July 21, 2004

  • A glimpse into my nefarious occupational responsibilities...


    The first day of training was informative from an introductory overview perspective.  However, though I did specifically indicate my interest in security concerns, the instructor really didn't have the time, given the rest of the target audience and its programming concerns, to do much more than point me in the direction of the Weblogic Server Administration Console where security rules, security policies, and security providers are managed.  So I spent some hands-on time perusing the interface and getting a feel for console administration.


     


    The second day of training (half day) was just treading water: the instructor spent much of the morning troubleshooting and reconfiguring actual server bugs in preparation for a programming exercise.  What little time was spent with the class was dedicated to the programmers.  So while those happenings gave me a better feel for WebLogic from the IT perspective, they did little to advance my appreciation from an IS (security) perspective.


     


    I've identified a number of highly-detailed and very well-written resources to assist with furthering our understanding of WebLogic Security.  I'm currently reading/studying the first two below.  If we need to customize security to custom applications, as opposed to just modifying the out-of-the-box provided security for our needs, the material considered in the last two sources also becomes critical.  If we find we only need to modify WebLogic's already highly-featured out-of-the-box security for our needs, the material covered in the first 5 sources is the most pertinent.


     


    I will continue to plow through the material in the order listed below.  I suppose matching 'criteria against configuration files' depends on whether we'll need to go beyond the default security architecture and explore the considerably more daunting (by the looks of it) world of programming/custom development.  Understanding and administering the default security architecture is something I feel is achievable ahead.  Going beyond that may require more than just on-line self-instruction.


     


    Administration Console On-line Help:


    http://edocs.bea.com/wls/docs81/ConsoleHelp/index.html


     


    Introduction to WebLogic Security:


    http://edocs.bea.com/wls/docs81/secintro/index.html


     


    Managing WebLogic Security:


    http://edocs.bea.com/wls/docs81/secmanage/index.html


     


    Securing WebLogic Resources:


    http://edocs.bea.com/wls/docs81/secwlres/index.html


     


    Securing A Production Environment (Lockdown):


    http://edocs.bea.com/wls/docs81/lockdown/index.html


     


    Introduction to Programming WebLogic Security:


    http://edocs.bea.com/wls/docs81/security/intro.html


     


    Developing Security Providers for WebLogic Server:


    http://edocs.bea.com/wls/docs81/dvspisec/index.html

Comments (220)

Comments are closed.

Post a Comment

notforprophet

Recent Posts

Categories

The End of Days

July 2004
M T W T F S S
« Jun   Aug »
 1234
567891011
12131415161718
19202122232425
262728293031