Weblogic - Java EE Principals

[sangeeta kapoor]

In tomcat, the Java EE principals are specified in /conf/tomcat-users.xml
Can someone please let me know how it is done in Weblogic.

I am told in weblogic it can be done using the "Management Tool". Please tell me where it is and how to add usernames through it.

Thank you

[sangeeta kapoor]

I did the following in tomcat
1. Add the following in my application's web.xml

    
<security-constraint>
       <web-resource-collection>
         <web-resource-name>webtop</web-resource-name>
         <url-pattern>/*</url-pattern>
         <http-method>POST</http-method>
         <http-method>GET</http-method>
       </web-resource-collection>
       <auth-constraint>
         <role-name>everyone</role-name>
       </auth-constraint>
 </security-constraint>

 <security-role> 
        <description>WebSSO Users</description> 
        <role-name>everyone</role-name> 
 </security-role> 

 <login-config>
       <auth-method>BASIC</auth-method>
 </login-config>

2. Add the following in conf/tomcat-users.xml

<role rolename="everyone"/>
  <user username="dmadmin" password="Hello123" roles="everyone"/>

Now I need to do the same thing in Weblogic. As far as editing web.xml is concerned that step remains the same.

Please let me know how I can achieve the second step (to add users and roles) in Weblogic. Is there a file similar to tomcat-users.xml in Weblogic.

Thank you

[Joe Ess]

sangeeta kapoor wrote:
I am told in weblogic it can be done using the "Management Tool". Please tell me where it is and how to add usernames through it.
Thank you

The "management tool" is the Weblogic Server Administration Console.
See the page on securing servers and resources for how to create a security realm and add users and groups.
Tomcat uses the same idea of a security realm, however, they provide a "UserDatabaseRealm" which one can configure via the server.xml file. Weblogic doesn't have that same kind of realm. The default for Weblogic is an embedded LDAP implementation.