Connect to the Administration Server using the command-line Oracle WebLogic

Advanced Administration 14-25 3. Select the domain for which you want to manage properties.

4. Select WebLogic Domain Web Services Platform Policy Configuration.

The Platform Policy Configuration page appears.

5. Select the Policy Accessor tab.

6. Click Add in the Policy Access Properties section.

7. In the Add New Configure Property dialog, enter the following: ■ Enter the name jndi.lookup.csf.key. This property provides credential configuration java.naming.security.principal and java.naming.security.credentials and is used when an account in the LDAP directory is configured to connect with the Oracle WSM Policy Manager. ■ Enter the value in this example, OID.

8. Click OK.

9. Click Apply and restart WebLogic Server.

Modify the User’s Group or Role Oracle WSM Policy Manager uses the logical role policy.Accessor to secure EJBs that are accessed by the Oracle WSM Agent runtime to access the policies. By default, the policy.Accessor role is mapped to the groups OracleSystemGroup and Administrators. Oracle WSM Agent run time uses the OracleSystemUser identity to access wsm-pm. The new default user must either be included in the Administrator or OracleSystemGroup if the groups exist, or be mapped to the logical role policy.Accessor if the Administrator or OracleSystemGroup groups do not exist. To ensure the user has the required role, perform the following steps: 1. If the Administrator or OracleSystemGroup groups exist in the LDAP or identity store, perform the following: a. In LDAP, add the user that you would like to use as a default administrative user. b. In WebLogic Server Administration Console, ensure that the user exists in the Administrator group. For more information, see Configure Authentication and Identity Assertion providers in Oracle WebLogic Server Administration Console Help. 2. If the Administrator or OracleSystemGroup groups do not exist in the LDAP or identity store, map the new user to the required logical role and redeploy the wsm-pm application using the modified deployment plan. To map the new user or existing users belonging to a group other than Administrator or OracleSystemGroup, perform the following steps: a. Create a deployment plan for deploying wsm_pm.ear. Example 14–1 describes a sample deployment plan. A sample deployment plan, shipped with WebLogic, is available in the ORACLE_HOMEmodulesoracle.wsm.pm_ 11.1.1prov folder. Modify the section to_be_replaced with the new user. Note: The csf-key that you specify in this step must match the csf-key specified for the Policy Manager administrative user in the credential store. For more information, see Configure the Credential Store Provider .