SSL and Weblogic

As previously mentioned, I was doing an analysis of how PeopleSoft and Weblogic utilize SSL which was spawned by the announcement of POODLE.  I’m going to review my findings for Weblogic 10.3.6.x and then duplicate the analysis to see if anything is changed with Weblogic 12.1.2.  Weblogic 10.3.6.x is supported for any PeopleTools 8.50 – 8.53 installations.  If you are on an older release of Weblogic 10.3 you should upgrade your Weblogic. Continue reading

PeopleSoft and POODLE

POODLE has been a fairly common topic with security teams recently since Google announced the vulnerability.

There is plenty of reading available on the POODLE attack so I’m not going to go into too much detail but I’ll give a short description.  POODLE is a man-in-the-middle attack which uses an attackers ability to force the protocol of the server/client communication to fall back.  When the attacker can force the downgrade of the protocol to SSLv3 they can attack the weaknesses of that protocol.  SSLv3 has been around for a really long time, since 1996, and has been superseded by multiple versions of TLSv1.x.  TLSv1.2 is the latest version available and TLSv1.3 is currently in draft status.  As these new TLS versions were released they were implemented in new servers and applications, however for interoperability all the old protocols were also left active.

So are you vulnerable? As a PeopleSoft Admin/User/Developer do you need to worry about this?  Well, that depends.  Continue reading

Remastered 9.2 Application media

Some of you may have noticed this already but I recently saw that some of the PeopleSoft 9.2 Application media had been remastered.

  • HCM 9.2 was updated on E-delivery at the end of October.  It includes patches from Update Image 9.  Image 9 was also released as a certified Upgrade Demo Image.
  • FSCM 9.2 was updated at the end of September.  It includes patches from Update Image 5 which also released as a certified Upgrade Demo Image.
  • ELM 9.2 was updated in early October and contains patches from Update Image 6.  As with the others it also is a certified upgrade image.
  • CRM 9.2 looks updated at the end of September as well, but it does not indicate if any patches from an Update Image are included.  Since there is not currently a supported Upgrade Image other than CRM 9.2.000 it would not make sense that this media include the patches.  This may indicate it was updated because PeopleTools 8.53 was pulled and 8.54 added to the collection.  I have not downloaded it to look.

In addition the other change I noticed was that all PeopleTools 8.53 media has been pulled.  If you need something from the 8.53 media set you will need to open a non-tech SR.  This seems to be a change from the previous strategy of keeping the current plus one previous Tools set available for download.  I’m not on E-delivery all that often so who knows, maybe they changed that a while ago.

Either way, those looking to start upgrades or may have recently started the process using media they downloaded prior to end of September should evaluate where they are and possibly grab this new media.  Jumping straight to a Update Image would be beneficial.  Those looking to avoid PeopleTools 8.54 for some reason may want to avoid these though because at least HCM, FSCM, and ELM will already be 8.54 PeopleTools in the database.

New DataViewer Tool released

I’ve finally WeblogicRealTimemade a new version of the DataViewer tool available for download.  This new version includes new stand alone features as well.  I’ve added Real Time Weblogic monitoring and an Access Log Parser.  It also includes all the old charts for the Weblogic and Tuxedo monitor data files and some new ones.  This version requires Java 8.  I won’t be making new updates to the old version, but it will still be available for download if for some reason you can’t use Java 8.  I’ve posted new screenshots on the Monitoring Tools Screenshot page.  Another little improvement is the application should remember your last viewed data file and attempt to use it again the next time it is started.  Same goes for the data entered on the Real Time Weblogic Monitor configuration.  Download it here.  And read how to use the new viewer on the DataViewer page.

AccessLogParser

PeopleSoft PUM Images on Linux KVM

As we know, with the new PeopleSoft 9.2 applications came a new method of delivering updates via PeopleSoft Update Manager.  We now need to download fully functional VirtualBox images to get our patches.  We can also use these images for Demo environments and specific versions are useable for New Release Demos during application upgrades.  SES is even included in these images.  I’ve been using VirtualBox for years, since the original innotek days.  It works great for desktop use which is it’s intended use.  Sure you can set it up on a server and make it work in a more enterprise environment but I wanted to deploy the images to something I already had hosting some vm’s, Linux KVM.  If you want to run your images on VMWare, I recommend reading this post on running the images on VMWare.  So lets begin setting up a new PUM image for Linux KVM. Continue reading

8.54 PUM Images Released

Oracle released the HCM 9.2.008 PUM Image today, Aug 19th.  The ELM 9.2.005 PUM Image came out last week on Aug 12th.  Finance should be out next week.  These images are supposed to be delivered on the new 8.54.01 PeopleTools release.  These should be an easy way for Admins like ourselves or Oracle customers in general to kick the tires on some of the new PeopleTools features and middleware components.  You need to download them anyhow for patching right?

HCM weighs in at 34.7 GB while ELM is 28.4 GB.  Happy downloading.

8.54 PreRelease Notes Available

The PeopleSoft Technology Blog has announced the availability of the PreRelease notes for 8.54:

Some observations as I skimmed the document are:

  • Oracle Linux 6, Win 2012, and Win 2012 R2 support added, Win 2008 (R1 not R2) dropped
  • Client OS Windows 8.1 added, Windows 7 (32 bit) dropped
  • WebLogic 12.1.2 added, 10.3.6 dropped
  • Oracle 12, MSSQL 2014 added, Oracle 10.2.0.5, 11.2.0.3, and MSSQL 2008 dropped
  • Current browsers available added (Chrome, Firefox, IE 11, Safari), IE 8 Firefox 17 dropped
  • Tuxedo 12.1.1.0 added, Tuxedo 11gR1 dropped
  • Still uses Java 7
  • SES is 11.2.2.2, SES 11.1.2.2 dropped
  • Excel 32-bit dropped
  • New Fluid User Interface: moves away from ridge page layouts enhancing the use of CSS3, HTML5, and JavaScript.  Supposed to “scale gracefully between devices”.  Fluid page definitions are maintained within App Designer.  Adds Fluid Homepages, Tiles, Notification Framework, PeopleSoft Navigation Bar
  • Mobile Application Platform: Similar to the Fluid User Interface but utilizes RESTful web services
  • 64-bit Development environment!  App Designer, Data Mover, Change Assistant, the whole lot of them all now 64-bit.  Explains the dropped Win 7 (32-bit).
  • App Designer will have improved search functionality (reference, text), code auto-completion for PeopleCode, and new toolbar buttons to improve productivity
  • Enhancements to App Engine tracing: split files, naming convention, program section trace, combined output of PeopleCode and SQL into the AE trace file
  • Portable PS_HOME: Hard-coded paths and sym links within PS_HOME have been removed to further consolidate and allow a single PS_HOME to be shared across multiple environments
  • Two new metaSQL enhancements for Oracle added.  %SqlHint and %SelectDummyTable
  • Also you can now use Oracle Global Temporary Tables, Materialized Views, and the new 12c container/pluggable databases which allow multiple PS databases in the same instance, some may have used GTTs and Materialized Views in the past, but now App Designer will handle them.  Also, App Designer can now be used directly to partition tables and indexes on Oracle.
  • Domain caching changes allowing automatic monitoring and adjusting?  I’ll have to look into that one more.
  • A Push Notification Event Framework, maybe we can finally broadcast a message to all users via the system.
  • Several security enhancements, Oracle Secure Files for the report repository is one that jumped out at me.
  • There’s a lot of other stuff, Just go read it !

Read the foll post here, or find the notes directly on MOS here

Monitoring Tool updates

I have finally uploaded some updated versions of my monitoring tools. I’ve made only minor updates to the Weblogic monitoring tool. I created versions that work with Weblogic 9.2 and Weblogic 8.1, but they will be available by request only.  The viewer has had a few items added and can now be used to open the files generated from the newly released (but not really new) app monitoring tool.  Continue reading

Setup AWStats on IIS

AWStats is a great tool for parsing web server access logs of any kind.  If you are not familiar with it, I recommend checking out the Live Demo to see what kind of data it can provide. I’ve been using it for a long time to provide stats on all sorts of different websites and applications (including PeopleSoft). It’s just another great tool for in any Admin’s toolbox.  Normally I run it on Linux but recently I setup AWStats on IIS which was actually pretty painless.  Here is what I did.

What you need:
IIS, Perl, AWStats Continue reading