2.7 Implementing JMX Policy for Change Password

The following section details the steps to implement JMX Policy for Change Password.
  1. Login to Oracle WebLogic Server 12c console (http://hostname:port/console)

    Note:

    The Change Password feature uses the JMX Policy configured on the domain. Hence, the AdminServer is required to be up and running to enable this.
  2. Click Domain > Security > myrealm > Configuration.

    Figure 2-66 Implement JMX Policy 1



  3. To enable JMX policy select the Use Authorization Providers to Protect JMX Access check box on the right panel.

    Figure 2-67 Implement JMX Policy 2



  4. Click Save and restart the server.
  5. Re-login to console.
  6. Click Domain > Security > myrealm > Roles and Policies > Realm Policies.

    Note:

    If server is not restarted, JMX Policy Editor option will not appear.

    Figure 2-68 Implement JMX Policy 3



  7. Click on JMX Policy Editor to configure.

    Figure 2-69 Implement JMX Policy 4



  8. Select GLOBAL SCOPE and click Next.

    Figure 2-70 Implement JMX Policy 5



  9. Select weblogic.security.providers.authentication.
  10. Select SQLAuthenticatorMBean. Click Next.

    Figure 2-71 Implement JMX Policy 6



  11. Expand Operations: Permissions to Invoke and select ChangeUserPassword.
  12. Click Create Policy. The following window is displayed for Authorization providers where you can add conditions to setup the policy.
  13. Click Add Condition.
    The below screen will be displayed.

    Figure 2-72 Implement JMX Policy 7



  14. For Predicate List, select Group for configuration. Click Next.

    Figure 2-73 Implement JMX Policy 8



  15. Select user roles for application.
  16. Click Finish. Click on Save to complete the configuration.
    The following window will be displayed.

    Figure 2-74 Implement JMX Policy 9