weblogic.management.configuration
Interface EmbeddedLDAPMBean

All Superinterfaces:

ConfigurationMBean

public interface EmbeddedLDAPMBean
extends ConfigurationMBean

The MBean that defines the configuration properties for the embedded LDAP server for the WebLogic domain.

Since:

7.0.0.0

getCredential

String getCredential()

The credential (usually a password) used to connect to the embedded LDAP server.

If this credential has not been set, WebLogic Server generates a password at startup, initializes the attribute, and saves the configuration to the config.xml file. If you want to connect to the embedded LDAP server using an external LDAP browser and the embedded LDAP administrator account (cn=Admin), change this attribute from the generated value.

As of 8.1 sp4, when you get the value of this attribute, WebLogic Server does the following:

1. Retrieves the value of the CredentialEncrypted attribute.
2. Decrypts the value and returns the unencrypted password as a String.

When you set the value of this attribute, WebLogic Server does the following:

1. Encrypts the value.
2. Sets the value of the CredentialEncrypted attribute to the encrypted value.

Using the Credential attribute is a potential security risk because the String object (which contains the unencrypted password) remains in the JVM's memory until garbage collection removes it and the memory is reallocated. Depending on how memory is allocated in the JVM, a significant amount of time could pass before this unencrypted data is removed from memory.

Instead of using this attribute, use CredentialEncrypted().

Returns:

The credential value

See Also:

EmbeddedLDAPMBean.getCredentialEncrypted()

setCredential

void setCredential(String credential)
                   throws InvalidAttributeValueException

Sets the value of the Credential attribute.

Parameters:

credential - The new credential value

Throws:

InvalidAttributeValueException

See Also:

# @see #setCredentialEncrypted(byte[])

getCredentialEncrypted

byte[] getCredentialEncrypted()

The credential (usually password) used to connect to the embedded LDAP server.

If this credential has not been set, WebLogic Server generates a password at startup, initializes the attribute, and saves the configuration to the config.xml file. If you want to connect to the embedded LDAP server using an external LDAP browser and the embedded LDAP administrator account (cn=Admin), change this attribute from the generated value.

To set this attribute, use weblogic.management.EncryptionHelper.encrypt() to encrypt the value. Then set this attribute to the output of the encrypt() method.

To compare a password that a user enters with the encrypted value of this attribute, go to the same WebLogic Server instance that you used to set and encrypt this attribute and use weblogic.management.EncryptionHelper.encrypt() to encrypt the user-supplied password. Then compare the encrypted values.

Returns:

The credential value, as an encrypted byte array.

Default Value:

null

setCredentialEncrypted

void setCredentialEncrypted(byte[] bytes)
                            throws InvalidAttributeValueException

Encrypts the credential and sets the value of the Credential and CredentialEncrypted attributes.

Parameters:

CredentialEncrypted - The new credential value

Throws:

InvalidAttributeValueException

See Also:

EmbeddedLDAPMBean.getCredentialEncrypted()

getBackupHour

int getBackupHour()

The hour at which the embedded LDAP server should be backed up.

The Backup Hour value is used in conjunction with the Backup Minute value to determine the time at which the embedded LDAP server data files are backed up. At the specified time, WebLogic Server suspends writes to the embedded LDAP server, backs up the data files into a zip files in the ldap/backup directory, and then resumes writes.

Returns:

The backupHour value

Default Value:

23

Maximum Value:

23

Minimum Value:

0

setBackupHour

void setBackupHour(int hour)
                   throws InvalidAttributeValueException

Sets the value of the BackupHour attribute.

Parameters:

hour - The new backupHour value

Throws:

InvalidAttributeValueException

See Also:

EmbeddedLDAPMBean.getBackupHour()

getBackupMinute

int getBackupMinute()

The minute at which the embedded LDAP server should be backed up.

The Backup Minute value is used in conjunction with the Back Up Hour value to determine the time at which the embedded LDAP server data files are backed up

Returns:

The backupMinute value

Default Value:

5

Maximum Value:

59

Minimum Value:

0

setBackupMinute

void setBackupMinute(int minute)
                     throws InvalidAttributeValueException

Sets the value of the BackupMinute attribute.

Parameters:

minute - The new backupMinute value

Throws:

InvalidAttributeValueException

See Also:

EmbeddedLDAPMBean.getBackupMinute()

getBackupCopies

int getBackupCopies()

The maximum number of backup copies that should be made for the embedded LDAP server.

This value limits the number of zip files in the ldap/backup directory.

Returns:

The backupCopies value

Default Value:

7

Maximum Value:

65534

Minimum Value:

0

setBackupCopies

void setBackupCopies(int copies)
                     throws InvalidAttributeValueException

Sets the value of the BackupCopies attribute.

Parameters:

copies - The new backupCopies value

Throws:

InvalidAttributeValueException

See Also:

EmbeddedLDAPMBean.getBackupCopies()

isCacheEnabled

boolean isCacheEnabled()

Specifies whether a cache is used with the embedded LDAP server.

This cache is used when a managed server is reading or writing to the master embedded LDAP server that is running on the Administration server.

Returns:

The cacheEnabled value

Default Value:

true

setCacheEnabled

void setCacheEnabled(boolean enable)

Sets the value of the isCacheEnabled attribute.

Parameters:

enable - The new cacheEnabled value

See Also:

EmbeddedLDAPMBean.isCacheEnabled()

getCacheSize

int getCacheSize()

The size of the cache (in kilobytes) that is used with the embedded LDAP server.

Returns:

The cacheSize value

Default Value:

32

Minimum Value:

0

setCacheSize

void setCacheSize(int size)
                  throws InvalidAttributeValueException

Sets the value of the setCacheSize attribute.

Parameters:

size - The new cacheSize value

Throws:

InvalidAttributeValueException

See Also:

EmbeddedLDAPMBean.getCacheSize()

getCacheTTL

int getCacheTTL()

The time-to-live of the cache (in seconds) that is used with the embedded LDAP server.

Returns:

The cacheTTL value

Default Value:

60

Minimum Value:

0

setCacheTTL

void setCacheTTL(int ttl)
                 throws InvalidAttributeValueException

Set the value for the setCacheTTL attribute.

Parameters:

ttl - The new cacheTTL value

Throws:

InvalidAttributeValueException

See Also:

EmbeddedLDAPMBean.getCacheTTL()

isRefreshReplicaAtStartup

boolean isRefreshReplicaAtStartup()

Specifies whether a Managed Server should refresh all replicated data at boot time. (This is useful if you have made a large amount of changes when the Managed Server was not active, and you want to download the entire replica instead of having the Administration Server push each change to the Managed Server.)

Returns:

The refreshReplicaAtStartup value

Default Value:

false

setRefreshReplicaAtStartup

void setRefreshReplicaAtStartup(boolean enable)

Sets the value for the RefreshReplicaAtStartup attribute.

Parameters:

enable - The new refreshReplicaAtStartup value

See Also:

EmbeddedLDAPMBean.isRefreshReplicaAtStartup()

isMasterFirst

boolean isMasterFirst()

Specifies whether a Managed Server should always connect to the master LDAP server (contained in the Administration Server), instead of connecting to the local replicated LDAP server (contained in the Managed Server).

Returns:

The masterFirst value

Default Value:

false

setMasterFirst

void setMasterFirst(boolean enable)

Sets the value for the MasterFirst attribute.

Parameters:

enable - The new masterFirst value

See Also:

EmbeddedLDAPMBean.isMasterFirst()

getTimeout

int getTimeout()

Specifies the maximum number of seconds to wait for results from the embedded LDAP server before timing out. If this option is set to 0, there is no maximum time limit.

Returns:

The timeout value

Default Value:

0

Minimum Value:

0

setTimeout

void setTimeout(int seconds)

Sets the value of the Timeout attribute.

Parameters:

seconds - The new timeout value

See Also:

EmbeddedLDAPMBean.getTimeout()

setAnonymousBindAllowed

void setAnonymousBindAllowed(boolean allowed)

Set whether anonymous connection to the embedded LDAP server is allowed.

Parameters:

allowed - whether anonymous connection is allowed

See Also:

EmbeddedLDAPMBean.isAnonymousBindAllowed()