Discovering Available Services Working with Existing Security Providers

6-10 Developing Custom Management Utilities With JMX for Oracle WebLogic Server

6.3.1 Discovering Available Services

To create a JMX client that finds MBeans by type or mix-in interface: 1. Connect to a WebLogic Server Runtime MBean Server. See Section 4.2, Make Remote Connections to an MBean Server. All WebLogic Server instances maintain their own Runtime MBean Server, and you can connect to any servers Runtime MBean Server. Table 6–4 Finding a Provider in the Realm Technique Description Find by name Each security provider instance is assigned a short name when an administrator configures it for the realm. Your JMX client can look up all providers of a specific type such as all Authentication providers and choose the one that matches a name. For an example of such a JMX client, start the WebLogic Server Examples Server. From the Examples Server home page, click on Extending a Realm Using JMX. The source for this JMX client is installed as WL_HOMEsamplesservermedrecsrcmedrecEar adminWebAppWEB-INFsrccombeamedrec actionsCreateNewAdminAction.java where WL_HOME is the location in which you installed WebLogic Server. If you use this technique, consider saving the name of the security provider in a configuration file instead of hard-coding it in your JMX client. The configuration file enables system administrators to change the providers in the realm and update the properties file instead of requiring you to update and recompile the JMX client. Find by MBean type If the system administrator always wants to use the same type of provider for a task, then your JMX client can find the provider MBean that is of the specified type. For example, if the system administrator always wants to use a SQLAuthenticatorMBean to add customers to a realm, your JMX client can find an instance of SQLAuthenticatorMBean. While this technique requires no user input, it assumes: ■ There will always be an instance of SQLAuthenticatorMBean in the realm and this one instance extends UserEditorMBean. ■ If there are multiple instances of SQLAuthenticatorMBean , all of them extend UserEditorMBean and it does not matter which instance is used. See Section 6.3.1, Discovering Available Services. Use any provider that extends the mix-in interface you need You can create a JMX client that learns about the class hierarchy for each provider MBean instance and chooses an instance that extends the mix-in interface you need for your task. For example, your client can discover which Authentication provider extends UserEditorMBean. See Section 6.3.1, Discovering Available Services. Use this technique if you know that your security realm will contain only one MBean that extends the needed mix-in interface, or if it does not matter which one you use. Managing Security Realms with JMX 6-11 2. Get all security provider MBeans of a specific type in the realm for example, get all Authentication provider MBeans: a. Use either the RuntimeServiceMBean or DomainRuntimeServiceMBean to navigate the following path through the WebLogic Server MBean hierarchy:

b. DomainMBean