CustomizingExtendingOverriding Oracle Adaptive Access Manager Properties

Integrating Native Java Applications 4-3

a. Select the row oraclewss_http_token_service_policy.

6. To disable SOAP Authentication:

a. Select the rows oraclebinding_authorization_permitall_policy, oracleno_

authentication_service_policy , oracleno_authorization_service_policy and click the Next button

7. Click the Attach button in the next page.

8. Restart OAAM Server if required. Client Side Keystore to secure the SOAP User password Web ServicesSOAP clients need to send the username and password for successful communication with OAAM web services. 1. In the ORACLE_HOMEoaamcli directory, create a file, for example, soap_ key.file, and enter the HTTP authentication user password in it. The password from the user that was added to the OAAMSOAPServicesGroup rolegroup. 2. Copy sample.soap_3des_input.properties to soap_3des_ input.properties. 3. Update soap_3des_input.properties with the keystore password, the alias password, and password file. This is the password for opening the keystore. keystorepasswd= This is the password reading alias key in the keystore keystorealiaspasswd= File containing from key. Please note, keys in AES could be binary. Also note algorithms like 3DES require minimum 24 characters in the key keyFile=soap_key.file keyFile= 4. Generate the keystore. ■ For UnixLinux, run JAVA_EXE -Djava.security.policy=confjmx.policy -classpath CLSPTH com.bharosa.vcrypt.common.util.KeyStoreUtil updateOrCreateKeyStore readFromFile=soap_3des_input.properties ■ For Windows, run genkeystore.cmd soap_3des_input.properties If the KeyStore command was successful, you will see output similar to the following: updateOrCreateKeyStore done Keystore file:system_soap.keystore,algorithm=DESede KeyStore Password=ZG92ZTEyMzQ= Alias Password=ZG92ZTEyMw== 5. Note down the Keystore password and Alias Password print on the screen. You will need to add these to bharosa_server.properties. 6. Save the system_soap.keystore file in your source code control system. Please take adequate security precaution while handling this file. The file contains critical password information. Make sure that only authorized personnel have read access