Discussions Server - Security Considerations

Managing the Announcements and Discussions Services 14-7 Authenticated User Web Service Policy URI Select the policy this connection uses for authenticated access to the discussions server Web service. SAML Security Assertion Markup Language is an XML-based standard for passing security tokens defining authentication and authorization rights. An attesting entity that has trust relationship with the receiver vouches for the verification of the subject by method called sender-vouches. The client policy specified must be compatible with the service policy that is configured for the OWCDiscussionsServiceAuthenticated endpoint in the discussions server. Out-of-the-box, the default service policy is WSS 1.0 SAML Token Service Policy oraclewss10_saml_token_service_policy. Options available are: ■ WSS 1.0 SAML Token Client Policy oraclewss10_saml_token_client_policy ■ WSS 1.1 SAML Token With Message Protection Client Policy oraclewss11_saml_token_with_message_protection_client _policy ■ Global Policy Attachment If your environment supports Global Policy Attachments, you must ensure that the default policy attached to the OWCDiscussionsServiceAuthenticated endpoint in the discussions server is set to oracleno_authentication_client_policy using the WLST command detachWebServicePolicy or Enterprise Manager. Public User Web Service Policy URI Select the client policy this connection uses to enforce message security and integrity for public access to the discussions server Web service. The client policy specified must be compatible with the service policy that is configured for the OWCDiscussionsServicePublic endpoint in the discussions server. Out-of-the-box, a service policy is not configured for public access None. Options available are: ■ None - This is the default setting. ■ WSS 1.1 Message Protection Client Policy oraclewss11_with_message_protection_client_policy ■ Global Policy Attachment If your environment supports Global Policy Attachments, you must ensure that the default policy attached to the OWCDiscussionsServicePublic endpoint in the discussions server is set to oracleno_authentication_client_policy using the WLST command detachWebServicePolicy or Enterprise Manager. Recipient Key Alias Enter the recipient key alias to be used for message protected policies applicable to the OWCDiscussionsServicePublic and OWCDiscussionsServiceAuthenticated endpoints. This is the alias to the certificate that contains the public key of the discussions server in the configured keystore. See also Chapter 32, Configuring WS-Security . Table 14–2 Cont. Discussion and Announcement Connection - Connection Details Field Description 14-8 Oracle Fusion Middleware Administrators Guide for Oracle WebCenter 7. Configure advanced options for the discussion and announcement connection Table 14–3 . 8. Sometimes, additional parameters are required to connect to the discussions server, for example, those listed in Table 14–4 . If additional parameters are required to connect to the discussions server, expand Additional Properties and enter details as required Table 14–5 .

9. Click OK to save this connection.

10. To start using the new active connection you must restart the managed server on

which the WebCenter application is deployed. For more information, see Section 8.2, Starting and Stopping Managed Servers for WebCenter Application Deployments. For WebCenter Spaces, some additional configuration is recommended for the Discussions service. For details, see Configuring Discussion Forum Options for WebCenter Spaces in Oracle Fusion Middleware Users Guide for Oracle WebCenter. Table 14–3 Discussion and Announcement Connection - Advanced Configuration Field Description Connection Timeout in Seconds Specify a suitable timeout for the connection. This is the length of time in seconds the WebCenter application waits for a response from the discussions server before issuing a connection timeout message. The default is -1, which means that the service default is used. The service default is 10 seconds. Table 14–4 Additional Discussion Connection Properties Additional Connection Property Description application.root.cat egory.id WebCenter Spaces only Application root category ID on the discussions server under which all discussion forums are stored. For example, if set to 3, then all forums are stored inside the category 3. Table 14–5 Discussion and Announcement Connection - Additional Properties Field Description Add Click Add to specify an additional connection parameter: ■ Name - Enter the name of the connection property. ■ Value - Enter the default value for the property. ■ Is Property Secured - Indicate whether encryption is required. When selected, the property value is stored securely using encryption. For example, select this option to secure the admin.password property where the value is the actual password. Delete Click Delete to remove a selected property. Select the correct row before clicking Delete. Note: Deleted rows appear disabled until you click OK. Managing the Announcements and Discussions Services 14-9

14.3.2 Registering Discussions Servers Using WLST

Use the WLST command createDiscussionForumConnection to create a discussion server connection. For command syntax and examples, see the section, createDiscussionForumConnection in Oracle Fusion Middleware WebLogic Scripting Tool Command Reference. To configure the Discussions and Announcements services to actively use the new connection, set default=true. Make sure to set additional properties for WS-Security. See Section 14.5.2, Modifying Discussions Server Connection Details Using WLST. For information on how to run WLST commands, see Section 1.13.3.1, Running Oracle WebLogic Scripting Tool WLST Commands.

14.4 Choosing the Active Connection for Discussions and Announcements

You can register multiple discussion server connections for a WebCenter application, but only one connection is active at a time. The active connection becomes the back-end discussions server for: ■ Discussions task flows Discussion Forum Manager, Discussions, Popular Topics, Recent Topics, Watched Forums, Watched Topics ■ Announcements task flows Announcements Manager, Announcements This section includes the following subsections: ■ Section 14.4.1, Choosing the Active Connection for Discussions and Announcements Using Fusion Middleware Control ■ Section 14.4.2, Choosing the Active Discussion for Discussions and Announcements Using WLST 14.4.1 Choosing the Active Connection for Discussions and Announcements Using Fusion Middleware Control To change the active connection:

1. Log in to Fusion Middleware Control and navigate to the home page for the

WebCenter application. For more information, see: ■ Section 6.2, Navigating to the Home Page for WebCenter Spaces ■ Section 6.3, Navigating to the Home Page for WebCenter Portal Applications

2. Do one of the following:

■ For WebCenter Spaces - From the WebCenter menu, choose Settings Service Configuration . ■ For WebCenter Portal applications - From the Application Deployment menu, choose WebCenter Service Configuration. Note: To start using the new active connection you must restart the managed server on which the WebCenter application is deployed. For more information, see the section, Starting and Stopping WebLogic Managed Servers Using the Command Line in Oracle Fusion Middleware Administrators Guide.