10 things you should know about oracle weblogic server 12c · 20.11.2012 1 10 things you should...

20.11.2012

1

10 Things You Should Know About ORACLEWebLogic Server 12cDOAG 2012 Dr. Frank Munz Nov 2012

The most comprehensive Oracle applications & technology content under one roofmunz & more slide # 1munz & more

#0introduction

The most comprehensive Oracle applications & technology content under one roofmunz & more slide # 2

introduction

20.11.2012

2

Who is this guy?

• Frank Munz

• Founded munz & more in 2007• 12+ years WebLogic Server and

Oracle Fusion Middleware

C lti d Hi h E d T i i


• Consulting and High‐End Training

• NEW book: “WebLogic 12c: Advanced Recipes”

10 things, no agenda


no agenda

20.11.2012

3

#1#1

JDK 7


JDK 7

JDK 7

• WLS 12c still bundled with JDK 6WLS 12c still bundled with JDK 6

• Certified and running with JDK 7

• No JRockit 7 ‐> merged with Sun JDK


• JDK 6 EOL postponed fromJuly 2012 to November 2012 (now!)

20.11.2012

4

SPECjbb2000: Out‐of‐box performance


JDK7?

JDK 7

• New tooling: jcmdg j

• Oracle was slow in fixing security issues:http://immunityproducts.blogspot.de/2012/08/java-0day-analysis-cve-2012-4681.html

• JDK 7 language featureswww.youtube.com/watch?v=7nkB3hxH5po


• When starting with WLS 12c –why still using JDK 6?

20.11.2012

5

#2

configuration


management

DOMAIN / Config / General / Adv

• Default: Off ‐> Turn it on!

•


Every change creates and rotatesconfig.jar under DOMAIN_DIR/ConfigArchive

20.11.2012

6

#3#3

node manager


node manager

Node Manager

M hi 1 M hi 2Machine1 Machine2

DomainAAdminServer

ManagedServerA

AdminConsole SSL


Node‐manager

Node‐manager

20.11.2012

7

Node Manager

• Default now: StartScriptEnabled=true

• SSL for NM is still default: conflicts with generated X509 demoCert

• DisableHostnameVerifier not best solution!


• CrashRecoveryEnabled default is off ‐> turn on• More? My Blog: www.munzandmore.com/blog

#4

development:


EJB

20.11.2012

8


One file only, deploys as web archive

#5#5

Servlets + RESTful


web services

20.11.2012

9

Servlet 3.0 + JAX‐RS 1.1 in WLS12c

• Servlets with @Servlet, without web.xml

• RESTful web services: POJOs + annotations


Recommended Read: A. Gupta. Java EE 6 Pocket Guide

#6#6

WLS 12c RESTful


management

20.11.2012

10

MBean ServersOracle WebLogic JVMJMX

JVM Platform MBean ServerJMX

JSR 160 RMI Connector

Edit MBean Server

Runtime MBean Server

DomainRuntime MBean Server

RESTf l

MBean

Admin

RMI Client running in JVM

HTTP

JMX


RESTfulConnector

MBean MBean

Admin

Admin

Web browser, command line,any language

HTTP

RESTful Management Service

• Enable it under:

DOMAIN / General / Config / Adv.


20.11.2012

11

Monitoring URLs

• Example:

http://localhost:7001/management/tenant‐monitoring/servers/AdminServer/

or: applications|clusters|datasources


(but nothing else)

• AJAX Test Client:

http://localhost:7001/management/ajaxtest.html

#7

j4psh


(open source)

20.11.2012

12

Complete RESTful Management

• Retrieves every MBean and every attribute

• Bulk requests

• Supports almost every appserver, Mule, etc.

• JMX‐shell “like WLST online”,


,with syntax highlighting and tab‐complet___

• You have to understand your MBean names

Jolokia

• Access via Java agent

• Deploy simple .war file

• Use it as proxy


20.11.2012

13

Demo JMX‐Shell

• Use j4psh to examine GC problem

• JDBC Demo:http://www.youtube.com/watch?feature=player_detailpage&v=v13fgLNvezk#t=12s

• Oracle DevCast: j4psh with custom MBeans:


• Oracle DevCast: j4psh with custom MBeans:http://event.on24.com/r.htm?e=535211&s=1&k=C3C2FD74F5C578D7A01257D70FF828F0&partnerref=WLS_Dev_9_MunzNL_11132012

Demo RESTful Jolokia

• Trigger gc from browser:http://localhost:7001/jolokia/exec/java.lang:type=Memory/gc


• Read valuehttp://localhost:7001/jolokia/read/java.lang:type=Memory

20.11.2012

14

more …

• j4psh shows WebAppComponentRuntime for deployed application


#8#8

precompile


precompile

20.11.2012

15

Before or After Deployment?

Don’t use

<precompile>


<precompile>

in weblogic.xml

Before or After Deployment?

• Use weblogic.appc from commandline, Maven, Ant, …

• Your are wasting time and money without!


…. how much exactly?

20.11.2012

16


store time in session retrieve time& calculate difference to local time

#9

I can hack your


password!

20.11.2012

17

Case I: Picture this …

• Multi‐project machine

• User per project

• Installation user for WebLogic in MW_HOME

• All users in same group: > j t d & t MW HOME


‐>project user can read & execute MW_HOME

orange:oracle \domain\orangeblue:oracle \domain\blue

Case II

too complicated?

‐> assume you forgot your


password ;)

20.11.2012

18

Passwords

• Stored in WLS internal LDAP, one way SHA algorithm (one way!)

• … but also in boot.properties, etc.

‐> Not hashed, but AES or 3DES encrypted


• Can be decrypted …

Recover Password

Required Files:

• SerializedSystem.ini (SALT file for encryption)

• Any other file containing a passworde.g. boot.properties, config.xml, jdbc_conf.xml


then use WLST decrypt() …

20.11.2012

19

For the Script Kiddies


#10

Proxy Plugin


for LB is missing

20.11.2012

20

Location for WLS 10.3.6


#11


20.11.2012

21

try itThe most comprehensive Oracle applications & technology content under one roofmunz & more slide # 41

y

remember: my no-nonsense & live cloud presentation


cloud presentationtomorrow

20.11.2012

22

facebook.com/cloudcomputingbookfacebook com/weblogicbookfacebook.com/weblogicbook

@frankmunz


youtube.com/weblogicbook

over 30 WLS videos for free!


20.11.2012

23

more recipes you don’t want to miss!

available for preorder:


Link to Amazon

munz & more blog:www.munzandmore.com


www.munzandmore.com

10 things you should know about oracle weblogic server 12c · 20.11.2012 1 10 things you should...

Documents