> denotes the downloaded Oracle Graph Server and Client version.
- Download
oracle-graph-webapps-<version>.zip
from Oracle Software Delivery Cloud - Unzip the file into a directory of your choice.
- Locate the
.war
file for deploying the Graph Visualization application to Tomcat. It follows the naming pattern:graphviz-<version>-pgviz<graphviz-version>-tomcat.war
Oracle WebLogic Server Deployment graphviz-<version>-pgviz<graphviz-version>-wls.war
<version> denotes the downloaded Oracle Graph Server and Client version.
- Download
oracle-graph-webapps-<version>.zip
from Oracle Software Delivery Cloud - Unzip the file into a directory of your choice.
- Locate the
.war
file for deploying the Graph Visualization application to Oracle WebLogic Server. It follows the naming pattern:graphviz-<version>-pgviz<graphviz-version>-wls.war
- Download
- Extract the appropriate
WAR
file to a directory of your choice by executing the following command:unzip graphviz-*.war -d <war-file-extraction-path>
- Locate and open the
WEB-INF/web.xml
file for update using any file editor of your choice. For example:cd <war-file-extraction-path>
vi WEB-INF/web.xml
- Enable the
graphviz.driver.auth.kerberos
parameter as shown:<context-param> <param-name>graphviz.driver.auth.kerberos</param-name> <param-value>true</param-value> </context-param>
Setting this flag true initiates the Graph Visualization application to install its ownokinit
package. - Optionally. set the cache directory that will be used by the Graph Visualization
application to temporarily store Kerberos tickets given by clients as shown
<context-param> <param-name>graphviz.driver.auth.kerberos.cache_dir</param-name> <param-value>/dev/shm/graph_cache</param-value> </context-param>
The default value is /dev/shm/graph_cache. If the directory does not exist, it will be automatically created upon server startup. - Optionally, set the maximum amount of concurrent Kerberos active sessions in the Graph
Visualization application.
<context-param> <param-name>graphviz.driver.auth.kerberos.max_cache_size</param-name> <param-value>64</param-value> </context-param>
- Optionally, modify the directory where
okinit
package will be installed, by updating the following parameter:<context-param> <param-name>graphviz.driver.auth.kerberos.okinit-directory</param-name> <param-value>/tmp</param-value> </context-param>
Note:
The default value is /tmp and you must have executable permission for the directory. - Optionally, set the following parameter if there is a location for an existing
okinit
package on your machine. In this case, the GraphVisualization application will not install its ownokinit
package.<context-param> <param-name>graphviz.driver.auth.kerberos.graphviz.driver.auth.okinit-location</param-name> <param-value></param-value> </context-param>
Note:
The GraphVisualization application must have executable permission for the directory location. - Finally, after all the preceding updates, repackage the
WAR
file by executing the following commands:cd <war-file-extraction-path> jar -cvf <war-file-name> *
- Redeploy the
WAR
file to the appropriate directory for your installation.Kerberos authentication is enabled for the Graph Visualization Application.