OBIEE 12.2.1 Login Via Netscaler Proxyserver To WLS Admin Console Fails with Authentication Denied

Martijn Ceelen, iConsultancy, OBIEE Consultant

Login Via Netscaler LoadBalancer / Proxyserver To WLS Admin Console Fails With Authentication Denied

Problem Description

---------------------------------------------------

We are moving to a new proxyserver and after changing the hosts file to have the browser go through the new proxyserver, we get a console login screen but can no longer login.

As described in ( Doc ID 2419265.1 ) have enabled the web plugin in weblogic and set the header parameter WLProxySSL to ON in the proxyserver.

In the topology we have: Browser <HTTPS> LBR <HTTP/HTTPS> WLS

In several documents other header parameters are mentioned and with different syntax. So we wonder what are the exact header parameter requirements ...

Martijn Ceelen, iConsultancy, OBIEE Consultant

Additional information with diverse syntax of parameters to set, that I have found on fora

Does anybody have experience, what are the right ones, and how can I check what is coming in ?

• successful login showing Host header of the LBR hostname
  • Header from client:[Host]=[<LBR HOSTNAME.DOMAIN>]
  • Solution configuration must come from LBR vendor. For Loadbalancers such as F5/BigIP set WL-Proxy-SSL to ensure Host header is passed to other devices and then to Oracle Weblogic Server
• WLProxySSLPassThrough ON
• WLProxySSL ON
• If you also have HTTP coming into your load balancer you will want to make sure that you remove any incoming WL-Proxy-SSL header (na redirect?)
• SimulateHttps On
• RequestHeader set IS_SSL ssl
• RequestHeader set WL-Proxy-SSL true
• WLProxyPassThrough ON
• WLProxySSLPassThrough ON