Modify the list of roles and users, as appropriate, and then click OK.

9-12 Oracle Fusion Middleware Application Security Guide file must not have a service instance reference to an identity store. If unspecified, the script runs online and it lists application stripes in the policy store. ■ regularExpression specifies the regular expression that stripe names returned should match. Optional. If unspecified, it matches all names. To match substrings, use the character . Examples of Use The following online invocation returns the list of application stripes in the policy store: listAppStripes.py The following offline invocation returns the list of application stripes in the policy store referenced in the default context of the specified configuration file: listAppStripes.py -configFile homemyFilesjps-config.xml The following online invocation returns the list of application stripes that contain the prefix App: listAppStripes.py -regularExpression App

9.3.1.1 Running listAppStripes after Reassociating to a DB-Based Store

The jps configuration file produced by the reassociation to a DB-based stored cannot be passed, as is, to the script listAppStripes when the script is run in offline mode. To run the script in offline mode in this scenario, the passed file must be first manually edited as described below. The following examples illustrate fragments of jps configuration files before and after reassociating to a DB-based OPSS security store, and the changes required on the file produced by the reassociation. Before Reassociation The following fragment illustrates the configuration of a file-based policy store before being reassociated to a DB-based store: serviceInstance name=policystore.xml provider=policystore.xml.provider location=.system-jazn-data.xml descriptionFile Based Policy Store Service Instancedescription serviceInstance jpsContext name=default serviceInstanceRef ref=credstore serviceInstanceRef ref=keystore serviceInstanceRef ref=policystore.xml serviceInstanceRef ref=audit serviceInstanceRef ref=idstore.ldap serviceInstanceRef ref=trust jpsContext After Reassociation The following fragment illustrates the configuration file generated by the reassociation of the above store to a DB-based store: propertySet name=props.db.1 property value=cn=soa_domain name=oracle.security.jps.farm.name property value=cn=jpsroot name=oracle.security.jps.ldap.root.name Managing the Policy Store 9-13 property value=jdbcopss name=datasource.jndi.name propertySet serviceInstance provider=policystore.provider name=policystore.db property value=DB_ORACLE name=policystore.type propertySetRef ref=props.db.1 serviceInstance jpsContext name=default serviceInstanceRef ref=credstore.db serviceInstanceRef ref=keystore.db serviceInstanceRef ref=policystore.db serviceInstanceRef ref=audit serviceInstanceRef ref=idstore.ldap serviceInstanceRef ref=trust jpsContext Required Editing The configuration file produced by the reassociation above must be manually modified before it is passed to the offline script listAppStripes. This editing involves a changing the list of properties props.db.1 above to the following: propertySet name=props.db.1 property value=cn=reassociation name=oracle.security.jps.ldap.root.name property value=cn=soa_domain name=oracle.security.jps.farm.name property value=jdbc:oracle:thin:dadvma0170:1521:rdbms name=jdbc.url property value=rc1_opss name=security.principal property value=oracle.jdbc.driver.OracleDriver name=jdbc.driver property value=welcome1 name=security.credential propertySet in which the property datasource.jndi.name has been replaced by four other properties; and b removing the reference to the identity store in the default context that is, the line serviceInstanceRef ref=idstore.ldap The edited file can then be passed to the offline script, which should run without errors.

9.3.2 createAppRole

The script createAppRole creates an application role in the policy store with given application stripe and role name. Script Mode Syntax createAppRole.py -appStripe appName -appRoleName roleName Interactive Mode Syntax createAppRoleappStripe=appName, appRoleName=roleName The meanings of the arguments all required are as follows: ■ appStripe specifies an application stripe. ■ appRoleName specifies a role name.