Start & Stop Weblogic Without Username & Password
| Posted by watashii | Filed under Database, Web
In a Weblogic Server domain running in production mode, username and password is always prompted during startup and shutdown (admin server and managed servers). To bypass this manual step, we can store the username and password credentials in the boot.properties file (although this is somewhat the same as development mode)…
Tags: encrypt, password, security, weblogic
Firefox Reserved Ports Restricted For Security Reasons
| Posted by watashii | Filed under Software
When browsing to web sites based on non standard HTTP ports, such as port 636 for LDAP SSL, Firefox bans access with the above message. By default, a number of ports are blocked from access due to a number of potential security vulnerabilities. These banned ports are usually reserved for specific services and are not ideal for web browsing.
Encrypt Passwords With Weblogic Server
| Posted by watashii | Filed under Database, Web
In a Weblogic Server environment, sometimes passwords must be unavoidably stored in text files, for example database connection details within JDBC configuration files. When running Weblogic in production mode, only encrypted password is accepted to ensure that the password is never exposed as clear text. To generate the encrypted password, the weblogic.security.Encrypt utility can be used, which generates a hashed password with a “{3DES}” prepended.
In Unix environment:
$ cd /opt/bea/user_projects/domains/mydomain/bin
$ . setDomainEnv.sh
$ java weblogic.security.Encrypt mycleartextpasswordhere
{3DES}xLLwrOm7asb4imZOYYwxz5TcBqDBEe6S
In Windows environment:
C:\>cd c:\bea\domains\mydomain\bin
C:\bea\domains\mydomain\bin>setDomainEnv.cmd
C:\bea\domains\mydomain\bin>java weblogic.security.Encrypt mycleartextpasswordhere
{3DES}lieJgIkTqg1xSBBoy3YxnHbPuz+tMxhY
Note that running the same command on different environment (or different Weblogic server installation) will produce a different password.
