book

WebLogic: The Definitive Guide

by Jon Mountjoy, Avinash Chugh

February 2004

Intermediate to advanced

848 pages

27h 25m

English

O'Reilly Media, Inc.

Read now

Unlock full access

WebLogic: The Definitive Guide
Preface
Who Should Read This Book?
Organization
WebLogic and J2EEManaging the WebLogic EnvironmentWebLogic Enterprise APIs
Online Documentation
Conventions Used in This Book
Using Code Examples
Comments and Questions
Acknowledgments
1. Introduction

1.1. Overview of WebLogic Server
1.1.1. The WebLogic Platform1.1.2. WebLogic as a J2EE Product1.1.2.1. Servlets, JSPs, and the web container1.1.2.2. JDBC and distributed transactions1.1.2.3. JNDI and RMI1.1.2.4. EJBs1.1.2.5. JMS1.1.2.6. JCA1.1.3. Additional Enterprise Features of WebLogic1.1.3.1. WebLogic’s security framework1.1.3.2. WebLogic in a clustered environment1.1.3.3. XML support1.1.3.4. Web services1.1.3.5. Management features1.1.4. WebLogic Server Tools1.1.4.1. System administration console1.1.4.2. Deployment and development tools1.1.4.3. WebLogic Builder1.1.5. WebLogic Workshop
1.2. Software and Versions
1.3. Getting Started with WebLogic Server
1.3.1. Creating a Domain1.3.2. Using the Administration Console
2. Web Applications
2.1. Packaging and Deployment
2.1.1. Structure of a Web Application2.1.2. Assembling a WAR2.1.3. XML Deployment Descriptors2.1.4. WebLogic’s JSP Compiler2.1.5. Deploying a Web Application2.1.6. Class Loaders
2.2. Configuring Web Applications
2.2.1. Context Root2.2.2. Directory Listings2.2.3. Serving Static Files2.2.4. Enabling CGI Scripts2.2.5. Reloading Files2.2.6. Resources References2.2.7. Response Caching
2.3. Servlets and JSPs
2.3.1. Configuring a Custom Execute Queue2.3.2. Threading Issues2.3.2.1. Single-threaded servlets2.3.3. Custom URL Pattern Matching2.3.4. Configuring JSPs
2.4. JSP Tag Libraries
2.4.1. WebLogic’s Tag Library2.4.1.1. The cache tag2.4.1.2. The process tag2.4.1.3. The repeat tag2.4.2. Building Tag Libraries for EJBs2.4.2.1. The ejb2jsp tool2.4.2.2. Resolving conflicts2.4.2.3. Custom tags for stateful beans and entity beans
2.5. Session Tracking
2.5.1. Session Tracking with Cookies2.5.1.1. Using cookies with SSL2.5.2. Session Tracking with URL Rewriting2.5.2.1. URL rewriting for WAP2.5.3. Session Security and Single Sign-on2.5.3.1. Avoiding single sign-on
2.6. Session Persistence
2.6.1. Configuring Session Persistence2.6.2. Memory Persistence2.6.3. File-Based Persistence2.6.4. JDBC Persistence2.6.5. Cookie Persistence
2.7. Clusters and Replicated Persistence
2.7.1. Disadvantages of Session-State Replication2.7.2. Session Replication2.7.3. Session Failover
2.8. Configuring a Simple Web Cluster
2.8.1. Configuring HttpClusterServlet2.8.2. Debugging the Configuration
2.9. Security Configuration
2.9.1. Authentication2.9.2. Declarative Security2.9.3. Programmatic Security2.9.4. Securing Servlet Initialization and Destruction2.9.5. Authenticated Dispatching
2.10. Monitoring Web Applications
3. Managing the Web Server
3.1. Configuring WebLogic’s HTTP Server
3.1.1. Denial-of-Service Attacks3.1.2. WAP Options3.1.3. Setting the Default Web Application
3.2. Virtual Hosting
3.2.1. Creating Virtual Hosts3.2.2. A Virtual Hosting Scenario
3.3. HTTP Access Logs
3.3.1. Common Log Format3.3.2. Extended Log Format
3.4. Understanding Proxies
3.4.1. Proxying to a Secondary Web Server
3.5. Web Server Plug-ins
3.5.1. Installing a Proxy3.5.2. Types of Proxying3.5.3. Connection Pools and Keep-Alive Connections3.5.4. Proxying to a Cluster3.5.5. Connection Failures3.5.6. Dynamic Server List3.5.7. SSL and Web Server Plug-ins3.5.8. Configuration Parameters3.5.9. Example Configurations
4. Using JNDI and RMI
4.1. Using WebLogic’s JNDI
4.1.1. Creating a Context4.1.2. Security in a Context4.1.3. Using a Context
4.2. Using JNDI in a Clustered Environment
4.2.1. Creating a Context in a Cluster4.2.2. J2EE Resources and RMI Stubs4.2.3. Binding Custom Objects4.2.4. Pinned Services
4.3. Using WebLogic’s RMI
4.3.1. Programming Issues4.3.2. Using a WebLogic Startup Class to Register an RMI Object4.3.3. WebLogic’s RMI Compiler4.3.4. RMI Objects in a Cluster4.3.5. Cluster Example4.3.6. Using a Custom CallRouter Class with an RMI Object
4.4. Using WebLogic’s RMI over IIOP
4.4.1. Standalone RMI Clients4.4.2. WebLogic Fat Clients4.4.3. J2EE Thin Clients4.4.4. CORBA/IDL Clients4.4.5. Configuring RMI-IIOP
5. JDBC
5.1. Overview of JDBC Resources
5.1.1. JDBC Drivers for WebLogic Server5.1.2. Connection Pools5.1.3. Multipools5.1.4. Data Sources
5.2. Configuring JDBC Connectivity
5.2.1. Using Third-Party JDBC Drivers5.2.2. Configuring a Connection Pool5.2.2.1. Creating a pool5.2.2.2. General pool configuration5.2.2.3. Controlling the pool size5.2.2.4. Connection reservation5.2.2.5. Connection testing5.2.2.6. Advanced distributed transaction control5.2.2.7. Initializing pool connections5.2.2.8. Monitoring JDBC pools5.2.2.9. Managing the connection pool5.2.2.10. Using the physical connection5.2.3. Configuring a Data Source5.2.3.1. Setting up an XA-aware data source5.2.3.2. Using a configured data source5.2.3.3. Targeting the data source5.2.4. Application-Scoped Data Sources and Connection Pools5.2.4.1. Creating a data source factory5.2.4.2. Editing the deployment descriptor5.2.4.3. Using an application-scoped data source5.2.4.4. Encrypting the passwords5.2.5. Managing the Statement Cache5.2.5.1. Enabling statement caching5.2.5.2. Clearing the statement cache5.2.5.3. Limitations of statement caching5.2.6. Validating Database Connections
5.3. WebLogic’s Wrapper Drivers
5.3.1. The RMI Driver5.3.2. The Pool Driver5.3.3. The JTS Driver
5.4. Rowsets
5.4.1. Creating and Populating Rowsets5.4.2. Manipulating Rowsets5.4.3. Transactions and Rowsets5.4.4. Synchronizing Rowsets5.4.4.1. VERIFY_READ_COLUMNS5.4.4.2. VERIFY_AUTO_VERSION_COLUMNS5.4.4.3. VERIFY_VERSION_COLUMNS5.4.4.4. VERIFY_MODIFIED_COLUMNS5.4.4.5. VERIFY_SELECTED_COLUMNS5.4.4.6. VERIFY_NONE5.4.4.7. Caveats5.4.4.8. Group deletes and JDBC batching5.4.5. Rowsets Spanning Multiple Tables5.4.6. XML and Rowsets
5.5. Clustering and JDBC Connections
5.5.1. Failover and Load Balancing
6. Transactions
6.1. Overview
6.1.1. JDBC Transactions6.1.2. Distributed Transactions
6.2. EJB Transactions
6.2.1. Container-Managed Transactions6.2.2. Bean-Managed Transactions
6.3. The Transaction Service
6.3.1. Using JTA Transactions6.3.2. Using XA Versus Non-XA Drivers in JTA Transactions6.3.2.1. Data integrity problems with two-phase commit emulation6.3.3. WebLogic Extensions to the JTA
6.4. Managing WebLogic JTA
6.4.1. Monitoring Transactions6.4.2. Transaction Logs6.4.3. Transaction Recovery6.4.4. Handling Failed Servers6.4.5. Interdomain Transactions
7. J2EE Connectors
7.1. Assembling and Deploying Resource Adapters
7.1.1. Packaging7.1.2. Deployment7.1.3. XML Deployment Descriptors
7.2. Configuring Resource Adapters
7.2.1. Generic Settings for the Resource Adapter7.2.2. Support for Transaction Levels
7.3. WebLogic-Specific Configuration Options
7.3.1. Managing Connection Pools7.3.1.1. Connection reservation7.3.1.2. Detecting connection leaks7.3.1.3. Connection proxy wrappers7.3.2. Error Logging and Tracing7.3.3. Secure Access7.3.3.1. Sign-on mechanisms7.3.3.2. Mapping WebLogic users to resource principals
7.4. Using the Resource Adapter
7.5. Monitoring Connections
8. JMS
8.1. Configuring JMS Resources
8.1.1. Server8.1.2. Destinations8.1.3. Connection Factory8.1.4. Templates8.1.5. Destination Keys8.1.6. JMS Stores8.1.7. Distributed Destination8.1.8. JMS Session Pools8.1.9. Foreign JMS Servers8.1.9.1. Configuring a foreign JMS provider
8.2. Optimizing JMS Performance
8.2.1. Message Quotas8.2.2. Message Paging8.2.2.1. How paging works8.2.2.2. Configuring paging for servers and destinations8.2.3. Flow Control8.2.3.1. How flow control works8.2.3.2. Tuning the flow control mechanism8.2.3.3. Blocking message producers8.2.4. JMS Stores8.2.4.1. Tuning file stores8.2.4.2. Managing the JMS tables for a JDBC store8.2.4.3. Configuring the JDBC pool for a JMS store8.2.5. Message Expiration8.2.5.1. Enabling active message expiration8.2.5.2. Expired message handling8.2.6. Concurrent Messaging8.2.6.1. Using JMS session pools
8.3. Controlling Message Delivery
8.3.1. Delivery Modes8.3.2. Timed Delivery8.3.2.1. Delayed message delivery8.3.2.2. Scheduled delivery8.3.2.3. Evaluating the next scheduled delivery time8.3.2.4. Determining delivery time8.3.3. Time-to-Live8.3.4. Redelivery8.3.4.1. Configuring redelivery8.3.4.2. Error destinations8.3.5. Extended Acknowledge Modes8.3.6. Multicasting8.3.6.1. Enabling multicasting8.3.6.2. Using a multicast session8.3.6.3. Sequence violations
8.4. JMS Programming Issues
8.4.1. JMS Clients8.4.2. Synchronous Versus Asynchronous Consumption8.4.3. Durable Subscribers8.4.3.1. Unique clients8.4.3.2. Creating and removing durable subscribers8.4.4. Transactions and JMS8.4.4.1. Transacted sessions8.4.4.2. Distributed transactions8.4.4.3. MDBs8.4.5. Integrating JMS with Servlets and EJBs8.4.5.1. Pooled connection objects and testing8.4.5.2. Caching JNDI lookups and JMS objects8.4.5.3. Automatic enlistment in transactions8.4.5.4. J2EE compliance8.4.5.5. Container-managed security8.4.6. Creating Destinations at Runtime8.4.6.1. Temporary destinations8.4.6.2. Permanent destinations8.4.7. JMS Messages and Selectors8.4.7.1. XML messages8.4.7.2. JMS selectors8.4.7.3. XML message selectors8.4.7.4. Impact of messages on performance8.4.7.5. Impact of message selectors on performance
8.5. Clustered JMS
8.5.1. JMS Connections and Connection Factories8.5.1.1. Load balancing8.5.1.2. Connection routing8.5.1.3. Failover8.5.1.4. Targeting for server-side applications8.5.1.5. Targeting for external applications8.5.1.6. Affinity-based load-balancing algorithms8.5.2. Distributed Destinations8.5.2.1. Using distributed queues8.5.2.2. Using distributed topics8.5.2.3. Creating a distributed destination8.5.2.4. Accessing a distributed destination8.5.2.5. Producer and consumer load balancing8.5.2.6. Load-balancing schemes8.5.2.7. Load-balancing heuristics8.5.2.8. Targeting connection factories8.5.3. Message-Driven Beans8.5.3.1. Placement of MDBs8.5.3.2. MDBs and distributed topics8.5.3.3. Delivery order8.5.4. JMS Migration8.5.4.1. Migrating a JMS server8.5.4.2. Migrating MDBs
8.6. WebLogic’s Messaging Bridge
8.6.1. Installing a Messaging Bridge8.6.2. Configuring Bridge Destinations8.6.2.1. Example configuration of bridge destinations8.6.3. Configuring the Messaging Bridge8.6.3.1. General settings8.6.3.2. Connection retry settings8.6.3.3. Transaction settings8.6.3.4. Example bridge configuration8.6.3.5. Monitoring a bridge8.6.3.6. Configuring the JMS thread pool
8.7. Monitoring JMS
9. JavaMail
9.1. Configuring a Mail Session
9.2. Using JavaMail
9.3. Using Other JavaMail Providers
10. Using EJBs
10.1. Getting Started
10.1.1. EJB Types10.1.2. Building EJBs10.1.3. EJBGen10.1.3.1. Using EJBGen10.1.3.2. Tag inheritance10.1.3.3. Templates10.1.3.4. Reverse engineering10.1.4. Packaging EJBs10.1.5. XML Deployment Descriptors10.1.6. Compiling Your EJBs10.1.6.1. The ejbc tool10.1.6.2. The appc tool10.1.6.3. Generating an EJB client JAR10.1.7. Referencing J2EE Resources10.1.7.1. Referencing application-scoped EJBs10.1.8. Deploying EJB Components
10.2. Development Guidelines
10.2.1. Collocation10.2.2. Network Latency10.2.3. Using EJB Homes10.2.4. Conserving Transactions10.2.5. Message-Driven Beans10.2.5.1. Using foreign JMS providers
10.3. Managing WebLogic’s EJB Container
10.3.1. Pool of Stateless Session EJB Instances10.3.2. Cache of Stateful Session Bean Instances
10.4. Configuring Entity Beans
10.4.1. Altering the Store Behavior10.4.2. EJB Concurrency10.4.2.1. Read-only multicast invalidation10.4.2.2. Read-mostly pattern10.4.3. Entity Bean Caching10.4.3.1. Caching between transactions10.4.3.2. Application-level cache
10.5. EJBs and Transactions
10.5.1. Distributed transactions10.5.1.1. Transaction isolation levels
10.6. EJBs and Clustering
10.6.1. Failover and Replication10.6.1.1. Stateless session beans10.6.1.2. Stateful session beans10.6.1.3. Entity beans10.6.2. Load Balancing
11. Using CMP and EJB QL
11.1. Building CMP Entity Beans
11.1.1. A Simple EJB11.1.2. Associated Java Files11.1.3. EJB Deployment Descriptor11.1.4. Creating the EJB JAR
11.2. Features of WebLogic’s CMP
11.2.1. Automatic Primary Key Generation11.2.1.1. DBMS-generated primary keys11.2.1.2. Sequence tables11.2.2. Automatic Table Creation and Validation11.2.3. Mapping CMP Fields Across Multiple DBMS Tables11.2.4. Adjusting the Insert Behavior11.2.5. Batch Operations11.2.6. Delayed Existence Checking11.2.7. Optimistic Concurrency11.2.8. Field Groups and Finder Optimizations
11.3. Container-Managed Relationships
11.3.1. One-to-One Association11.3.2. One-to-Many Association11.3.3. Many-to-Many Association11.3.4. Cascade Delete11.3.4.1. Avoiding deadlocks11.3.5. Caching EJB Relationships
11.4. EJB QL
11.4.1. Using WebLogic Extensions to EJB QL11.4.2. Returning a ResultSet11.4.3. Executing Dynamic Queries11.4.4. WebLogic’s EJB QL Extensions11.4.5. Reporting EJB-QL Compilation Errors
12. Packaging and Deployment
12.1. Packaging
12.1.1. Deployment Descriptors12.1.1.1. Editing deployment descriptors12.1.2. Web Applications12.1.3. EJB Components12.1.4. Resource Adapters12.1.5. Enterprise Applications12.1.6. Client Applications
12.2. Deployment Tools
12.2.1. Administration Console12.2.2. WebLogic’s Deployer Tool
12.3. Application Deployment
12.3.1. Application Staging12.3.1.1. Staging12.3.1.2. External staging12.3.1.3. No staging12.3.2. Configuring the Staging Mode12.3.3. Auto-Deployment12.3.4. Alternative Descriptors12.3.5. Deployment Order
12.4. WebLogic’s Classloading Framework
12.4.1. The Need for Custom Classloaders12.4.2. WebLogic’s Classloaders12.4.2.1. Overriding the parent delegation model12.4.2.2. EJB redeployment12.4.2.3. Deploying EJB modules and web applications as separate applications12.4.2.4. Customizing the classloader hierarchy
12.5. Deployment Considerations
12.5.1. Single-Server Deployment12.5.2. Multiserver Deployment12.5.3. Cluster Deployment12.5.4. Web Applications12.5.4.1. Using auto-deployment12.5.4.2. Using production mode12.5.5. EJB Modules12.5.6. Utility Classes12.5.7. Resource Adapters12.5.8. Startup and Shutdown Classes12.5.9. Application Deployment Life Cycle Listeners
12.6. Split Directory Development
12.6.1. Directory Layout12.6.2. Building an Application12.6.3. Deploying an Application12.6.4. Packaging an Application12.6.5. Generating the Build File
13. Managing Domains
13.1. Structure of a Domain
13.2. Designing a Domain
13.3. Creating Domains
13.3.1. Directory Layout13.3.2. The Configuration Wizard13.3.2.1. Starting the Configuration Wizard13.3.2.2. Typical configurations13.3.2.3. Single server13.3.2.4. Domain with Managed Servers13.3.2.5. Domain with clustered Managed Servers13.3.2.6. Using the Configuration Wizard in WebLogic 8.113.3.2.7. Using the Configuration Wizard in WebLogic 7.013.3.3. Using weblogic.Server13.3.4. Starting the Servers
13.4. Domain Backups
13.4.1. Configuration Data13.4.2. Security Data13.4.2.1. The LDAP repository13.4.2.2. The serialized security datafile13.4.2.3. Certificates13.4.2.4. Security configuration data in WebLogic 7.0
13.5. Handling System Failure
13.5.1. Restarting the Administration Server13.5.2. Restarting Managed Servers13.5.2.1. Managed Server Independence mode
13.6. Domain Network Configuration
13.6.1. The Default Network Channel13.6.1.1. General settings13.6.1.2. Protocols13.6.1.3. Tuning13.6.1.4. Tunneling13.6.2. The Administration Channel13.6.2.1. Consequences on domain configuration13.6.2.2. Configuration changes13.6.3. Custom Network Channels in WebLogic 8.113.6.3.1. Creating network channels13.6.3.2. Enabling interserver communication13.6.4. Network Channels and Access Points in WebLogic 7.013.6.4.1. Getting a summary13.6.4.2. Viewing network configurations13.6.4.3. Channel priority for outgoing connections13.6.5. Best Practices for Configuring Networks13.6.5.1. Segmenting network traffic by port number13.6.5.2. Physically segmenting network traffic13.6.5.3. Separating internal and external traffic
13.7. Node Manager
13.7.1. Configuring the Node Manager for a Physical Machine13.7.1.1. Trusted hosts13.7.1.2. SSL configuration13.7.1.3. SSL for WebLogic 7.013.7.1.4. Additional configuration properties13.7.1.5. Starting a Node Manager13.7.2. Configuring a Machine to Use a Node Manager13.7.3. Configuring the Node Manager for a Managed Server13.7.4. Configuring Node Manager Behavior13.7.5. Default Operation of the Node Manager13.7.5.1. Starting managed servers13.7.5.2. Suspending and stopping managed servers13.7.5.3. Health monitoring13.7.6. Node Manager Logs13.7.6.1. Node Manager client logs13.7.6.2. Managed Server logs
13.8. The Server Life Cycle
13.8.1. Graceful Shutdown13.8.2. Starting a Server13.8.3. Standby Mode13.8.4. Shutting Down13.8.5. Node Manager
13.9. Monitoring a WebLogic Domain
14. Clustering
14.1. An Overview of Clustering
14.1.1. Domains, Machines, and Clusters14.1.2. Tiers14.1.3. Load Balancing14.1.4. Failover
14.2. A Closer Look at the Frontend Tier
14.2.1. Working with Clusters14.2.1.1. Addressing a cluster14.2.1.2. Creating a cluster14.2.1.3. Starting and monitoring the domain14.2.1.4. Deploying to a cluster14.2.2. Servlets and JSPs in a Cluster14.2.3. Configuring a Load Balancer14.2.4. Using the Front Tier14.2.5. Other Frontend Architectures
14.3. Load-Balancing Schemes
14.3.1. Server-to-Server Routing14.3.1.1. Round-robin14.3.1.2. Weight-based14.3.1.3. Random14.3.1.4. Parameter-based14.3.2. Client-Server Routing14.3.2.1. Server affinity for JNDI contexts14.3.3. Scenarios in Which Load Balancing Is Avoided
14.4. Using J2EE Services on the Object Tier
14.4.1. Interacting with the Object Tier14.4.2. Clustering EJB and RMI14.4.2.1. Load balancing and failover14.4.2.2. EJB load balancing14.4.2.3. Failover for EJB and RMI objects14.4.2.4. Pinned objects and migration14.4.3. Using JDBC Resources in a Cluster14.4.4. Clustering JMS14.4.4.1. JMS servers and destinations14.4.4.2. Connection factories14.4.4.3. Distributed destinations14.4.5. Maintaining State in a Cluster
14.5. Combined-Tier Architecture
14.6. Securing a Clustered Solution
14.6.1. Firewall Placement and Address Translation14.6.2. Firewalls and Load Balancers14.6.3. Databases
14.7. Machines, Replication Groups, and Failover
14.7.1. Machine Names14.7.2. Replication Groups
14.8. Network Configuration
14.8.1. Multicast Communication14.8.1.1. Multicast setup14.8.2. Peer-to-Peer Communication14.8.3. Administration Server Considerations
14.9. Monitoring Clusters
15. Performance, Monitoring, and Tuning
15.1. Tuning WebLogic Applications
15.1.1. Managing Sessions15.1.1.1. Monitoring servlets and sessions15.1.2. Optimizing JDBC Pools15.1.2.1. Monitoring the connection pool and transactions15.1.3. Tuning the JMS Server15.1.3.1. Optimizing paging and flow control15.1.3.2. Optimizing persistence15.1.3.3. Monitoring the JMS servers15.1.4. EJB Tuning15.1.4.1. Optimizing the EJB pool size15.1.4.2. Optimizing the EJB cache size15.1.4.3. EJB concurrency15.1.4.4. Transaction isolation levels15.1.4.5. Optimizing CMP15.1.4.6. Monitoring EJBs15.1.5. Monitoring with JMX
15.2. Tuning the Application Server
15.2.1. Execute Queues15.2.1.1. Creating an execute queue15.2.1.2. Assigning execute queues to J2EE applications15.2.1.3. Monitoring active queues15.2.2. Server Threads15.2.2.1. Configuring the thread count15.2.2.2. Threads as socket readers15.2.2.3. Queue overflow conditions15.2.2.4. Detecting stuck threads15.2.2.5. Monitoring active server threads15.2.3. Socket Connections15.2.3.1. Optimizing the pure-Java socket implementation15.2.3.2. Client socket readers15.2.3.3. Managing TCP connections15.2.4. Tuning a Clustered Setup15.2.4.1. Multi-CPU machines
15.3. Tuning the JVM
15.3.1. Choosing a JVM15.3.2. Heap Size and Garbage Collection15.3.2.1. Configuring the heap size15.3.2.2. Generational garbage collection15.3.2.3. Automatically logging low memory conditions15.3.2.4. Explicit request for garbage collection15.3.3. Green Versus Native Threads15.3.4. Monitoring the JVM’s Performance
16. SSL
16.1. An Overview of SSL
16.1.1. Encryption16.1.2. Message Digests16.1.3. Certificates16.1.4. Certificate Authorities16.1.5. Cipher Suites16.1.6. Keystores
16.2. Configuring WebLogic’s SSL
16.2.1. Obtaining Keys and Certificates16.2.1.1. Demonstration keys and certificates16.2.1.2. The CertGen utility16.2.1.3. The Certificate Request Generator tool16.2.2. Storing Private Keys and Certificates16.2.3. Configuring SSL for WebLogic 8.116.2.3.1. Configuring the identity and trust keystores16.2.3.2. Setting up the server identity16.2.3.3. Enabling SSL16.2.4. Configuring SSL for WebLogic 7.016.2.4.1. Configuring a Keystore Provider16.2.4.2. Setting up the server identity16.2.4.3. Using plain files for the private key and trusted CA certificates16.2.4.4. Enabling SSL16.2.5. Other SSL Configuration Issues16.2.5.1. Two-way SSL16.2.5.2. Hostname verification16.2.5.3. Certificate validation options16.2.5.4. SSL debugging16.2.5.5. Export key lifespan and SSL login timeout16.2.5.6. Using SSL in a cluster16.2.6. SSL Configuration Scenarios16.2.6.1. One-way SSL16.2.6.2. Two-way SSL
16.3. Programmatic SSL
16.3.1. URL Connections16.3.2. SSL Sockets16.3.2.1. Using SSLSocket16.3.2.2. Using a custom hostname verifier16.3.2.3. Using a custom trust manager16.3.2.4. Setting up the client’s identity16.3.2.5. Using an SSL handshake listener16.3.3. JNDI Clients16.3.4. JCE
16.4. Mapping Certificates to WebLogic Users
16.4.1. Two-Way SSL Authentication for Web Applications
17. Security
17.1. The Java Security Manager
17.1.1. Configuring the Security Manager17.1.2. Global Security Policies17.1.3. Application-Specific Security Policies17.1.4. Tracing the Security Manager
17.2. Connection Filtering
17.2.1. The Default Connection Filter
17.3. The Security Provider Architecture
17.3.1. Overview17.3.2. Users and Groups17.3.3. Protecting User Accounts17.3.4. Roles17.3.5. Global Roles17.3.6. Scoped Roles17.3.6.1. Connection pools and multipools17.3.6.2. JNDI branches17.3.6.3. Web applications17.3.6.4. Web services17.3.6.5. EJBs17.3.6.6. JMS destinations17.3.6.7. Using the deployment descriptors17.3.7. The externally-defined Element17.3.8. Policies17.3.8.1. Using the Administration Console17.3.8.2. Enabling user-defined policies17.3.8.3. Using the deployment descriptors17.3.8.4. Default policies17.3.9. Ignoring the Deployment Descriptors17.3.10. Summary
17.4. The Providers
17.4.1. Authentication Providers17.4.1.1. Principal Validation Providers17.4.1.2. Identity Assertion Providers17.4.2. The Default Authentication Providers17.4.2.1. The Default Authenticator17.4.2.2. Configuring an LDAP authenticator17.4.2.3. The Default Identity Asserter17.4.3. Authorization Providers17.4.3.1. The Default Authorization Provider17.4.4. Role Mapping Providers17.4.4.1. The Default Role Mapper17.4.5. Adjudication Providers17.4.5.1. The Default Adjudicator17.4.6. Credential Mapping Providers17.4.6.1. The Default Credential Mapper17.4.7. Auditing Providers17.4.7.1. The Default Auditor17.4.8. The Embedded LDAP Server17.4.8.1. External access to the LDAP server
17.5. Configuring Trust Between Two Domains
17.6. JAAS Authentication in a Client
17.6.1. Anatomy of a JAAS Client17.6.2. A Sample JAAS Client
17.7. Creating a Custom Authentication Provider
17.7.1. MBeans17.7.2. Authentication Provider17.7.3. Login Module17.7.4. Deploying the Provider
17.8. Creating an Identity Assertion Provider
18. XML
18.1. JAXP
18.1.1. SAX18.1.2. DOM18.1.3. XSL Transformers18.1.4. External Entity Resolution
18.2. Built-in Processors
18.2.1. WebLogic’s FastParser18.2.2. Using JAXP-Compliant Parsers
18.3. The XML Registry
18.3.1. Creating an XML Registry18.3.2. Configuring Document-Specific Parsers18.3.3. Configuring External Entity Resolution18.3.4. Caching Entities
18.4. XML Application Scoping
18.4.1. Configuring Factories18.4.2. Configuring Entity Resolution
18.5. WebLogic’s Streaming API
18.5.1. Creating a Stream18.5.2. Events18.5.3. Filtering a Stream18.5.4. Custom Filters18.5.5. Positioning the Stream18.5.6. Substreams18.5.7. Buffered Streams18.5.8. Creating Output Streams18.5.9. Writing to the Stream
18.6. WebLogic’s XPath API
18.6.1. Using the API with a DOM18.6.2. Using the API with a Stream
18.7. Miscellaneous Extensions
18.7.1. Parsing XML in a Servlet18.7.2. Using the JSP Tag Library for XSL Transformations18.7.2.1. Using an interceptor18.7.2.2. Using the XSLT tag
19. Web Services
19.1. Using the Web Services Framework
19.1.1. Web Services Architecture19.1.1.1. Typical behavior of a web service19.1.1.2. Web service operations without a backend19.1.2. Building Your First Web Service19.1.2.1. Using the Administration Console19.1.2.2. Mapping your web service to an alternative URL19.1.3. Using the WSDL to Create a Web Service19.1.3.1. Publishing a static WSDL file19.1.4. Using Ant Tasks to Build Web Services
19.2. Web Service Design Considerations
19.2.1. RPC-Oriented Versus Document-Oriented Web Services19.2.2. Synchronous Versus Asynchronous Operations19.2.3. Datatypes19.2.4. Stateful Web Services19.2.4.1. Creating an HttpSession for a web service19.2.5. JMS Transport
19.3. Implementing the Backend Components
19.3.1. Java Class Backends19.3.2. Stateless Session EJB Backends19.3.3. JMS Backends19.3.3.1. Designing a JMS backend19.3.3.2. Building a web service over a JMS backend19.3.3.3. Configuring the web-services.xml descriptor19.3.4. Raising a SOAPFaultException
19.4. Datatypes
19.4.1. Built-in Types19.4.2. Custom Types19.4.3. Generating Support Files for a Custom Java Class19.4.3.1. Using the servicegen Ant task19.4.4. Autotyping19.4.4.1. Using an XML Schema19.4.4.2. Round-tripping19.4.5. Manually Creating the Support Classes for a Custom Type19.4.5.1. Creating the XML Schema and Java class for a datatype19.4.5.2. Creating the serialization class19.4.5.3. Including type information in the web-services.xml descriptor19.4.5.4. Using the servicegen task19.4.6. Implementing Multiple Return Values19.4.6.1. Creating holder classes19.4.7. SOAP Attachments
19.5. Implementing Clients
19.5.1. Client-Side Libraries19.5.2. Building a Client JAR for Static Clients19.5.3. Static Clients19.5.4. Asynchronous Clients19.5.5. Dynamic Clients19.5.5.1. Introspecting the WSDL19.5.5.2. Registering datatype mapping information19.5.6. SOAP 1.219.5.7. J2ME Clients19.5.8. Client Portability19.5.9. Client System Properties
19.6. Reliable SOAP Messaging
19.6.1. Architecture19.6.2. Implementing Reliable Web Service Backends19.6.2.1. Building the sender and receiver19.6.2.2. Configuring the servers19.6.2.3. Writing the receiver
19.7. SOAP Message Handlers
19.7.1. Life Cycle of a SOAP Handler19.7.2. Configuring a Handler Chain19.7.3. Creating and Registering SOAP Handlers19.7.3.1. Using only SOAP handlers to implement an operation
19.8. Security
19.8.1. Access Control19.8.1.1. Assigning a security policy to the web service19.8.1.2. Securing the web service URL19.8.1.3. Securing a stateless session EJB and its methods19.8.1.4. Removing access to the home page and WSDL19.8.1.5. Authenticating client access to a protected web service19.8.2. Using SSL19.8.2.1. Client access using WebLogic’s SSL19.8.2.2. Using a proxy server19.8.2.3. Configuring SSL programmatically19.8.2.4. Using two-way SSL19.8.2.5. Rolling your own SSL implementation19.8.3. SOAP Message Security19.8.3.1. Architecture19.8.3.2. Configuring SOAP message security19.8.3.3. Creating the certificates19.8.3.4. Setting up the Identity Assertion Provider19.8.3.5. Writing the client19.8.3.6. Running the client19.8.3.7. Encrypting passwords
19.9. UDDI
19.9.1. The UDDI Registry19.9.2. The UDDI Directory Explorer19.9.2.1. Public registries19.9.2.2. Private registries19.9.3. The Client API
19.10. Internationalization and Character Sets
19.10.1. Configuring Web Services19.10.2. Configuring Client Applications
20. JMX
20.1. The MBean Architecture
20.1.1. Configuration MBeans20.1.2. Runtime MBeans20.1.3. Security MBeans
20.2. Accessing MBean Servers
20.2.1. Local and Administration Home Interfaces20.2.2. Retrieving the Home Interface
20.3. Accessing MBeans
20.3.1. Naming of MBeans20.3.1.1. Determining MBean type20.3.1.2. Determining parent-child relationships20.3.2. Using the Administration Tool20.3.3. Using WLShell20.3.4. Standard MBean Access20.3.5. WebLogic MBean Access
20.4. Examples
20.4.1. Runtime MBeans20.4.2. Administration MBeans20.4.3. Security MBeans
20.5. MBean Notifications
20.5.1. Creating a Notification Listener20.5.2. Registering a Listener
20.6. Monitor MBeans
20.6.1. Types of Monitors20.6.2. An Example Monitor
20.7. Timer MBeans
21. Logging and Internationalization
21.1. The Logging Architecture
21.1.1. Under the Hood21.1.2. Viewing Log Files21.1.3. Anatomy of a Log Message21.1.4. Managing the Domain Log21.1.5. Managing the Local Log21.1.6. Creating a Domain Log Filter21.1.7. WebLogic Message Catalogs
21.2. Listening for Log Messages
21.2.1. JMX Listeners21.2.2. JDK Logging
21.3. Generating Log Messages
21.3.1. Log Message Catalogs21.3.1.1. Creating log message catalogs21.3.1.2. Generating log messages21.3.2. Noncatalog Logging21.3.3. Servlet Logging21.3.4. Client Application Logging
22. SNMP
22.1. WebLogic’s SNMP Infrastructure
22.2. Using the SNMP Agent
22.2.1. The Management Information Base22.2.2. Community Names
22.3. Traps
22.3.1. Trap Destinations22.3.2. Attribute Change Traps22.3.3. Log Message Traps22.3.4. Monitor Traps
22.4. SNMP Proxies
About the Authors
Colophon
Copyright

Content preview from WebLogic: The Definitive Guide

Understanding Proxies

Even though WebLogic Server can operate as a full-featured HTTP 1.1 server, its real power lies in its ability to serve dynamic content through servlets and JSPs. A number of companies have adopted commercial web servers to host their corporate web sites. WebLogic provides integration with these web servers in the form of a web server proxy plug-in. This plug-in allows the web server to communicate with the WebLogic Server (or cluster). You then can have the web server serving up the usual static content, while it passes requests for JSPs and servlets to WebLogic. A proxy plug-in offloads the task of serving static content to a commercial web server.

Here are the various architectural scenarios you should consider:

You could use WebLogic’s built-in web server as your primary HTTP server, eliminating the need for other web servers.
You can have WebLogic Server act as the primary HTTP server and servlet engine; additionally it proxies through certain requests for static requests to a commercial web server.
You can have a commercial web server acting as your primary HTTP server; additionally it transparently proxies requests for servlets and JSPs through to WebLogic.

The choice of which configuration you adopt is largely dependent on the type of content being served up, the performance of the various HTTP servers, and other deployment parameters. For instance, if you are serving up mostly dynamic content (using JSPs and servlets), a pure WebLogic solution should ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Publisher Resources

ISBN: 059600432XErrata Page

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

WebLogic: The Definitive Guide

by Jon Mountjoy, Avinash Chugh

Understanding Proxies

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

More than 5,000 organizations count on O’Reilly

Julian F.

Addison B.

Amir M.

Mark W.

You might also like

Oracle WebLogic 12c for Administrators

Deploying to OpenShift

Oracle WebLogic Server 11g Administration Handbook

Oracle WebLogic Server 12c Administration Handbook

Publisher Resources