Tag: Security

  • Testing web applications SSO with Keycloak

    Testing web applications SSO with Keycloak

    Testing web applications SSO with Keycloak Usually when you are developing a new feature or fixing an issue, you want to focus in your business logic. If your application delegates the authentication in some SSO system you usually mocks the response from this last one. However for integration tests, it is nice to be able

    Explore →

  • Oracle VPD as a safeguard for DML

    Oracle VPD as a safeguard for DML

    Oracle VPD as a safeguard for DML Virtual Private Databases (VPD) is an Enterprise Edition feature related to security. It restricts the scope of Data Manipulation Language to a subset of the table rows by transparently adding a where clause before executing them. It is also called Row-Level Security (RLS). Where the policy is enabled,

    Explore →

  • Creating TLS certificates using Kubernetes API

    Creating TLS certificates using Kubernetes API

    Creating TLS certificates using Kubernetes API The purpose of this post is to explain the need of adding encryption to the network communications between containers, and how to achieve it at application level, creating Transport Layer Security (TLS) certificates with the already provided Kubernetes APIs. Is it necessary to add encryption between containers? When running

    Explore →

  • SSO for Oracle REST DataServices

    SSO for Oracle REST DataServices

    SSO for Oracle REST DataServices Hello there, Recently I’ve started to dig into the ORDS authentication and more specifically in how to make it work against my Oracle WebLogic server authenticators. ORDS Service Definition The first step is to create or define a REST service in our Oracle database. The oracle-base.com guys have a fantastic

    Explore →

  • Oracle Weblogic SAML2 Authorization

    Oracle Weblogic SAML2 Authorization

    Oracle Weblogic SAML2 Authorization Grammatically the title has no much sense, but those were the keywords that I used to type a couple of years ago when I started to work in the integration of our JEE applications into our SSO system. Oracle Weblogic provides a module that supports the SAML2 protocol. SAML, Security Assertion

    Explore →

  • Java SOAP client with certificate authentication

    Java SOAP client with certificate authentication

    Java SOAP client with certificate authentication Maybe you are wondering why a java entry in a databases blog? The answer is simple, at CERN, the Infrastucture and Middleware Services section (aka IMS) is part of the Database Services , and, among many other things, we take care of the Java application servers for our users.

    Explore →

  • Unified auditing performance

    Unified auditing performance

    Unified auditing performance In my previous blog post (http://db-blog.web.cern.ch/blog/szymon-skorupinski/2014-05-migrating-oracle-database-12c-what-do-auditing) I provided you with number of reasons why unified auditing looks very promising and should be seriously considered while migrating to 12c. Nonetheless, I was not talking at all about performance – which also seems to be greatly improved. Main source of the improvement is related

    Explore →

  • Migrating to Oracle Database 12c – what to do with auditing?

    Migrating to Oracle Database 12c – what to do with auditing?

    Migrating to Oracle Database 12c – what to do with auditing? If you consider migrating to Oracle Database 12c, no matter if you think of development, testing or production environments, one of many decisions you need to take is to define what to do with the auditing. The biggest new feature in this area is

    Explore →