Sunday, May 12, 2013

WebCenter Imaging: Tip of the Day - grant permissions to domain credentials


It's been a while since the last post, so I wanted to put out a quick fix tip.

If you redeploy any of your ear files, let's say the imaging.ear in this example, you may lose access to your domain credential store.

You may see an error similar to this:

java.security.AccessControlException: access denied ("oracle.security.jps.service.credstore.CredentialAccess.security,keyName=ipmkey" "read")



To remedy this, try the following:


  1. Launch wlst.sh from the ECM home: <middleware_home>/Oracle_ECM1/common/bin/wlst.sh
  2. Connect to admin server: connect() (enter username, password and t3 uri to admin server)
  3. View the current credential: listCred(map='oracle.wsm.security',key='ipmkey')
  4. Grant the permissions: grantPermission(codeBaseURL="file:${domain.home}/servers/${weblogic.Name}/tmp/_WL_user/imaging/-", permClass="oracle.security.jps.service.credstore.CredentialAccessPermission", permTarget="context=SYSTEM,mapName=oracle.wsm.security,keyName=*",permActions="*")


Hope this helps!
-ryan







1 comment:

  1. What then does it mean to be an educator? Does it signify something different than the assigned job title? What I have learned through my work in higher education is that becoming an educator is not an automatic process. Everyone who is teaching adult students is not functioning as an engaging and highly effective educator. However, it is possible to learn how to educate rather than teach and that requires making a commitment to the profession.http://www.writingdesk.pw/

    ReplyDelete