{"id":6455,"date":"2024-01-09T12:43:00","date_gmt":"2024-01-09T11:43:00","guid":{"rendered":"https:\/\/promatis.com\/ch\/accessing-sys-ebs_system-apps-and-weblogic-password-in-cloud-manager-post-clone-scripts\/"},"modified":"2024-01-10T08:48:18","modified_gmt":"2024-01-10T07:48:18","slug":"accessing-sys-ebs_system-apps-and-weblogic-password-in-cloud-manager-post-clone-scripts","status":"publish","type":"post","link":"https:\/\/promatis-test.de\/ch\/accessing-sys-ebs_system-apps-and-weblogic-password-in-cloud-manager-post-clone-scripts\/","title":{"rendered":"Accessing SYS, EBS_SYSTEM, APPS and weblogic password in Cloud Manager Post-Clone scripts"},"content":{"rendered":"<p>[et_pb_section fb_built=\"1\" custom_padding_last_edited=\"on|tablet\" disabled_on=\"off|off|off\" admin_label=\"Sektion\" _builder_version=\"4.17.6\" _module_preset=\"default\" custom_padding=\"5vh||5vh||true|false\" custom_padding_tablet=\"5vh||5vh||true|false\" custom_padding_phone=\"5vh||5vh||true|false\" global_module=\"6064\" locked=\"off\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_row column_structure=\"1_4,3_4\" _builder_version=\"4.17.6\" _module_preset=\"default\" custom_margin=\"||0px||false|false\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_column type=\"1_4\" _builder_version=\"4.17.6\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_image src=\"https:\/\/promatis.com\/wp-content\/uploads\/2022\/07\/johannes-michler.png\" alt=\"Johannes Michler PROMATIS Horus Oracle\" title_text=\"johannes-michler\" _builder_version=\"4.20.2\" _module_preset=\"default\" width=\"90%\" custom_margin=\"0vh||0vh||true|false\" border_radii=\"on|516px|516px|516px|516px\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][\/et_pb_image][\/et_pb_column][et_pb_column type=\"3_4\" _builder_version=\"4.17.6\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_text ul_type=\"square\" _builder_version=\"4.23.1\" _module_preset=\"default\" text_font=\"Open Sans||||||||\" link_font=\"Open Sans||||on|||gcid-0becd5ff-19fc-4653-a221-c8c75771a987|\" link_text_color=\"gcid-0becd5ff-19fc-4653-a221-c8c75771a987\" link_font_size=\"22px\" ul_font=\"Open Sans||||||||\" ul_font_size=\"17px\" ul_line_height=\"1.6em\" header_text_color=\"gcid-32812186-bc94-4de4-814c-2bf202477fd5\" header_2_text_color=\"gcid-32812186-bc94-4de4-814c-2bf202477fd5\" header_2_line_height=\"1.6em\" header_3_text_color=\"gcid-32812186-bc94-4de4-814c-2bf202477fd5\" header_4_text_color=\"gcid-32812186-bc94-4de4-814c-2bf202477fd5\" header_5_text_color=\"gcid-32812186-bc94-4de4-814c-2bf202477fd5\" header_6_text_color=\"gcid-32812186-bc94-4de4-814c-2bf202477fd5\" header_6_font_size=\"16px\" custom_margin=\"2vh||0px||false|false\" custom_padding=\"||||true|false\" hover_enabled=\"0\" text_font_size_tablet=\"20px\" text_font_size_phone=\"17px\" text_font_size_last_edited=\"on|tablet\" header_font_size_tablet=\"\" header_font_size_phone=\"28px\" header_font_size_last_edited=\"on|phone\" global_colors_info=\"{%22gcid-32812186-bc94-4de4-814c-2bf202477fd5%22:%91%22header_text_color%22,%22header_2_text_color%22,%22header_3_text_color%22,%22header_4_text_color%22,%22header_5_text_color%22,%22header_6_text_color%22,%22header_text_color%22,%22header_2_text_color%22,%22header_3_text_color%22,%22header_4_text_color%22,%22header_5_text_color%22,%22header_6_text_color%22,%22header_text_color%22,%22header_2_text_color%22,%22header_3_text_color%22,%22header_4_text_color%22,%22header_5_text_color%22,%22header_6_text_color%22%93,%22gcid-0becd5ff-19fc-4653-a221-c8c75771a987%22:%91%22link_text_color%22%93}\" theme_builder_area=\"post_content\" sticky_enabled=\"0\"]<\/p>\n<div><a href=\"\/.\/ch\/author\/jmichler\/\" rel=\"author\">Johannes Michler<\/a><\/div>\n<p>[\/et_pb_text][et_pb_text ul_type=\"square\" _builder_version=\"4.20.0\" _module_preset=\"default\" text_font=\"Open Sans||||||||\" link_font=\"Open Sans||||on||||\" link_text_color=\"#00A9A0\" ul_font=\"Open Sans||||||||\" ul_font_size=\"17px\" ul_line_height=\"1.6em\" header_text_color=\"gcid-32812186-bc94-4de4-814c-2bf202477fd5\" header_2_text_color=\"gcid-32812186-bc94-4de4-814c-2bf202477fd5\" header_2_line_height=\"1.6em\" header_3_text_color=\"gcid-32812186-bc94-4de4-814c-2bf202477fd5\" header_4_text_color=\"gcid-32812186-bc94-4de4-814c-2bf202477fd5\" header_5_text_color=\"gcid-32812186-bc94-4de4-814c-2bf202477fd5\" header_6_text_color=\"gcid-32812186-bc94-4de4-814c-2bf202477fd5\" header_6_font_size=\"16px\" custom_margin=\"1vh||0px||false|false\" custom_padding=\"||||true|false\" text_font_size_tablet=\"20px\" text_font_size_phone=\"17px\" text_font_size_last_edited=\"on|tablet\" header_font_size_tablet=\"\" header_font_size_phone=\"28px\" header_font_size_last_edited=\"on|phone\" global_colors_info=\"{%22gcid-32812186-bc94-4de4-814c-2bf202477fd5%22:%91%22header_text_color%22,%22header_2_text_color%22,%22header_3_text_color%22,%22header_4_text_color%22,%22header_5_text_color%22,%22header_6_text_color%22%93}\" theme_builder_area=\"post_content\"]<\/p>\n<p><img decoding=\"async\" src=\"\/.\/wp-content\/uploads\/2023\/02\/ACE-Director-Logo_175x51.jpg\" \/><br \/><strong>Executive Vice President<\/strong> \u2013\u00a0Head of Platforms\u00a0&\u00a0Development<\/p>\n<p>[\/et_pb_text][et_pb_text ul_type=\"square\" _builder_version=\"4.20.0\" _module_preset=\"default\" text_font=\"Open Sans||||||||\" text_text_color=\"gcid-0becd5ff-19fc-4653-a221-c8c75771a987\" text_font_size=\"22px\" link_font=\"Open Sans||||on||||\" link_text_color=\"#00A9A0\" ul_font=\"Open Sans||||||||\" ul_font_size=\"17px\" ul_line_height=\"1.6em\" header_text_color=\"gcid-32812186-bc94-4de4-814c-2bf202477fd5\" header_2_text_color=\"gcid-32812186-bc94-4de4-814c-2bf202477fd5\" header_2_line_height=\"1.6em\" header_3_text_color=\"gcid-32812186-bc94-4de4-814c-2bf202477fd5\" header_4_text_color=\"gcid-32812186-bc94-4de4-814c-2bf202477fd5\" header_5_text_color=\"gcid-32812186-bc94-4de4-814c-2bf202477fd5\" header_6_text_color=\"gcid-32812186-bc94-4de4-814c-2bf202477fd5\" header_6_font_size=\"16px\" custom_margin=\"5px||0px||false|false\" custom_padding=\"||||true|false\" text_font_size_tablet=\"20px\" text_font_size_phone=\"17px\" text_font_size_last_edited=\"on|tablet\" header_font_size_tablet=\"\" header_font_size_phone=\"28px\" header_font_size_last_edited=\"on|phone\" global_colors_info=\"{%22gcid-32812186-bc94-4de4-814c-2bf202477fd5%22:%91%22header_text_color%22,%22header_2_text_color%22,%22header_3_text_color%22,%22header_4_text_color%22,%22header_5_text_color%22,%22header_6_text_color%22,%22header_text_color%22,%22header_2_text_color%22,%22header_3_text_color%22,%22header_4_text_color%22,%22header_5_text_color%22,%22header_6_text_color%22,%22header_text_color%22,%22header_2_text_color%22,%22header_3_text_color%22,%22header_4_text_color%22,%22header_5_text_color%22,%22header_6_text_color%22%93,%22gcid-0becd5ff-19fc-4653-a221-c8c75771a987%22:%91%22text_text_color%22%93}\" theme_builder_area=\"post_content\"]<a target=\"_blank\" href=\"https:\/\/www.linkedin.com\/in\/johannes-michler-099892ab?originalSubdomain=de\" rel=\"noopener\"><i class=\"fab fa-linkedin\"><\/i><\/a><a target=\"_blank\" href=\"https:\/\/www.xing.com\/profile\/Johannes_Michler3\" rel=\"noopener\"><i class=\"fab fa-xing-square\"><\/i><\/a><a target=\"_blank\" href=\"mailto:johannes.michler@promatis.de\" rel=\"noopener\"><i class=\"fas fa-envelope\"><\/i><\/a>[\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=\"1\" _builder_version=\"4.16\" _module_preset=\"default\" custom_padding=\"0vh||10vh||false|false\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_row use_custom_gutter=\"on\" _builder_version=\"4.17.3\" _module_preset=\"default\" custom_padding=\"0px||0px||true|false\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_column type=\"4_4\" _builder_version=\"4.16\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_text _builder_version=\"4.23.1\" _module_preset=\"default\" background_enable_color=\"off\" custom_padding=\"0px||0px||true|false\" inline_fonts=\"Times New Roman\" global_colors_info=\"{%22gcid-32812186-bc94-4de4-814c-2bf202477fd5%22:%91%22header_text_color%22,%22header_2_text_color%22,%22header_3_text_color%22%93,%22gcid-0becd5ff-19fc-4653-a221-c8c75771a987%22:%91%22background_color%22%93}\" theme_builder_area=\"post_content\"]<\/p>\n<p>Oracle E-Business Suite Cloud Manager provides a powerful way to run and manage E-Business Suite environments on Oracle Cloud Infrastructure OCI.<\/p>\n<p>While the tooling covers many parts of the usual cloning steps, it is sometimes necessary to add some \"custom stuff\", e.g. modifying the ALLORACLE password, registering monitoring solutions, pausing some concurrent requests and so on.<\/p>\n<p>Luckily, for quite some time, Cloud Manager has allowed to register custom scripts as (final) cloning steps in Cloud Manager.<\/p>\n<p>Unfortunately, it is not possible to access the environment passwords in those scripts. So far, I've worked around this in two (suboptimal) ways:<\/p>\n<ul>\n<li>Ask for the relevant passwords as parameters of the post-clone script. Of course this is inconvenient since the user must then enter the passwords three times (two times during the standard steps, where there is also a confirmation) and one more time for the post-clone. Imagine if there was a typo in there...<\/li>\n<li>Extract APPS and WebLogic password with some WLST tools out of the running environment. For me, this approach has worked for quite some time; but actually, it qualifies as \"kind-of-hacking\", and it is furthermore not possible to get the SYS(TEM) or EBS_SYSTEM password in that way.<\/li>\n<\/ul>\n<p>With Release 23.3.1, Oracle finally allowed to change all those passwords conveniently during cloning, so I figured there has to be a better way to solve this.<\/p>\n<p>This is how I modified Cloud Manager to be able to access those passwords.<\/p>\n<p>Be aware: This is a potential security risk. But on the other side: If you're able to run a custom script on the EBS apps\/db tier as part of cloning, you probably have other means of causing harm as well anyway.<\/p>\n<h2>Modification of seeded extensible-task-executor.rb<\/h2>\n<p>Modify the \/u01\/install\/APPS\/apps-unlimited-ebs\/resources\/chef-repo\/cookbooks\/oracle-ebs-ext-fwk\/recipes\/extensible-task-executor.rb file as follows:<\/p>\n<pre>....\nelse\ninput_array.push(Shellwords.escape(arg_name) + \"=\" + Shellwords.escape(arg_value))\nend\n\nend\n\n#Hack JMichler:\nenc_ebs_system_pass = getNewEBSSystemUserPassword(\"#{node['chef_environment']}\")\nebs_system_password = `echo '#{enc_ebs_system_pass}'| base64 -d`.strip\npassword_array.push(Shellwords.escape('ebs_system_password') + \"=\" + Shellwords.escape(ebs_system_password))\n\nenc_apps_pass = getNewAppsPwd(\"#{node['chef_environment']}\")\napps_password = `echo '#{enc_apps_pass}'| base64 -d`.strip\npassword_array.push(Shellwords.escape('apps_password') + \"=\" + Shellwords.escape(apps_password))\n\nenc_wls_pass = getNewWeblogicPassword(\"#{node['chef_environment']}\")\nwls_password = `echo '#{enc_wls_pass}'| base64 -d`.strip\npassword_array.push(Shellwords.escape('wls_password') + \"=\" + Shellwords.escape(wls_password))\n\nenc_sys_pass = getDbcsSysDBAPwd(\"#{node['chef_environment']}\")\nsys_password = `echo '#{enc_sys_pass}'| base64 -d`.strip\npassword_array.push(Shellwords.escape('sys_password') + \"=\" + Shellwords.escape(sys_password))\n\n#HACK END\n# Download the task zip file, unzip and copy the script\nsetSubTaskStartedInConvergence(\"#{currentTask}\")\n....<\/pre>\n<p>Then, you need to load this modified script as follows:<\/p>\n<pre>knife cookbook upload -a -V -o \/u01\/install\/APPS\/apps-unlimited-ebs\/resources\/chef-repo\/cookbooks<\/pre>\n<p>This will pass the 4 seeded parameter of APPS, SYS, EBS_SYSTEM and WebLogic to your custom extensibility scripts.<\/p>\n<h2>Accessing the new parameters<\/h2>\n<p>You can then use those parameters in your custom tasks\/scripts. See <a href=\"https:\/\/docs.oracle.com\/cd\/E26401_01\/doc.122\/f35809\/T679330T681843.htm#cmg_extfwk_crwrapper\" target=\"_blank\" rel=\"noopener\">https:\/\/docs.oracle.com\/cd\/E26401_01\/doc.122\/f35809\/T679330T681843.htm#cmg_extfwk_crwrapper<\/a> for the general documentation on this. I modified that sample script and replaced the getSensitiveParameters function as follows:<\/p>\n<pre>function getSensitiveParameters(){\nwhile read key_password;\ndo\nuser_key=`{ echo \"$key_password\"; } | awk -F '=' '{print $1}'`;\n\n# In task-definition - parameter names are \"appsPassword\" and \"systemPassword\"\n\nif [[ \"${user_key}\" == \"apps_password\" ]]; then\nnewAppsPassword=`{ echo \"$key_password\"; } | awk -F '=' '{print $2}'`\nelif [[ \"${user_key}\" == \"ebs_system_password\" ]]; then\nnewEbsSystemPassword=`{ echo \"$key_password\"; } | awk -F '=' '{print $2}'`\nelif [[ \"${user_key}\" == \"wls_password\" ]]; then\nnewWeblogicPassword=`{ echo \"$key_password\"; } | awk -F '=' '{print $2}'`\nelif [[ \"${user_key}\" == \"sys_password\" ]]; then\nnewSysPassword=`{ echo \"$key_password\"; } | awk -F '=' '{print $2}'`\nelse\necho \"Incorrect arguments password for Sensitive Parameters\"\nexitWithUsage\nfi\ndone\n}<\/pre>\n<h2>Summary<\/h2>\n<p>The above procedure allows to access the seeded password parameters from your custom scripts. I've created an enhancement request to add this modification to the next release of Cloud Manager.<\/p>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section]<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Oracle E-Business Suite Cloud Manager provides a powerful way to run and manage E-Business Suite environments on Oracle Cloud Infrastructure OCI.<br \/>\nWhile the tooling covers many parts of the usual cloning steps, it is sometimes necessary to add some \"custom stuff\", e.g. modifying the ALLORACLE password, registering monitoring solutions, pausing some concurrent requests and so on.<\/p>\n","protected":false},"author":2,"featured_media":1243,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"on","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"categories":[23],"tags":[],"dipi_cpt_category":[],"class_list":["post-6455","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-techblog"],"_links":{"self":[{"href":"https:\/\/promatis-test.de\/ch\/wp-json\/wp\/v2\/posts\/6455"}],"collection":[{"href":"https:\/\/promatis-test.de\/ch\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/promatis-test.de\/ch\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/promatis-test.de\/ch\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/promatis-test.de\/ch\/wp-json\/wp\/v2\/comments?post=6455"}],"version-history":[{"count":0,"href":"https:\/\/promatis-test.de\/ch\/wp-json\/wp\/v2\/posts\/6455\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/promatis-test.de\/ch\/wp-json\/wp\/v2\/media\/1243"}],"wp:attachment":[{"href":"https:\/\/promatis-test.de\/ch\/wp-json\/wp\/v2\/media?parent=6455"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/promatis-test.de\/ch\/wp-json\/wp\/v2\/categories?post=6455"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/promatis-test.de\/ch\/wp-json\/wp\/v2\/tags?post=6455"},{"taxonomy":"dipi_cpt_category","embeddable":true,"href":"https:\/\/promatis-test.de\/ch\/wp-json\/wp\/v2\/dipi_cpt_category?post=6455"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}