RemoteAnonymousRmit3Enabled does not seem to be available any more

[dimovelev]

With the latest 1.9.20 version of WDT I do not see the SecurityConfiguration RemoteAnonymousRmit3Enabled option any more (in modelHelp). It is also not being applied when I create a domain with it:

$ cat ../VERSION.txt
WebLogic Deploy Tooling 1.9.20
$ ./modelHelp.sh topology:/SecurityConfiguration | grep -i remote
        RemoteAnonymousJndiEnabled:            # boolean
        RemoteAnonymousRmiiiopEnabled:         # boolean

vs

$ cat ../VERSION.txt ; echo
WebLogic Deploy Tooling 1.9.18
$ ./modelHelp.sh topology:/SecurityConfiguration | grep -i remote
        RemoteAnonymousJndiEnabled:            # boolean
        RemoteAnonymousRmiiiopEnabled:         # boolean
        RemoteAnonymousRmit3Enabled:           # boolean

[robertpatrick]

@dimovelev You don't say what version/patch level your Oracle Home is but since you were able to see these attributes with 1.9.18, I have to assume you are using 14.1.1.

We did change the aliases for these two missing attributes in 1.9.19 to add support for them in the PSU versions of 12.2.1.3 and 12.2.1.4. However, those PSU versions only support the attributes in WLST online mode. As of today, the Model Help tool only displays offline attributes. These attributes still are marked as supporting both WLST online and WLST offline modes for WLS version 14.1.1+.

Using 14.1.1, we are able to see the attributes in modelHelp for WDT version 1.9.18, 1.9.19, 1.9.20, and the brand new 2.0.0.

rpatrick@rpatrick-mac webui % ../tools/weblogic-deploy/bin/modelHelp.sh -oracle_home /opt/weblogic/wls1411 topology:/SecurityConfiguration
JDK version is 1.8.0_271-b09
JAVA_HOME = /Library/Java/JavaVirtualMachines/jdk1.8.0_271.jdk/Contents/Home
CLASSPATH = /Users/rpatrick/Projects/weblogic-toolkit-ui/tools/weblogic-deploy/lib/weblogic-deploy-core.jar:/opt/weblogic/wls1411/wlserver/server/lib/weblogic.jar
JAVA_PROPERTIES = -Djava.util.logging.config.class=oracle.weblogic.deploy.logging.WLSDeployCustomizeLoggingConfig -Dpython.cachedir.skip=true -Dpython.console= 
/Library/Java/JavaVirtualMachines/jdk1.8.0_271.jdk/Contents/Home/bin/java -cp /Users/rpatrick/Projects/weblogic-toolkit-ui/tools/weblogic-deploy/lib/weblogic-deploy-core.jar:/opt/weblogic/wls1411/wlserver/server/lib/weblogic.jar           -Djava.util.logging.config.class=oracle.weblogic.deploy.logging.WLSDeployCustomizeLoggingConfig -Dpython.cachedir.skip=true -Dpython.console=            -Dpython.path=/opt/weblogic/wls1411/wlserver/common/wlst/modules/jython-modules.jar/Lib           org.python.util.jython           /Users/rpatrick/Projects/weblogic-toolkit-ui/tools/weblogic-deploy/lib/python/model_help.py -oracle_home /opt/weblogic/wls1411 topology:/SecurityConfiguration
####<Jan 27, 2022 11:12:24 AM> <INFO> <WebLogicDeployToolingVersion> <logVersionInfo> <WLSDPLY-01750> <The WebLogic Deploy Tooling modelHelp version is 2.0.0:.2d965e1:Jan 27, 2022 15:23 UTC>
####<Jan 27, 2022 11:12:24 AM> <INFO> <XPathUtil> <getPSU> <> <No patches home at /opt/weblogic/wls1411/inventory/patches>

Attributes and sub-folders for topology:/SecurityConfiguration

topology:
    SecurityConfiguration:
        AdministrativeIdentityDomain:          # string
        AnonymousAdminLookupEnabled:           # boolean
        BootAuthenticationMaxRetryDelay:       # long
        BootAuthenticationRetryCount:          # integer
        ClearTextCredentialAccessEnabled:      # boolean
        CompatibilityConnectionFiltersEnabled: # boolean
        ConnectionFilter:                      # string
        ConnectionFilterRule:                  # list
        ConnectionLoggerEnabled:               # boolean
        ConsoleFullDelegationEnabled:          # boolean
        CredentialEncrypted:                   # password
        CrossDomainSecurityEnabled:            # boolean
        DefaultRealm:                          # string
        DefaultRealmInternal:                  # string
        DowngradeUntrustedPrincipals:          # boolean
        EnforceStrictURLPattern:               # boolean
        EnforceValidBasicAuthCredentials:      # boolean
        ExcludedDomainName:                    # delimited_string
        IdentityDomainAwareProvidersRequired:  # boolean
        IdentityDomainDefaultEnabled:          # boolean
        NodeManagerPasswordEncrypted:          # password
        NodeManagerUsername:                   # credential
        NonceTimeoutSeconds:                   # integer
        Notes:                                 # string
        PrincipalEqualsCaseInsensitive:        # boolean
        PrincipalEqualsCompareDnAndGuid:       # boolean
        RemoteAnonymousJndiEnabled:            # boolean
        RemoteAnonymousRmiiiopEnabled:         # boolean
        RemoteAnonymousRmit3Enabled:           # boolean
        UseKSSForDemo:                         # boolean
        WebAppFilesCaseInsensitive:            # string

        CertRevoc:
            # see /SecurityConfiguration/CertRevoc

        Realm:
            'Realm-1':
                # see /SecurityConfiguration/Realm

        SecureMode:
            # see /SecurityConfiguration/SecureMode

modelHelp.sh completed successfully (exit code = 0)
rpatrick@rpatrick-mac webui % 

Does this resolve your issue?

[dimovelev]

@robertpatrick i am only talking about WebLogic 14.1.1. I have tested two different patch levels - they do not seem to affect the outcome. The difference is the WDT version.

• WDT 1.9.18
  • WebLogic 14.1.1 with PSU 14.1.1.0.210930

    ./modelHelp.sh topology:/SecurityConfiguration | grep -i remote
            RemoteAnonymousJndiEnabled:            # boolean
            RemoteAnonymousRmiiiopEnabled:         # boolean
            RemoteAnonymousRmit3Enabled:           # boolean
    

  • WebLogic 14.1.1 with PSU 14.1.1.0.220105

    ./modelHelp.sh topology:/SecurityConfiguration | grep -i remote
            RemoteAnonymousJndiEnabled:            # boolean
            RemoteAnonymousRmiiiopEnabled:         # boolean
            RemoteAnonymousRmit3Enabled:           # boolean
    

• WDT 1.9.20
  • WebLogic 14.1.1 with PSU 14.1.1.0.210930

    ./modelHelp.sh topology:/SecurityConfiguration | grep -i remote
            RemoteAnonymousJndiEnabled:            # boolean
            RemoteAnonymousRmiiiopEnabled:         # boolean
    

  • WebLogic 14.1.1 with PSU 14.1.1.0.220105

    ./modelHelp.sh topology:/SecurityConfiguration | grep -i remote
            RemoteAnonymousJndiEnabled:            # boolean
            RemoteAnonymousRmiiiopEnabled:         # boolean
    

• WDT 2.0.0

    ./modelHelp.sh topology:/SecurityConfiguration | grep -i remote
            RemoteAnonymousJndiEnabled:            # boolean
            RemoteAnonymousRmiiiopEnabled:         # boolean
  

[dimovelev]

Attached the WDT logs
wdt.log

[robertpatrick]

@dimovelev ok, we found the problem. There is an error in the alias version range specification for that attribute. I can push a fix but you will need to pick up 2.0.1 to get the fix (once we release it).

You could theoretically fix it in your installation but you would need to edit a file in the weblogic-deploy-core jar file...

[dimovelev]

@robertpatrick ok, I was also wondering about that (SecurityConfiguration.json) and noticed that you use the math notation for inclusive and exclusive and wondered if that works correctly.

When do you expect the next release to be published?

[robertpatrick]

@dimovelev the version ranges closely follow the Maven version range specification. If you look at that particular attribute, the "version": "[14.1.1)" should be changed to "version": "[14.1.1,)", as you can see in PR #1065.

Given that we just release 2.0.0 today, I would like to give it a week or two to see if any other issues come up prior to release 2.0.1, assuming that is ok for you.

[dimovelev]

@robertpatrick i can revert to 1.9.18 so it is fine from my side. thank you for the fast response! as a developer myself I know how easy it is to miss a comma :)

[robertpatrick]

@dimovelev assuming you don't need anything in the newer releases, that is always possible.

[dimovelev]

@robertpatrick any plans to release?

[ddsharpe]

@dimovelev released today.