Adding security arguments to the Oracle WebLogic Server startup script

IBM® Content Navigator uses Java™ Authentication and Authorization Service (JAAS) to authenticate users’ login credentials. You must add several environment arguments for JAAS to the Oracle WebLogic Server startup script before users can access the deployed web application.

About this task

Important: If you deployed IBM Content Navigator in a highly available cluster, you must complete the following steps for each node in the cluster.

To add JAAS arguments to the Oracle WebLogic Server startup script:

1. Open the Oracle WebLogic Server startup script, startWebLogic.cmd or startWebLogic.sh, by default, the startup script is in the following directory:

   Operating system	Default location
   AIX®	/opt/Oracle/Middlware/user_projects/domains/domain_name/bin/startWebLogic.sh
   Linux	/opt/Oracle/Middlware/user_projects/domains/domain_name/bin/startWebLogic.sh
   Linux for System z®	/opt/Oracle/Middlware/user_projects/domains/domain_name/bin/startWebLogic.sh
   Windows	C:\Oracle\Middleware\user_projects\domains\domain_name\bin\startWebLogic.cmd

2. Add the environment arguments for JAAS to the startup script:
   • On AIX, add the following lines to the startup script. Ensure that you specify the correct location of the IBM Content Navigator installation directory for your environment. The default IBM Content Navigator installation directory on AIX is /opt/IBM/ECMClient.

     echo "${JAVA_HOME}/bin/java ${JAVA_VM} ${MEM_ARGS} 
     -Djava.security.auth.login.config=Installation_directory
     /configure/CE_API/config/jaas.conf.WebLogic -Dweblogic.Name=${SERVER_NAME} 
     -Djava.security.policy=${WL_HOME}/server/lib/weblogic.policy ${JAVA_OPTIONS} 
     ${PROXY_SETTINGS} ${SERVER_CLASS}"
     
     
     ${JAVA_HOME}/bin/java ${JAVA_VM} ${MEM_ARGS} 
     -Djava.security.auth.login.config=Installation_directory
     /configure/CE_API/config/jaas.conf.WebLogic -Dweblogic.Name=${SERVER_NAME} 
     -Djava.security.policy=${WL_HOME}/server/lib/weblogic.policy ${JAVA_OPTIONS} 
     ${PROXY_SETTINGS} ${SERVER_CLASS}

   • On Linux, add the following lines to the startup script. Ensure that you specify the correct location of the IBM Content Navigator installation directory for your environment. The default IBM Content Navigator installation directory on Linux is /opt/IBM/ECMClient.

     echo "${JAVA_HOME}/bin/java ${JAVA_VM} ${MEM_ARGS} 
     -Djava.security.auth.login.config=Installation_directory
     /configure/CE_API/config/jaas.conf.WebLogic -Dweblogic.Name=${SERVER_NAME} 
     -Djava.security.policy=${WL_HOME}/server/lib/weblogic.policy ${JAVA_OPTIONS} 
     ${PROXY_SETTINGS} ${SERVER_CLASS}"
     
     
     ${JAVA_HOME}/bin/java ${JAVA_VM} ${MEM_ARGS} 
     -Djava.security.auth.login.config=Installation_directory
     /configure/CE_API/config/jaas.conf.WebLogic -Dweblogic.Name=${SERVER_NAME} 
     -Djava.security.policy=${WL_HOME}/server/lib/weblogic.policy ${JAVA_OPTIONS} 
     ${PROXY_SETTINGS} ${SERVER_CLASS}

   • On Linux for System z, add the following lines to the startup script. Ensure that you specify the correct location of the IBM Content Navigator installation directory for your environment. The default IBM Content Navigator installation directory on Linux for System z is /opt/IBM/ECMClient.

     echo "${JAVA_HOME}/bin/java ${JAVA_VM} ${MEM_ARGS} 
     -Djava.security.auth.login.config=Installation_directory
     /configure/CE_API/config/jaas.conf.WebLogic -Dweblogic.Name=${SERVER_NAME} 
     -Djava.security.policy=${WL_HOME}/server/lib/weblogic.policy ${JAVA_OPTIONS} 
     ${PROXY_SETTINGS} ${SERVER_CLASS}"
     
     
     ${JAVA_HOME}/bin/java ${JAVA_VM} ${MEM_ARGS} 
     -Djava.security.auth.login.config=Installation_directory
     /configure/CE_API/config/jaas.conf.WebLogic -Dweblogic.Name=${SERVER_NAME} 
     -Djava.security.policy=${WL_HOME}/server/lib/weblogic.policy ${JAVA_OPTIONS} 
     ${PROXY_SETTINGS} ${SERVER_CLASS}

   • On Windows, add the following lines to the startup script. Ensure that you specify the correct location of the IBM Content Navigator installation directory for your environment. The default IBM Content Navigator installation directory on Windows is C:\Program Files (x86)\IBM\ECMClient.

     echo Starting WLS with line:
     echo %JAVA_HOME%\bin\java %JAVA_VM% %MEM_ARGS% 
     -Dweblogic.Name=%SERVER_NAME% 
     -Djava.security.policy=%WL_HOME%\server\lib\weblogic.policy 
     %JAVA_OPTIONS% %PROXY_SETTINGS% %SERVER_CLASS%
     	%JAVA_HOME%\bin\java %JAVA_VM% %MEM_ARGS% 
     -Djava.security.auth.login.config=Installation_directory
     \configure\CE_API\config\jaas.conf.WebLogic 
     -Dweblogic.Name=%SERVER_NAME% 
     -Djava.security.policy=%WL_HOME%\server\lib\weblogic.policy %JAVA_OPTIONS% 
     %PROXY_SETTINGS% %SERVER_CLASS%
     
     
     echo Redirecting output from WLS window to %WLS_REDIRECT_LOG%
     %JAVA_HOME%\bin\java %JAVA_VM% %MEM_ARGS% 
     -Djava.security.auth.login.config=Installation_directory
     \configure\CE_API\config\jaas.conf.WebLogic 
     -Dweblogic.Name=%SERVER_NAME% 
     -Djava.security.policy=%WL_HOME%\server\lib\weblogic.policy %JAVA_OPTIONS% 
     %PROXY_SETTINGS% %SERVER_CLASS%  >"%WLS_REDIRECT_LOG%" 2>&1 
     )

3. Save your changes to the startup script.
4. Restart the application server and verify that the application server starts without errors.