Bernie's Blog A confusing concoction of Java, mobile devices, technology and photography

Setting up trusted domains in Weblogic

The recent project I'm doing required separate deployments in Weblogic 8 & 9. One of the projects require access JNDI to the other server to lookup a JMS Queue. Oddly when deployed to a Tomcat + Weblogic 8 combo, everything worked fine. However, when deployed to a Weblogic 8 + Weblogic 9 combo, the following error message appeared during Spring initialization:

java.lang.SecurityException: [Security:090398]Invalid Subject: XXXXX

Searching the web finally led me to this page. True enough after setting both Weblogic to trust each other, the problem went away. To trick is to set both credentials on both domains to be identical. Here's how to do it in Weblogic 8 (xeroxed from the WL8 docs):

# Expand the Domains node (for example, Examples).
# Click the View Domain-Wide Security Settings link on the Domain-->General page.
# Select the Security Configuration-->Advanced tab.
# Uncheck the Enable Generated Credential attribute.
# Enter a password for the domain in the Credential text field. Choose the password carefully. BEA Systems recommends using a combination of upper and lower case letters and numbers.
# Confirm the password by entering it in the Confirm Credential text field.
# Click Apply.

On Weblogic 9, it's not too different. When both of the domains have been set to use the same credentials, the error message goes way.