Mahendra Krishnapatnam is a cybersecurity expert and technology thought leader with extensive experience in identity and access management (IAM), cloud security, and AI-driven threat mitigation. He actively contributes to research, mentors startups, and serves as a judge for global cybersecurity and technology awards. His work bridges innovation and impact across healthcare, finance, and public sector domains.
Wednesday, May 15, 2013
Tuesday, May 14, 2013
Configure Logging level for OIF 11g
One can do the OIF logger setting either from EM console or wlst command.
If you want to do it through wlst command, here are the steps:
If you want to do it through wlst command, here are the steps:
- Run the ./wlst.sh from ORACLE_HOME. For eg., MW_HOME/Oracle_IDM1/common/bin
- wls:/offline>> connect() --- connect to the AdminServer port with weblogic credentials
- wls> domainRuntime()
- wls> listLoggers(pattern="oracle.security.fed.*",target="OIF_INSTANCE_NAME")
- wls>setLogLevel(target='oif_server1',logger='oracle.security.fed',level='TRACE:32',persist="1",addLogger=1)
- exit()
Friday, May 10, 2013
Tool to search text in jars
Every now and then I see a need to search a text/pattern in sub-directories or jar files. One can build their own shell scripts to do this.
I found a blog that talks about a tool Javinder.
All you need to do is to download that jar file and run the command java -jar Javinder.jar and then it opens a wizard.
See the below screenshot where I wanted to search for WantAssertionsSigned pattern under jars directory C:\Projects\My_Fedlet\fedletsample\WEB-INF\lib.
Hope this helps others having the same need.
I found a blog that talks about a tool Javinder.
All you need to do is to download that jar file and run the command java -jar Javinder.jar and then it opens a wizard.
See the below screenshot where I wanted to search for WantAssertionsSigned pattern under jars directory C:\Projects\My_Fedlet\fedletsample\WEB-INF\lib.
Hope this helps others having the same need.
Tuesday, April 23, 2013
SAML2 encoder/decoder
Hi All,
I was working on Fedlet setup with OIF 11g. I could not get to see SAML assertions in Fedlet debug logs, I don't know why. The goal is to look at the SAML request and response for nameid and other details.
So here is the simple way to get saml xml's. One should be able to see the SAMLRequest and SAMLResponse in http headers while testing the federation URLs in browser.
Use the tool https://rnd.feide.no/simplesaml/module.php/saml2debug/debug.php and paste the SAMLRequest encoded data and click the Decode SAML Message.
Another one here, http://openidtest.uninett.no/samldebug
The same holds true for both SAMLRequest and SAMLResponse data.
I was working on Fedlet setup with OIF 11g. I could not get to see SAML assertions in Fedlet debug logs, I don't know why. The goal is to look at the SAML request and response for nameid and other details.
So here is the simple way to get saml xml's. One should be able to see the SAMLRequest and SAMLResponse in http headers while testing the federation URLs in browser.
Use the tool https://rnd.feide.no/simplesaml/module.php/saml2debug/debug.php and paste the SAMLRequest encoded data and click the Decode SAML Message.
Another one here, http://openidtest.uninett.no/samldebug
The same holds true for both SAMLRequest and SAMLResponse data.
Friday, April 19, 2013
Connecting to OID Server through client
OID 10.1.4.3 was installed on remote server. All I know are the connection details. I could use LDAP tools such as JExplorer, Apache studio but I wanted to work on password policies configured in OID. However I did not have access to OID server to login to Oracle Directory Manager tool using oidadmin tool. Hence I have downloaded and installed the Oracle Database client 10g (10201_client_win32.zip).
While installing the Oracle DB client, use the option Administrator (installs the management console, management tools, networking services, util, basic client software).
The installation went successful however some optional components failed, so I did not bother.
I was able to see Oracle Directory Manager installed and can login to OID server through this client successfully.
I have referred this post for using OIDAdmin client tool.
While installing the Oracle DB client, use the option Administrator (installs the management console, management tools, networking services, util, basic client software).
The installation went successful however some optional components failed, so I did not bother.
I was able to see Oracle Directory Manager installed and can login to OID server through this client successfully.
I have referred this post for using OIDAdmin client tool.
Thursday, January 3, 2013
OIA 11.1.1.5 is not certified with WebLogic 10.3.6
Oh my god! I had struggled for 2 days deploying OIA 11.1.1.5 on WebLogic 10.3.6 in Linux environment. I was hitting the below exception during deployment.
message : Cannot construct com.vaau.commons.util.fileUtils.FileUtils$WrappedFile as it does not have a no-args constructor
cause-exception : com.thoughtworks.xstream.converters.reflection.ObjectAccessException
cause-message : Cannot construct com.vaau.commons.util.fileUtils.FileUtils$WrappedFile as it does not have a no-args constructor
class : com.vaau.commons.util.fileUtils.FileUtils$WrappedFile
required-type : com.vaau.commons.util.fileUtils.FileUtils$WrappedFile
I'd tried several troubleshooting methods by following OIA Admin & install guides for replacing the stax jar versions, modifying the configuration xmls such as dataaccess-context.xml, conf-context.xml etc.,, without success.
Finally, I had installed WLS 10.3.5, created a domain and deployed OIA and it just took hardly 20 mins for this whole process to work.
Guys, I hope this post will help you save lot of time if you're hitting the same issue.
message : Cannot construct com.vaau.commons.util.fileUtils.FileUtils$WrappedFile as it does not have a no-args constructor
cause-exception : com.thoughtworks.xstream.converters.reflection.ObjectAccessException
cause-message : Cannot construct com.vaau.commons.util.fileUtils.FileUtils$WrappedFile as it does not have a no-args constructor
class : com.vaau.commons.util.fileUtils.FileUtils$WrappedFile
required-type : com.vaau.commons.util.fileUtils.FileUtils$WrappedFile
I'd tried several troubleshooting methods by following OIA Admin & install guides for replacing the stax jar versions, modifying the configuration xmls such as dataaccess-context.xml, conf-context.xml etc.,, without success.
Finally, I had installed WLS 10.3.5, created a domain and deployed OIA and it just took hardly 20 mins for this whole process to work.
Guys, I hope this post will help you save lot of time if you're hitting the same issue.
Subscribe to:
Posts (Atom)
