Oracle BI Publisher + Digital signature (Digital ID)

Oracle BI Publisher has an feature related to digital signature in PDF documents.

Here is some requirements to do in order to use the feature:

1. You need up and running Oracle BI Scheduler. In order to run scheduler you need to create specific schema manually and deploy the database objects via Oracle BI Publisher.

2. It's required to add Oracle Security Developer Tools JARs to your application server (particullary, JARs which usually goes, for instance, with Oracle Client. Without JARs you're not able to use digital signature which cause stuck of scheduler job in Running state.

3. Create manually or use existing PFX (Personal Information Exchange) file with private and public key ((here is good explanation how to create PFX file manually: http://blogs.msdn.com/maximelamure/archive/2007/01/24/create-your-own-pfx-file-for-clickonce.aspx) and upload it as Digital ID in Oracle BI Publisher Admin Console. Give appropriate rights to user groups which are allowed to sign documents.

4. Create report in BI Publisher by uploading template with signature area. You can also manually add signature area in BI Publisher in report configure page.


5. Create a job to generate the report in BI Publisher Scheduler.

6. Once report succcessfully cooked you could download PDF with your digital ID.

Balancing and proxying. Apache 2.2 + mod_proxy_balancer + Clustered Oracle WebLogic Managed servers

Recently i was working around the task aimed to realize simple loadbalancing between to clustered Oracle WebLogic servers and proxing facilities to pass external request to our intranet for specific Oracle BI application (analytics). In the front-end tier I've used Apache 2.2 with mod_proxy_balancer module on Linux RHLE 5. Additionally WebLogic servers were in intranet whereis web server looking to external network. So below the setting that i've added into Apache's httpd.conf web server side to make external access possible with loadbalancing by requests.

Assume that we have servers like below:

Level 1: Internet - Apache 2.2 HTTP server + mod_proxy_balancer (www.mydomain.com)
Level 2: Intranet - Oracle WebLogic Managed server 1 (clustered) (intradomain1.com - 10.10.10.133)
Level 2: Intranet - Oracle WebLogic Managed server 2 (clustered) (intradomain2.com - 10.10.10.134)


httpd.conf:

....

  
#Switching off facilities of forwarding proxy server
ProxyRequests Off

#Actual balancing settings with two members of balancer group. Balancer is accessed by balancer://lb link.
#ProxySet lbmethod sets balancer load-balance method as byrequest to perform weighted request counting.
#loadfactor is normalized weighted load applied to the worker. I set it to 50/50 to equal balancing between nodes.
#route is a value appended to session id. Usually used with inside balancers, for instance, when we need to used predefined requests direction using subsequent balancers.

<Proxy>
  BalancerMember http://10.10.10.133:7003 loadfactor=50 route=r1
  BalancerMember http://10.10.10.134:7003 loadfactor=50 route=r2
  ProxySet lbmethod=byrequest
</Proxy>

#Allow everyone to access any proxied content
<Proxy *>
Order deny,allow
Allow from all
</Proxy>

#Every request to http://www.mydomain.com/analytics goes through Apache balancer to pass into intranet Weblogic application servers.
ProxyPass /analytics balancer://lb/analytics/

#Reverse intranet servers requests back
ProxyPassReverse / balancer://lb/analytics/
ProxyPassReverse / http://10.10.10.133/analytics/
ProxyPassReverse / http://10.10.10.134/analytics/

#Set location accessable by http://www.mydomain.com/lbm to see actual balancing state.
<Location>
SetHandler balancer-manager
</Location>

ProxyPass directive allows remote servers to be mapped into the space of the local server; the local server does not act as a proxy in the conventional sense, but appears to be a mirror of the remote server. The local server is often called a reverse proxy or gateway. The path is the name of a local virtual path; url is a partial URL for the remote server and cannot include a query string.

ProxyPassReverse directive lets Apache adjust the URL in the Location, Content-Location and URI headers on HTTP redirect responses. This is essential when Apache is used as a reverse proxy (or gateway) to avoid by-passing the reverse proxy because of HTTP redirects on the backend servers which stay behind the reverse proxy.

Only the HTTP response headers specifically mentioned above will be rewritten. Apache will not rewrite other response headers, nor will it rewrite URL references inside HTML pages. This means that if the proxied content contains absolute URL references, they will by-pass the proxy. A third-party module that will look inside the HTML and rewrite URL references is Nick Kew's mod_proxy_html

.

For details please check documentation:
http://httpd.apache.org/docs/2.2/mod/mod_proxy.html


Please note with setting i've mentioned if there is no session's replication between application servers you could have a problems with application access or its work. The one of the other possible solution is to use session ID as identifier of the backend node e.g preventing of switching nodes in the same session (it's called sticky session). I'm going to describe in future posts how to make replication and how to use session ID to identify required destination.