Steps:
1. Navigate to C:\Oracle\Middleware\Oracle_OAMWebGate1\webgate\ohs\oamsso-bin
and edit the files login.pl, logout.pl and secureid.pl
Update first line of the file with absolute path of perl bin directory on your system
example: #!C:\Oracle\Middleware\Oracle_IDM2\perl\bin\perl
(search for perl.exe in your system and you will find the absolute path. Just update it as the first line for the above mentioned pl files)
2. Open the webgate configuration in OAM console and check the below
4. Create a new auth scheme say "DCC ODSEE Auth Scheme" with values as specified below
Challenge redirect URL would be your web server URL
5. Navigate to the policies of the OHS webgate and create resources for
/favicon.ico
/oamsso-bin/login.pl
make sure you create those resources as 'EXCLUDED'
6. Navigate to authentication policy and assign the newly created auth scheme "DCC ODSEE Auth Scheme" to the resources
7. Restart OAM server
8. You will get the new DCC default Login page as below
If you want to revert the configs to use ECC (Embedded credential Collector), Make sure you uncheck the option "Allow Credential Collector Operations" in Webgate configuration.
Thanks,
Veeru Yads
Hi,
ReplyDeleteIs DCC is only possible with OHS server which having 11g webgate, as i dont see these option in 10g.
is it possible to configure DCC with 10g webgate
thanks
DCC can be implemented for 11g webgates only
ReplyDeleteHi,
ReplyDeleteIs there any setting / configuration available in OAM / OAM Webgate to hide the User-agent(in HTTP request / response) ?
Can we comment out this attribute in login-config.pl so that its not printed as comment in the page?
Thanks for the post.
ReplyDeleteDid you ever got this error while enabling DCC :
I followed through all the settings as mentioned in this post, but still its throwing this error when I submit the credentials.
The creds are correct, the scheme is right. Also, the redirect to oamsso-bin/login.pl is working fine. Any help is appreciated.
Error: error while checking if the resource null is protected or not
did you protect the resource? And do you see any other error in Access manager or web agent logs???
ReplyDeleteI get this error on the OAM Managed server log:
ReplyDeleteAlso, the ohs wg logs show :
"GET /index.html HTTP/1.1" 302 309
"GET /oamsso-bin/login.pl?resource_url=******
"GET /favicon.ico HTTP/1.1" 404 194
"POST /oam/server/auth_cred_submit HTTP/1.1" 200 2806
Thats all. Nothing more of a error code except OAM-2073.