Oracle Access Manager 11g

Configuring Single Sign-On with Oracle Access Manager 11g 15-15 3. Save the file. 4. Proceed to Establishing Trust between Oracle WebLogic Server and Other Entities .

15.2.3.1.3 Establishing Trust between Oracle WebLogic Server and Other Entities The Oracle

WebLogic Connection Filtering mechanism must be configured for creating access control lists and for accepting requests from only the hosts where Oracle HTTP Server and the front-end Web server are running. A network connection filter is a component that controls the access to network level resources. It can be used to protect resources of individual servers, server clusters, or an entire internal network. For example, a filter can deny non-SSL connections originating outside of a corporate network. A network connection filter functions like a firewall since it can be configured to filter protocols, IP addresses, or DNS node names. It is typically used to establish trust between Oracle WebLogic Server and foreign entities. To configure a connection filter to allow requests from only mod_weblogic and the host where OHS 11g is running, perform the procedure here. WebLogic Server provides a default connection filter: weblogic.security.net.ConnectionFilterImpl. This filter accepts all incoming connections and also provides static factory methods that allow the server to obtain the current connection filter. To configure this connection filter to deny access, simply enter the connection filters rules in the WebLogic Server Administration Console. You can also use a custom connection filter by implementing the classes in the weblogic.security.net package. Like the default connection filter, custom connection filters are configured in the WebLogic Server Administration Console. Connection Filter Rules: The format of filter rules differ depending on whether you are using a filter file to enter the filter rules or you enter the filter rules in the Administration Console. When entering the filter rules on the Administration Console, enter them in the following format: targetAddress localAddress localPort action protocols Table 15–3 provides a description of each parameter in a connection filter. Note: This topic is the same whether you are using OSSO or Oracle Access Manager. Note: This chapter uses the generic name of the WebLogic Server plug-in for Apache: mod_weblogic. For Oracle HTTP Server 11g, the name of this plug-in is mod_wl_ohs; the actual binary name is mod_ wl_ohs.so. Examples show exact syntax for implementation. Table 15–3 Connection Filter Rules Parameter Description target Specifies one or more systems to filter localAddress Defines the host address of the WebLogic Server instance. If you specify an asterisk , the match returns all local IP addresses.