SecureModeMBean


Overview  |   Related MBeans  |   Attributes  |   Operations

Overview

Controls the behavior of Secure Mode in the current WebLogic Server domain. Attributes control whether secure mode is enabled and control the validation that is performed during startup.

       
Since12.2.1.1.0
Fully Qualified Interface NameIf you use the getMBeanInfo operation in MBeanTypeServiceMBean, supply the following value as this MBean's fully qualified interface name:
weblogic.management.configuration.SecureModeMBean
Factory Methods No factory methods. Instances of this MBean are created automatically.
Access Points You can access this MBean from the following MBean attributes:


    Attributes

    This section describes the following attributes:


    CachingDisabled

    Private property that disables caching in proxies.

    This attribute is not dynamic and requires a server restart to take effect.

           
    Privileges Read only
    Typeboolean
    Redeploy or Restart required Changes take effect after you redeploy the module or restart the server.

    DynamicallyCreated

    Return whether the MBean was created dynamically or is persisted to config.xml

    This attribute is not dynamic and requires a server restart to take effect.

           
    Privileges Read only
    Typeboolean
    Redeploy or Restart required Changes take effect after you redeploy the module or restart the server.

    Id

    Return the unique id of this MBean instance

    This attribute is not dynamic and requires a server restart to take effect.

           
    Privileges Read only
    Typelong
    Redeploy or Restart required Changes take effect after you redeploy the module or restart the server.

    MBeanInfo

    Returns the MBean info for this MBean.

    This attribute is not dynamic and requires a server restart to take effect.

    Deprecated.

           
    Privileges Read only
    Typejavax.management.MBeanInfo
    Redeploy or Restart required Changes take effect after you redeploy the module or restart the server.

    Name

    The user-specified name of this MBean instance.

    This name is included as one of the key properties in the MBean's javax.management.ObjectName:

    Name=user-specified-name

    This attribute is not dynamic and requires a server restart to take effect.

           
    Privileges Read/Write
    Typejava.lang.String

    Notes

    Optional information that you can include to describe this configuration.

    WebLogic Server saves this note in the domain's configuration file (config.xml) as XML PCDATA. All left angle brackets (<) are converted to the XML entity &lt;. Carriage returns/line feeds are preserved.

    Note: If you create or edit a note from the Administration Console, the Administration Console does not preserve carriage returns/line feeds.

    This attribute is not dynamic and requires a server restart to take effect.

               
    Privileges Read/Write
    Security rolesWrite access is granted only to the following roles:
    • Deployer
    • Operator
    Typejava.lang.String

    ObjectName

    Returns the ObjectName under which this MBean is registered in the MBean server.

    This attribute is not dynamic and requires a server restart to take effect.

    Deprecated.

           
    Privileges Read only
    Typeweblogic.management.WebLogicObjectName
    Redeploy or Restart required Changes take effect after you redeploy the module or restart the server.

    Parent

    Return the immediate parent for this MBean

    This attribute is not dynamic and requires a server restart to take effect.

           
    Privileges Read/Write
    Type

    Registered

    Returns false if the MBean represented by this object has been unregistered.

    This attribute is not dynamic and requires a server restart to take effect.

    Deprecated.

           
    Privileges Read only
    Typeboolean
    Redeploy or Restart required Changes take effect after you redeploy the module or restart the server.

    RestrictiveJMXPolicies

    Returns whether restrictive policies will be used for JMX authorization.

    If secure mode is enabled and restrictive policies are enabled, then the default policies for JMX only allow MBean access to the standard WLS roles (Admin, Deployer, Operator, or Monitor). If changed as part of a non-dynamic activation, then the ServerSecurityRuntimeMBean.resetDefaultPolicies method should also be invoked.

           
    Privileges Read/Write
    Typeboolean
    Default Valuetrue

    SecureModeEnabled

    Returns whether the domain will run in secure mode.

    In secure mode, the configuration defaults are those recommended for securing a domain. The authorization policies for JNDI and MBean access are more restrictive in secure mode. In addition, WLS will validate the domain configuration and log warnings and errors for any insecure settings.

    Secure mode requires the domain to be in production mode.

           
    Privileges Read/Write
    Typeboolean

    Tags

    Return all tags on this Configuration MBean

    This attribute is dynamic and takes effect immediately.

           
    Available Since Release 12.2.1.0.0
    Privileges Read/Write
    Typeclass java.lang.String[]

    Type

    Returns the type of the MBean.

    This attribute is not dynamic and requires a server restart to take effect.

           
    Privileges Read only
    Typejava.lang.String
    Redeploy or Restart required Changes take effect after you redeploy the module or restart the server.

    WarnOnAnonymousRequests

    Returns whether a warning should be logged if anonymous RMI requests are enabled.

    If the warning is enabled, then a message will be logged if anonymous RMI requests are enabled.

    This attribute was added in the July 2021 Patch Set Update (PSU).

           
    Privileges Read/Write
    Typeboolean
    Default Valuetrue

    WarnOnAuditing

    Returns whether warnings should be logged if auditing not enabled.

    If secure mode is enabled and warnings are enabled, then messages will be logged if auditing is not enabled.

           
    Privileges Read/Write
    Typeboolean
    Default Valuetrue

    WarnOnInsecureApplications

    Returns whether warnings should be logged if applications are not secure.

    If secure mode is enabled and warnings are enabled, then messages will be logged for insecure application elements.

           
    Privileges Read/Write
    Typeboolean
    Default Valuetrue

    WarnOnInsecureDataSources

    Returns whether warnings should be logged if data sources are not secure.

    If production mode is enabled and warnings are enabled, then messages will be logged for insecure data sources.

    This attribute was added in the October 2021 Patch Set Update (PSU).

           
    Privileges Read/Write
    Typeboolean
    Default Valuetrue

    WarnOnInsecureFileSystem

    Returns whether warnings should be logged if the File System is not secure.

    If secure mode is enabled and warnings are enabled, then messages will be logged for insecure file system setting.

           
    Privileges Read/Write
    Typeboolean
    Default Valuetrue

    WarnOnInsecureSSL

    Returns whether warnings should be logged if the SSL configuration is not secure.

    If secure mode is enabled and warnings are enabled, then messages will be logged for insecure SSL configuration settings.

           
    Privileges Read/Write
    Typeboolean
    Default Valuetrue

    WarnOnJavaSecurityManager

    Returns whether warnings should be logged if the Java Security Manager is not enabled.

    If secure mode is enabled and warning is enabled, then a messages will be logged if the Java Security Manager is not enabled.

    As of the July 2021 Patch Set Update (PSU), the default value is false.

           
    Privileges Read/Write
    Typeboolean
    Default Valuetrue

    WarnOnPatches

    Returns whether a warning should be logged if required WebLogic Server or Coherence CPU patches are not applied.

    If the warning is enabled, then a message will be logged if required CPU patches are not applied.

    This attribute was added in the July 2021 Patch Set Update (PSU).

           
    Privileges Read/Write
    Typeboolean
    Default Valuetrue

    WarnOnPorts

    Returns whether a warning should be logged if ports configuration is insecure.

    If the warning is enabled, then a message will be logged if the network port configuration is insecure.

    This attribute was added in the July 2021 Patch Set Update (PSU).

           
    Privileges Read/Write
    Typeboolean
    Default Valuetrue

    WarnOnSamples

    Returns whether a warning should be logged if samples are installed.

    If the warning is enabled, then a message will be logged if samples are installed.

    This attribute was added in the January 2022 Patch Set Update (PSU).

           
    Privileges Read/Write
    Typeboolean
    Default Valuetrue

    WarnOnUserLockout

    Returns whether a warning should be logged if the user lockout configuration is not secure.

    If the warning is enabled, then a message will be logged if the user lockout settings are not secure.

    This attribute was added in the July 2021 Patch Set Update (PSU).

           
    Privileges Read/Write
    Typeboolean
    Default Valuetrue

    WarnOnUsernamePasswords

    Returns whether a warning should be logged if usernames or password configuration is insecure.

    If the warning is enabled, then a message will be logged if wellknown administrator usernames are present or password validation configuration is insecure.

    This attribute was added in the July 2021 Patch Set Update (PSU).

           
    Privileges Read/Write
    Typeboolean
    Default Valuetrue


    Operations

    This section describes the following operations:


    addTag

    Add a tag to this Configuration MBean. Adds a tag to the current set of tags on the Configuration MBean. Tags may contain white spaces.

       
    Operation Name"addTag"
    ParametersObject [] {  tag }

    where:

    • tag is an object of type java.lang.String that specifies:

      tag to be added to the MBean

    SignatureString [] { "java.lang.String" }
    Returns boolean
    Exceptions
    • java.lang.IllegalArgumentException
      IllegalArgumentException if the tag contains illegal punctuation

    freezeCurrentValue

    If the specified attribute has not been set explicitly, and if the attribute has a default value, this operation forces the MBean to persist the default value.

    Unless you use this operation, the default value is not saved and is subject to change if you update to a newer release of WebLogic Server. Invoking this operation isolates this MBean from the effects of such changes.

    Note: To insure that you are freezing the default value, invoke the restoreDefaultValue operation before you invoke this.

    This operation has no effect if you invoke it on an attribute that does not provide a default value or on an attribute for which some other value has been set.

    Deprecated. 9.0.0.0

       
    Operation Name"freezeCurrentValue"
    ParametersObject [] {  attributeName }

    where:

    • attributeName is an object of type java.lang.String that specifies:

      attributeName

    SignatureString [] { "java.lang.String" }
    Returns void
    Exceptions
    • javax.management.AttributeNotFoundException
    • javax.management.MBeanException

    getInheritedProperties

    Return all properties' names whose value is inherited from template mbean. this is a convenient method to get inheritance info on multiple properties in one jmx call.

       
    Operation Name"getInheritedProperties"
    ParametersObject [] {  propertyNames }

    where:

    • propertyNames is an object of type [Ljava.lang.String; that specifies:

      properties to check

    SignatureString [] { "[Ljava.lang.String;" }
    Returns class

    isInherited

    Check if the value of a property is inherited from template mbean or not.

       
    Operation Name"isInherited"
    ParametersObject [] {  propertyName }

    where:

    • propertyName is an object of type java.lang.String that specifies:

      the name of the property

    SignatureString [] { "java.lang.String" }
    Returns boolean

    isSet

    Returns true if the specified attribute has been set explicitly in this MBean instance.

       
    Operation Name"isSet"
    ParametersObject [] {  propertyName }

    where:

    • propertyName is an object of type java.lang.String that specifies:

      property to check

    SignatureString [] { "java.lang.String" }
    Returns boolean

    removeTag

    Remove a tag from this Configuration MBean

       
    Operation Name"removeTag"
    ParametersObject [] {  tag }

    where:

    • tag is an object of type java.lang.String that specifies:

      tag to be removed from the MBean

    SignatureString [] { "java.lang.String" }
    Returns boolean
    Exceptions
    • java.lang.IllegalArgumentException
      IllegalArgumentException if the tag contains illegal punctuation

    restoreDefaultValue

    If the specified attribute has a default value, this operation removes any value that has been set explicitly and causes the attribute to use the default value.

    Default values are subject to change if you update to a newer release of WebLogic Server. To prevent the value from changing if you update to a newer release, invoke the freezeCurrentValue operation.

    This operation has no effect if you invoke it on an attribute that does not provide a default value or on an attribute that is already using the default.

    Deprecated. 9.0.0.0

       
    Operation Name"restoreDefaultValue"
    ParametersObject [] {  attributeName }

    where:

    • attributeName is an object of type java.lang.String that specifies:

      attributeName

    SignatureString [] { "java.lang.String" }
    Returns void
    Exceptions
    • javax.management.AttributeNotFoundException

    unSet

    Restore the given property to its default value.

       
    Operation Name"unSet"
    ParametersObject [] {  propertyName }

    where:

    • propertyName is an object of type java.lang.String that specifies:

      property to restore

    SignatureString [] { "java.lang.String" }
    Returns void